CVE-2026-10823

The CVE concerns the WordPress plugin YMC Smart Filter prior to version 3.11.3 . The issue arises from improper authorization of a REST API endpoint and lack of validation of a user-supplied query parameter, enabling unauthenticated access to the titles and content of private, draft, and other no...