In WordPress before 5.2.4, unauthenticated viewing of certain content is possible because the static query property is mishandled.
{ "urgency": "not yet assigned" }
"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2019-17671.json"