SEPTEMBER 17, 2026
Live Feed
Back to database
Case File

CVE-2026-16983

MEDIUM · CVSS 4.3 EPSS 0.21%

Source: NVD + CISA KEV + EPSS · Published 2026-09-02 · Last synced 2026-09-17

CyberRota Analysis

AI-Generated

The Gutentor WordPress plugin prior to version 4.0.6 has a vulnerability that allows authenticated users with Subscriber roles to access plaintext passwords of password-protected posts due to improper context restrictions on a REST endpoint. This exposure could lead to unauthorized access to sensitive content, compromising user privacy and security. WordPress site administrators using this plugin should prioritize updating to the latest version to mitigate this risk.

CVE
CVE-2026-16983
Severity
MEDIUM
CVSS
4.3
EPSS
0.21%
WordPress

Original NVD Description

The Gutentor WordPress plugin before 4.0.6 does not apply the correct context restriction to one of its REST endpoints, exposing the plaintext passwords of password-protected posts to any authenticated user with at least the Subscriber role.