Unknown Content Views vulnerabilities

2 CVEs affecting Unknown Content Views, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-17517, published 2026-09-04.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-15361, published 2026-08-07. High severity, CVSS 8.1. EPSS: 0.4% chance of exploitation in the next 30 days. The Content Views WordPress plugin before 4.5 does not perform a capability check on one of its AJAX actions and does not properly sanitise attacker-supplied data before using it in a SQL query,…
CVE-2026-17517, published 2026-09-04. Medium severity, CVSS 5.3. EPSS: 0.2% chance of exploitation in the next 30 days. The Content Views WordPress plugin before 4.5.1.2 does not check whether the user requesting a view is allowed to read the posts it returns, allowing unauthenticated attackers to obtain the title…