UNKNOWN NVD

CVE-2026-78149

The Smart Post WordPress plugin before 4.0.8 does not check whether a post is password protected before returning its content and its stored password through a

The Smart Post WordPress plugin before 4.0.8 does not check whether a post is password protected before returning its content and its stored password through an unauthenticated AJAX action, allowing unauthenticated users to read protected post content and the password that guards it.

References

https://wpscan.com/vulnerability/8140528f-27d4-485c-ad63-4dcaa3932af2/

Published: 2026-09-05 · Source: NVD · Feed updated: 2026-09-05

This unknown severity vulnerability was published on 2026-09-05 via NVD.

vulnfeed aggregates 10185 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.