CVE Intelligence

Postmagthemes vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Postmagthemes products: 2 record(s), with severity, exploitation and fixes.

Context Blog 2

Exploited only (KEV) →

CVE-2026-6801 Medium · 5.3 CWE-200 Jul 11, 2026
Context Blog <= 1.3.5 - Unauthenticated Sensitive Information Exposure via 'postID' Parameter
The Context Blog theme for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.3.5 via the context_blog_modal_popup. This makes it possible for unauthenticated attackers to extract the content of password-protected posts.
CVE-2025-12074 Medium · 5.3 CWE-200 Feb 18, 2026
Context Blog <= 1.2.5 - Unauthenticated Private Post Disclosure
The Context Blog theme for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.2.5 via the 'context_blog_modal_popup' due to insufficient restrictions on which posts can be included. This makes it possible for unauthenticated attackers to extract data from password protected, private, or draft posts that they should not have access to.