Security Advisory
CVE-2026-14195
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
The Brizy WordPress plugin before 2.8.18 does not properly verify authorization on a request handler before returning post content, allowing users with the Contributor role or higher to read the content of arbitrary posts, including other users' private, pending, and draft posts.