SEPTEMBER 18, 2026
Live Feed
Back to database
Case File

CVE-2026-6801

MEDIUM · CVSS 5.3 EPSS 0.24%

Source: NVD + CISA KEV + EPSS · Published 2026-07-11 · Last synced 2026-08-10

CyberRota Analysis

AI-Generated

The Context Blog theme for WordPress versions up to 1.3.5 is vulnerable to sensitive information exposure, allowing unauthenticated attackers to access the content of password-protected posts through the context_blog_modal_popup feature. This vulnerability could lead to unauthorized disclosure of sensitive data, making it critical for WordPress site administrators using this theme to prioritize updates and implement security measures. Users of this theme should act promptly to mitigate potential risks to their site's confidentiality.

CVE
CVE-2026-6801
Severity
MEDIUM
CVSS
5.3
EPSS
0.24%
WordPress

Original NVD Description

The Context Blog theme for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.3.5 via the context_blog_modal_popup. This makes it possible for unauthenticated attackers to extract the content of password-protected posts.