CVE Intelligence

Vulnerabilidades do Postmagthemes Context Blog

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Postmagthemes Context Blog: 2 registro(s), com versões afetadas e correções.

CVE-2026-6801 Média · 5.3 CWE-200 11/07/2026
Context Blog <= 1.3.5 - Unauthenticated Sensitive Information Exposure via 'postID' Parameter
The Context Blog theme for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.3.5 via the context_blog_modal_popup. This makes it possible for unauthenticated attackers to extract the content of password-protected posts.
CVE-2025-12074 Média · 5.3 CWE-200 18/02/2026
Context Blog <= 1.2.5 - Unauthenticated Private Post Disclosure
The Context Blog theme for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.2.5 via the 'context_blog_modal_popup' due to insufficient restrictions on which posts can be included. This makes it possible for unauthenticated attackers to extract data from password protected, private, or draft posts that they should not have access to.