What is GHSA-99mx-5cm5-w53g?

GHSA-99mx-5cm5-w53g is a security advisory published by GitHub Security Advisories with Medium severity. The Content Views WordPress plugin before 4.5.1.2 does not check whether the user requesting a...

Which CVE IDs does GHSA-99mx-5cm5-w53g cover?

GHSA-99mx-5cm5-w53g covers the following CVE IDs: CVE-2026-17517. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-99mx-5cm5-w53g?

GHSA-99mx-5cm5-w53g has a CVSS v3 base score of 5.3, published by GitHub Security Advisories.

GHSA-99mx-5cm5-w53gMediumCVSS 5.3

The Content Views WordPress plugin before 4.5.1.2 does not check whether the user requesting a...

Vendor

GitHub Security Advisories

Published

September 4, 2026

Last Modified

September 4, 2026

🔗 CVE IDs covered (1)

CVE-2026-17517 →

📋 Description

The Content Views WordPress plugin before 4.5.1.2 does not check whether the user requesting a view is allowed to read the posts it returns, allowing unauthenticated attackers to obtain the title and content of non-public posts, such as draft, pending, private and scheduled posts, when a view has been configured to include them.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-17517
https://wpscan.com/vulnerability/abd82cce-9652-4598-b830-0b08fe3c334b
https://github.com/advisories/GHSA-99mx-5cm5-w53g