Improper Access Control in Gutentor WordPress Plugin
CVE-2026-16983
Currently unrated
Key Information:
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2026-16983?
The Gutentor WordPress plugin prior to version 4.0.6 contains an improper access control flaw affecting its REST API endpoints. This vulnerability enables authenticated users with the Subscriber role to access plaintext passwords of password-protected posts, potentially compromising sensitive information. Proper context restrictions were not implemented, making this an urgent issue for WordPress site administrators to address.
Affected Version(s)
Gutentor 0 < 4.0.6
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.