{"id":"CVE-2026-81348","title":"The My Private Site  WordPress plugin before 4.2.3 does not apply its site-privacy access control to certain unauthenticated front-end read surfaces, allowing unauthenticated users to view post content, comments and post URLs from a site…","summary":"The My Private Site  WordPress plugin before 4.2.3 does not apply its site-privacy access control to certain unauthenticated front-end read surfaces, allowing unauthenticated users to view post content, comments and post URLs from a site…","severity":"low","cvss":3.7,"cvssVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cwe":["CWE-200"],"published":"2026-09-05","updated":"2026-09-08","sourceUpdated":"2026-09-08T19:09:21.310","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-81348","references":[{"url":"https://wpscan.com/vulnerability/54228ea4-eec6-4752-a16e-85209d4445b0/","label":"contact@wpscan.com"}],"tags":["nvd"],"epss":0.0028,"epssPercentile":0.18162,"ingestedAt":"2026-09-06T04:50:00.619Z","slug":"CVE-2026-81348","body":"## Overview\n\nThe My Private Site  WordPress plugin before 4.2.3 does not apply its site-privacy access control to certain unauthenticated front-end read surfaces, allowing unauthenticated users to view post content, comments and post URLs from a site the administrator placed behind mandatory login.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":20,"depthScoreParts":{"impact":20.4,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[{"seq":8243,"id":"CVE-2026-81348","ts":1788919993855,"field":"cvss","old":null,"new":"3.7"},{"seq":8242,"id":"CVE-2026-81348","ts":1788919993855,"field":"severity","old":"none","new":"low"},{"seq":8052,"id":"CVE-2026-81348","ts":1788919280817,"field":"cvss","old":"3.7","new":null},{"seq":8051,"id":"CVE-2026-81348","ts":1788919280817,"field":"severity","old":"low","new":"none"},{"seq":7861,"id":"CVE-2026-81348","ts":1788916354485,"field":"cvss","old":null,"new":"3.7"},{"seq":7860,"id":"CVE-2026-81348","ts":1788916354485,"field":"severity","old":"none","new":"low"},{"seq":7670,"id":"CVE-2026-81348","ts":1788915297519,"field":"cvss","old":"3.7","new":null},{"seq":7669,"id":"CVE-2026-81348","ts":1788915297519,"field":"severity","old":"low","new":"none"},{"seq":7479,"id":"CVE-2026-81348","ts":1788912713916,"field":"cvss","old":null,"new":"3.7"},{"seq":7478,"id":"CVE-2026-81348","ts":1788912713916,"field":"severity","old":"none","new":"low"},{"seq":7288,"id":"CVE-2026-81348","ts":1788911331445,"field":"cvss","old":"3.7","new":null},{"seq":7287,"id":"CVE-2026-81348","ts":1788911331445,"field":"severity","old":"low","new":"none"},{"seq":7092,"id":"CVE-2026-81348","ts":1788909077153,"field":"cvss","old":null,"new":"3.7"},{"seq":7091,"id":"CVE-2026-81348","ts":1788909077153,"field":"severity","old":"none","new":"low"},{"seq":6904,"id":"CVE-2026-81348","ts":1788907391550,"field":"cvss","old":"3.7","new":null},{"seq":6903,"id":"CVE-2026-81348","ts":1788907391550,"field":"severity","old":"low","new":"none"},{"seq":6706,"id":"CVE-2026-81348","ts":1788905443490,"field":"cvss","old":null,"new":"3.7"},{"seq":6705,"id":"CVE-2026-81348","ts":1788905443490,"field":"severity","old":"none","new":"low"},{"seq":6524,"id":"CVE-2026-81348","ts":1788903459775,"field":"cvss","old":"3.7","new":null},{"seq":6523,"id":"CVE-2026-81348","ts":1788903459775,"field":"severity","old":"low","new":"none"},{"seq":6311,"id":"CVE-2026-81348","ts":1788901810280,"field":"cvss","old":null,"new":"3.7"},{"seq":6310,"id":"CVE-2026-81348","ts":1788901810280,"field":"severity","old":"none","new":"low"},{"seq":6141,"id":"CVE-2026-81348","ts":1788899562198,"field":"cvss","old":"3.7","new":null},{"seq":6140,"id":"CVE-2026-81348","ts":1788899562198,"field":"severity","old":"low","new":"none"},{"seq":6025,"id":"CVE-2026-81348","ts":1788898240472,"field":"cvss","old":null,"new":"3.7"},{"seq":6024,"id":"CVE-2026-81348","ts":1788898240472,"field":"severity","old":"none","new":"low"}]}