CVE-2026-81348: Unknown My Private Site

Low severity, CVSS 3.7. EPSS: 0.3% chance of exploitation in the next 30 days.

The My Private Site WordPress plugin before 4.2.3 does not apply its site-privacy access control to certain unauthenticated front-end read surfaces, allowing unauthenticated users to view post content, comments and post URLs from a site the administrator placed behind mandatory login.

Affected products

• Unknown My Private Site: before 4.2.3 (fixed in 4.2.3)

Published 2026-09-05. Last modified 2026-09-08.