Description
The Context Blog theme for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.3.5 via the context_blog_modal_popup. This makes it possible for unauthenticated attackers to extract the content of password-protected posts.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| postmagthemes | Context Blog | ≤ 1.3.5 | — |