Vulnerabilidades de Postmagthemes

🔔 Criar alerta RSS

CVEs publicadas que afetam produtos de Postmagthemes: 2 registro(s), com severidade, exploração e correções.

Somente exploradas (KEV) →

CVE-2026-6801 Média · 5.3 CWE-200 11/07/2026

Context Blog <= 1.3.5 - Unauthenticated Sensitive Information Exposure via 'postID' Parameter

The Context Blog theme for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.3.5 via the context_blog_modal_popup. This makes it possible for unauthenticated attackers to extract the content of password-protected posts.

CVE-2025-12074 Média · 5.3 CWE-200 18/02/2026

Context Blog <= 1.2.5 - Unauthenticated Private Post Disclosure

The Context Blog theme for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.2.5 via the 'context_blog_modal_popup' due to insufficient restrictions on which posts can be included. This makes it possible for unauthenticated attackers to extract data from password protected, private, or draft posts that they should not have access to.