CVE-2026-62137: John James Jacoby Bbpress

Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days.

Unauthenticated Sensitive Data Exposure in bbPress <= 2.6.14 versions.

Affected products

• John James Jacoby Bbpress: up to and including 2.6.14

Published 2026-09-11. Last modified 2026-09-11.