Sensitive Information Exposure in Related Posts Plugin for WordPress

CVE-2026-109980

What is CVE-2026-109980?

The Related Posts for WordPress plugin has a vulnerability that allows authenticated users with contributor-level access to view sensitive information normally restricted to higher-level users. This issue arises from a flawed authorization check that fails to adequately restrict access to private posts. As a result, attackers can exploit this flaw to access the titles and publication dates of all private posts across the site, posing a significant risk to user privacy and data integrity.

References