Document Embedder < 1.7.5 - Unauthenticated Arbitrary Private/Draft Post Title Disclosure

The plugin contains a REST endpoint, which could allow unauthenticated users to enumerate the title of arbitrary private and draft posts.

https://example.com/wp-json/doc/v1/single/509 (509 being the ID of a private/draft Post)