Approved changes feed: RSS · Atom

cpe:2.3:a:postmagthemes:context_blog:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorPostmagthemes (d0a338b7-d48d-5562-8823-7c97d2dec761)
ProductContext Blog (8ed0862b-b3ff-55d1-81f6-e73c502f549b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-6801 vulnerable 2026-07-29 01:06:21.202513 Context Blog <= 1.3.5 - Unauthenticated Sensitive Information Exposure via 'postID' Parameter
MEDIUM (5.3)
The Context Blog theme for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.3.5 via the context_blog_modal_popup. This makes it possible for unauthenticated attackers to extract the content of password-protected posts.
Published: 2026-07-11T05:35:46.896Z
Updated: 2026-07-13T14:39:42.665Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-12074 vulnerable 2026-06-08 07:04:29.644725 Context Blog <= 1.2.5 - Unauthenticated Private Post Disclosure
MEDIUM (5.3)
The Context Blog theme for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.2.5 via the 'context_blog_modal_popup' due to insufficient restrictions on which posts can be included. This makes it possible for unauthenticated attackers to extract data from password protected, private, or draft posts that they should not have access to.
Published: 2026-02-18T04:35:41.852Z
Updated: 2026-04-08T16:42:23.405Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.