THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-81348 (LOW 3.7) — The My Private Site WordPress plugin before 4.2.3 does not apply its site-privacy access control to certain unauthenticated front-end read surfaces, allowing unauthenticated users to view post content, comments and post URLs from a site the administrator placed behind mandatory

[NVD] CVE-2026-81348 (LOW 3.7) — The My Private Site WordPress plugin before 4.2.3 does not apply its site-privacy access control to certain unauthenticated front-end read surfaces, allowing unauthenticated users to view post content, comments and post URLs from a site the administrator placed behind mandatory

mednvdPublished 2026-09-05

CVE-2026-81348 CVSS: 3.7 LOW Published: 2026-09-05T07:17:12.710

The My Private Site WordPress plugin before 4.2.3 does not apply its site-privacy access control to certain unauthenticated front-end read surfaces, allowing unauthenticated users to view post content, comments and post URLs from a site the administrator placed behind mandatory login.

Indicators of compromise

CVE-2026-81348cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-81348