CVE-2026-80333
The Solace Extra WordPress plugin before 1.7.2 does not perform any authorization or post-status checks on its front-end preview routes, all
CVSS
—
Sin CVSS
EPSS
0.2%
p14
KEV
—
Exploit Today
4
0-100
Publicado: 30 sept 2026 · Última mod.: 30 sept 2026
0.1%EPSS · 30 días0.2%
2026-09-302026-10-20
The Solace Extra WordPress plugin before 1.7.2 does not perform any authorization or post-status checks on its front-end preview routes, allowing unauthenticated visitors to read the rendered content of non-published posts and pages of any type that WordPress would otherwise not serve.
Sin CVEs relacionados por CWE o producto.