Monitor vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

WordPress Allows Unintended Access to Unpublished Posts

CVE-2025-58184
Summary

A security issue in WordPress allows attackers to view unpublished posts that are not supposed to be accessible. This could allow unauthorized individuals to read sensitive information. WordPress has released an update to fix this issue, so it's essential to keep your WordPress installation up to date.

Original title
Rejected reason: reserved but not needed
Original description
Rejected reason: reserved but not needed
Published: 13 Feb 2026 · Updated: 10 Mar 2026 · First seen: 6 Mar 2026