3.7
Faible
CVE-2026-81348 The My Private Site WordPress plugin before 4.2.3 does not apply its site-privacy access control to certain…
Description
The My Private Site WordPress plugin before 4.2.3 does not apply its site-privacy access control to certain unauthenticated front-end read surfaces, allowing unauthenticated users to view post content, comments and post URLs from a site the administrator placed behind mandatory login.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| My Private Site 4.2 | premières → < 4.2.3 | 4.2.3 |