medium5.3
CVE-2026-78149
The Smart Post WordPress plugin before 4.0.8 does not check whether a post is password protected before returning its content and its stored password through a…
Impact
The Smart Post WordPress plugin before 4.0.8 does not check whether a post is password protected before returning its content and its stored password through an unauthenticated AJAX action, allowing unauthenticated users to read protected post content and the password that guards it.
Affected products
| Product | Affected versions |
|---|---|
| Smart Post WordPress Plugin | before 4.0.8 |
Versions were read from the advisory text. No structured product data has been published for this record yet.