Description
The Context Blog theme for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.3.5 via the context_blog_modal_popup. This makes it possible for unauthenticated attackers to extract the content of password-protected posts.
Analysis and contextual insights are available on OpenCVE Cloud.
Remediation
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
Advisories
No advisories yet.
References
History
Sat, 11 Jul 2026 09:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Postmagthemes
Postmagthemes context Blog Wordpress Wordpress wordpress |
|
| Vendors & Products |
Postmagthemes
Postmagthemes context Blog Wordpress Wordpress wordpress |
Sat, 11 Jul 2026 06:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | The Context Blog theme for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.3.5 via the context_blog_modal_popup. This makes it possible for unauthenticated attackers to extract the content of password-protected posts. | |
| Title | Context Blog <= 1.3.5 - Unauthenticated Sensitive Information Exposure via 'postID' Parameter | |
| Weaknesses | CWE-200 | |
| References |
| |
| Metrics |
cvssV3_1
|
Status: PUBLISHED
Assigner: Wordfence
Published:
Updated: 2026-07-11T05:35:46.896Z
Reserved: 2026-04-21T14:48:11.329Z
Link: CVE-2026-6801
No data.
No data.
No data.
OpenCVE Enrichment
Updated: 2026-07-11T08:45:03Z
Weaknesses