CVE-2026-14195

Description

The Brizy WordPress plugin before 2.8.18 does not properly verify authorization on a request handler before returning post content, allowing users with the Contributor role or higher to read the content of arbitrary posts, including other users' private, pending, and draft posts.

References

• https://wpscan.com/vulnerability/2ed270b0-c01e-4615-b365-3455c161a2d9/