CVE-2026-15361 Content Views < 4.5 - Subscriber+ SQL Injection via preview_request

The Content Views WordPress plugin before 4.5 does not perform a capability check on one of its AJAX actions and does not properly sanitise attacker-supplied data before using it in a SQL query, allowing any authenticated user, including Subscribers, to perform SQL injection attacks...

CVE-2026-15361

The Content Views WordPress plugin (versions before 4.5 ) is vulnerable to SQL injection due to a lack of capability checks on an AJAX action and improper sanitization of attacker-supplied data in a SQL query. This allows any authenticated user , including those with Subscriber privileges, to per...

CVE-2023-1777: Exposure of Sensitive Information to an Unauthorized Actor

Mattermost allows an attacker to request a preview of an existing message when creating a new message via the createPost API call, disclosing the contents of the linked message...