CVE-2026-14195
UNKNOWN
NVD
CVSS Score
0
Severity
UNKNOWN
Published
Aug 01, 2026
Vendor
unknown
Description
The Brizy WordPress plugin before 2.8.18 does not properly verify authorization on a request handler before returning post content, allowing users with the Contributor role or higher to read the content of arbitrary posts, including other users' private, pending, and draft posts.