Vulnerabilities CVE-2026-6801

CVE-2026-6801

Medium

Open

TLP:CLEAR

Context Blog <= 1.3.5 - Unauthenticated Sensitive Information Exposure via 'postID' Parameter

NVD CVE.org

AI Analysis

No AI analysis yet.

Description

The Context Blog theme for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.3.5 via the context_blog_modal_popup. This makes it possible for unauthenticated attackers to extract the content of password-protected posts.

Details

CVSS Score: 5.3
EPSS Score ⓘ: 0.24%

15.1th percentile
CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Confidence: 90%
Published: Jul 11, 2026
Last Modified: Jul 13, 2026

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.