CVE-2026-14195 — Brizy – Page Builder < 2.8.18 - Contributor+ Sensitive Information Disclosure via get_post_info

CVE-2026-14195

Brizy – Page Builder < 2.8.18 - Contributor+ Sensitive Information Disclosure via get_post_info PUBLISHED

Description (CNA)

The Brizy WordPress plugin before 2.8.18 does not properly verify authorization on a request handler before returning post content, allowing users with the Contributor role or higher to read the content of arbitrary posts, including other users' private, pending, and draft posts.

Affected (CNA)

Vendor / product	Versions
Unknown / Brizy	affected 0 before 2.8.18

CWE

No CWE identifiers supplied.

References

https://wpscan.com/vulnerability/2ed270b0-c01e-4615-b365-3455c161a2d9/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.