CVE-2026-80333
The Solace Extra WordPress plugin before 1.7.2 does not perform any authorization or post-status checks on its front-end preview routes, all
CVSS
—
No CVSS
EPSS
0.2%
p14
KEV
—
Exploit Today
4
0-100
Published: Sep 30, 2026 · Last modified: Sep 30, 2026
0.1%EPSS · 30 days0.2%
2026-09-302026-10-20
The Solace Extra WordPress plugin before 1.7.2 does not perform any authorization or post-status checks on its front-end preview routes, allowing unauthenticated visitors to read the rendered content of non-published posts and pages of any type that WordPress would otherwise not serve.
No related CVEs by CWE or product.