low2.7
CVE-2026-14195
The Brizy WordPress plugin before 2.8.18 does not properly verify authorization on a request handler before returning post content, allowing users with the Con…
Impact
The Brizy WordPress plugin before 2.8.18 does not properly verify authorization on a request handler before returning post content, allowing users with the Contributor role or higher to read the content of arbitrary posts, including other users' private, pending, and draft posts.
Affected products
| Product | Affected versions |
|---|---|
| Brizy WordPress Plugin | before 2.8.18 |
Versions were read from the advisory text. No structured product data has been published for this record yet.