Blog post id enumeration can lead to unwanted information disclosure
With the rampant speculation there will be a new Raspberry Pi model released next week, I was wondering if the official Raspberry Pi blog might reveal anything of interest; they just posted a Four Years of Pi blog post on the 26th, which highlighted the past four years, and mentioned the excitement surrounding 4th anniversary of Pi sales, coming up on February 29th, 2016.
Glancing at the blog's source, I noticed it looks like a Wordpress blog (using httpie on the cli):
$ http https://www.raspberrypi.org/blog/four-years-of-pi/ | grep generator
<meta name="generator" content="WordPress 4.4.2" />Having set up a few WP sites in the past, I knew there was a simple way to load content by its ID, using a URL in the form: