2.7
Low
CVE-2026-14195 The Brizy WordPress plugin before 2.8.18 does not properly verify authorization on a request handler before returning…
Description
The Brizy WordPress plugin before 2.8.18 does not properly verify authorization on a request handler before returning post content, allowing users with the Contributor role or higher to read the content of arbitrary posts, including other users' private, pending, and draft posts.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Brizy 2.8 | earliest → < 2.8.18 | 2.8.18 |
Other CVEs of Brizy
The 4 CVEs of Brizy →
CVE-2026-16070
The Brizy WordPress plugin before 2.8.19 does not properly verify authorization on the object being modified before…
2.7
Low
CVE-2026-16069
The Brizy WordPress plugin before 2.8.19 does not sanitize or escape featured-image focal-point coordinates submitted…
6.8
Medium
CVE-2026-16068
The Brizy WordPress plugin before 2.8.19 does not properly restrict who can modify its site-global design data and does…
3.5
Low