Aller au contenu
Se connecter
4.3 Moyenne

CVE-2026-16983 The Gutentor WordPress plugin before 4.0.6 does not apply the correct context restriction to one of its REST endpoints,…

Description

The Gutentor WordPress plugin before 4.0.6 does not apply the correct context restriction to one of its REST endpoints, exposing the plaintext passwords of password-protected posts to any authenticated user with at least the Subscriber role.

Produits et versions touchés

Produit Versions touchées Corrigé en
Gutentor 4.0 premières → < 4.0.6 4.0.6

Autres CVE de Gutentor

Les 3 CVE de Gutentor →
CVE-2025-1986 The Gutentor WordPress plugin before 3.4.7 does not sanitize and escape a parameter before using it in a SQL statement,… 4.1 Moyenne CVE-2024-5417 The Gutentor WordPress plugin before 3.3.6 does not validate and escape some of its block options before outputting… 5.4 Moyenne
Suivre cette CVE