What is GHSA-x6q5-5p66-45w5?

GHSA-x6q5-5p66-45w5 is a security advisory published by GitHub Security Advisories with Medium severity. The Smart Post WordPress plugin before 4.0.8 does not check whether a post is password protected...

Which CVE IDs does GHSA-x6q5-5p66-45w5 cover?

GHSA-x6q5-5p66-45w5 covers the following CVE IDs: CVE-2026-78149. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-x6q5-5p66-45w5?

GHSA-x6q5-5p66-45w5 has a CVSS v3 base score of 5.3, published by GitHub Security Advisories.

GHSA-x6q5-5p66-45w5MediumCVSS 5.3

The Smart Post WordPress plugin before 4.0.8 does not check whether a post is password protected...

Vendor

GitHub Security Advisories

Published

September 5, 2026

Last Modified

September 6, 2026

🔗 CVE IDs covered (1)

CVE-2026-78149 →

📋 Description

The Smart Post WordPress plugin before 4.0.8 does not check whether a post is password protected before returning its content and its stored password through an unauthenticated AJAX action, allowing unauthenticated users to read protected post content and the password that guards it.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-78149
https://wpscan.com/vulnerability/8140528f-27d4-485c-ad63-4dcaa3932af2
https://github.com/advisories/GHSA-x6q5-5p66-45w5