{
 "id": "WPSEC-2026-2899",
 "url": "https://wpsec.com/vuln/WPSEC-2026-2899/",
 "json_url": "https://wpsec.com/vuln/WPSEC-2026-2899/advisory.json",
 "markdown_url": "https://wpsec.com/vuln/WPSEC-2026-2899/index.md",
 "title": "Brizy – Page Builder <= 2.8.25 - Unauthenticated Sensitive Information Exposure via 'brizy_post' Parameter",
 "description": "The Brizy plugin for WordPress is vulnerable to Sensitive Information Exposure via the 'brizy_post' and 'post' request parameters in all versions up to, and including, 2.8.25. This is due to the front-end preview handler (Brizy_Editor::handleEditorPreviewMode) taking the post to render from user-supplied request parameters when the main query is not a single post, such as on the home page, archives, search results or 404 pages. The only check is a status check that blocks draft, pending, private and scheduled posts, and any user with Brizy editing access passes it. This makes it possible for unauthenticated attackers to view the compiled Brizy content of posts they should not be able to see, such as password-protected or trashed posts and Brizy content stored in non-public post types. Authenticated users with Brizy editing access can also view other users' draft, pending, private and scheduled Brizy posts.",
 "plugin": {
  "slug": "brizy",
  "name": "Brizy – Page Builder",
  "full_name": "Brizy – Page Builder",
  "wordpress_org": "https://wordpress.org/plugins/brizy/",
  "advisories_url": "https://wpsec.com/vuln/plugin/brizy/",
  "attacksurface": "https://attacksurface.wpsec.com/plugin/brizy"
 },
 "type": "SENSITIVE DATA DISCLOSURE",
 "cwe": [
  "CWE-200"
 ],
 "cve": [],
 "cvss": {
  "version": "3.1",
  "score": 5.3,
  "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
  "severity": "Medium"
 },
 "affected": {
  "ranges": [
   {
    "from": null,
    "from_inclusive": true,
    "to": "2.8.26",
    "to_inclusive": false
   }
  ],
  "text": [
   "all versions before 2.8.26"
  ]
 },
 "introduced_in": null,
 "fixed_in": "2.8.26",
 "remediation": "Update to 2.8.26 or later.",
 "fix_released": "2026-11-11T16:54:15+00:00",
 "published": "2026-11-12T17:52:14+00:00",
 "updated": "2026-11-12T17:08:39.089408+00:00",
 "also_published_as": null,
 "references": [
  "https://wpsec.com/vuln/WPSEC-2026-2899/",
  "https://plugins.svn.wordpress.org/brizy/tags/2.8.26/",
  "https://wordpress.org/plugins/brizy/"
 ],
 "attacksurface_url": "https://attacksurface.wpsec.com/plugin/brizy",
 "source": "WPSec",
 "license": {
  "name": "CC BY 4.0",
  "url": "https://creativecommons.org/licenses/by/4.0/"
 },
 "usage": {
  "plugin": "Medium",
  "affected_versions": "Medium",
  "as_of": "2026-11-12"
 }
}