CVE-2026-14195 — Brizy – Page Builder < 2.8.18 - Contributor+ Sensitive Information Disclosure via get_post_info
The Brizy WordPress plugin before 2.8.18 does not properly verify authorization on a request handler before returning post content, allowing users with the Contributor role or …
Published: 2026-08-01 · CVSS: 2.7 · CVSS 3.1
The Brizy WordPress plugin before 2.8.18 does not properly verify authorization on a request handler before returning post content, allowing users with the Contributor role or higher to read the content of arbitrary posts, including other users' private, pending, and draft posts.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7