Skip to content
Sign in
3.7 Low

CVE-2026-81348 The My Private Site WordPress plugin before 4.2.3 does not apply its site-privacy access control to certain…

Description

The My Private Site WordPress plugin before 4.2.3 does not apply its site-privacy access control to certain unauthenticated front-end read surfaces, allowing unauthenticated users to view post content, comments and post URLs from a site the administrator placed behind mandatory login.

Affected products and versions

Product Affected versions Fixed in
My Private Site 4.2 earliest → < 4.2.3 4.2.3

Other CVEs of My Private Site

The 2 CVEs of My Private Site →
CVE-2022-1627 The My Private Site WordPress plugin before 3.0.8 does not have CSRF check in place when updating its settings, which… Not rated
Track this CVE