CVE-2026-14195: Brizy – Page Builder < 2.8.18 - Contributor+ Sensitive Information Disclosure via get_post_info
Published Aug 1, 2026
·Updated
The Brizy WordPress plugin before 2.8.18 does not properly verify authorization on a request handler before returning post content, allowing users with the Contributor role or higher to read the content of arbitrary posts, including other users' private, pending, and draft posts.
Affected Software
1 affected component
Brizy Brizy – Page Builder (WordPress plugin)<2.8.18
Event History
Aug 1, 2026
CVE Published
via MITRE·06:00 AM
Data Sourced
via MITRE·06:00 AM
DescriptionWeakness
Data Sourced
via NVD·07:16 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2026-14195?
CVE-2026-14195 has a risk score of 48, indicating a moderate severity level.
2
How do I fix CVE-2026-14195?
To fix CVE-2026-14195, update the Brizy Page Builder plugin to version 2.8.18 or later.
3
What does CVE-2026-14195 affect?
CVE-2026-14195 affects versions of the Brizy – Page Builder WordPress plugin prior to 2.8.18.
4
What type of vulnerability is CVE-2026-14195?
CVE-2026-14195 is a sensitive information disclosure vulnerability.
5
Who is impacted by CVE-2026-14195?
Users with Contributor role or higher can potentially access sensitive content due to CVE-2026-14195.