Search Results (1 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-17517 1 Wordpress-extensions 1 Content Views 2026-11-11 5.3 Medium
The Content Views WordPress plugin before 4.5.1.2 does not check whether the user requesting a view is allowed to read the posts it returns, allowing unauthenticated attackers to obtain the title and content of non-public posts, such as draft, pending, private and scheduled posts, when a view has been configured to include them.