Skip to content
OpenAdvisories

Vendor

postmagthemes

2 known vulnerabilities.

Products

2 results · Clear filters · Feed

  • Medium 5.3

    Context Blog <= 1.3.5 - Unauthenticated Sensitive Information Exposure via 'postID' Parameter

    The Context Blog theme for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.3.5 via the context_blog_modal_popup. This makes it possible for unauthenticated attackers to extract the content of password-protecte…

  • Medium 5.3

    Context Blog <= 1.2.5 - Unauthenticated Private Post Disclosure

    The Context Blog theme for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.2.5 via the 'context_blog_modal_popup' due to insufficient restrictions on which posts can be included. This makes it possible for unauthenticat…