CVE-2026-18037

The Create WordPress plugin by Mediavine (versions prior to 2.5.4 ) contains an authorization vulnerability within its public REST API routes . Due to a lack of proper authorization checks, an unauthenticated attacker can access and read content that was intended to remain unpublished. Furthermor...