WordPress <= 6.9.1 - Missing Authorization to Authenticated (Author+) Sensitive Information Disclosure via query-attachments AJAX Endpoint

WordPress core is vulnerable to Missing Authorization in all versions up to and including 6.9.1. This is due to a missing capability check on the `uploadedToTitle` and `uploadedToLink` fields in the `wp_prepare_attachment_for_js()` function. When querying media attachments via the AJAX `query-attachments` endpoint, the response includes the parent post's title without verifying whether the current user has `read_post` permission on the parent post. This makes it possible for authenticated attackers with Author-level access to discover the titles of private, draft, and restricted posts that have media attachments.