Lucene search
+L

7 matches found

NVD
NVD
•added 2026/07/11 7:16 a.m.•38 views

CVE-2026-6801

The Context Blog theme for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.3.5 via the contextblogmodalpopup. This makes it possible for unauthenticated attackers to extract the content of password-protected posts...

5.3CVSS0.00358EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/07/11 5:35 a.m.•18 views

CVE-2026-6801 Context Blog <= 1.3.5 - Unauthenticated Sensitive Information Exposure via 'postID' Parameter

The Context Blog theme for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.3.5 via the contextblogmodalpopup. This makes it possible for unauthenticated attackers to extract the content of password-protected posts...

5.3CVSS5.8AI score0.00358EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/07/11 5:35 a.m.•11 views

CVE-2026-6801

The Context Blog theme for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.3.5 via the contextblogmodalpopup. This makes it possible for unauthenticated attackers to extract the content of password-protected posts...

5.3CVSS6.1AI score0.00358EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/11 12:00 a.m.•0 views

CVE-2026-6801: Exposure of Sensitive Information to an Unauthorized Actor

The Context Blog theme for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.3.5 via the contextblogmodalpopup. This makes it possible for unauthenticated attackers to extract the content of password-protected posts...

5.3CVSS5.7AI score0.00358EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/02/19 7:28 a.m.•18 views

CVE-2025-12074

The Context Blog theme for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.2.5 via the 'contextblogmodalpopup' due to insufficient restrictions on which posts can be included. This makes it possible for unauthenticated attackers to extract data from passwor...

5.3CVSS5.6AI score0.00349EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/02/18 4:35 a.m.•15 views

CVE-2025-12074

The Context Blog theme for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.2.5 via the 'contextblogmodalpopup' due to insufficient restrictions on which posts can be included. This makes it possible for unauthenticated attackers to extract data from passwor...

5.3CVSS5.6AI score0.00349EPSS
SaveExploits0References6
Patchstack
Patchstack
•added 2026/02/17 11:45 p.m.•23 views

WordPress Context Blog theme <= 1.2.5 - Unauthenticated Private Post Disclosure vulnerability

Unauthenticated Private Post Disclosure vulnerability discovered by jsonc in WordPress Theme Context Blog versions = 1.2.5...

5.3CVSS5.5AI score0.00349EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder