The WordPress plugin called Restrict User Access – Ultimate Membership & Content Protection has a security issue in all versions up to and including 2.5. This allows people who are not logged in to access and view the content of posts and pages through the API.