Access violation vulnerability in Omnipress 1.5.4

The Omnipress plugin for WordPress has a security issue that can expose information. This affects all versions up to 1.5.4. The problem is with the megamenu block, which doesn’t have enough restrictions on which posts can be included. This means that people who are logged in and have Contributor-level access or above can access data from posts that are password protected, private, or still in draft form, even though they shouldn’t be able to.