What is GHSA-pgcv-pw6q-4vjj?

GHSA-pgcv-pw6q-4vjj is a security advisory published by GitHub Security Advisories with Medium severity. The ProfilePress WordPress plugin before 4.17.6 does not correctly evaluate some of its content...

Which CVE IDs does GHSA-pgcv-pw6q-4vjj cover?

GHSA-pgcv-pw6q-4vjj covers the following CVE IDs: CVE-2026-123656. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-pgcv-pw6q-4vjj?

GHSA-pgcv-pw6q-4vjj has a CVSS v3 base score of 5.3, published by GitHub Security Advisories.

GHSA-pgcv-pw6q-4vjjMediumCVSS 5.3

The ProfilePress WordPress plugin before 4.17.6 does not correctly evaluate some of its content...

Vendor

GitHub Security Advisories

Published

November 11, 2026

Last Modified

November 12, 2026

🔗 CVE IDs covered (1)

CVE-2026-123656 →

📋 Description

The ProfilePress WordPress plugin before 4.17.6 does not correctly evaluate some of its content protection rule conditions when content is rendered outside the main query, allowing unauthenticated users to read the content of pages protected by such rules via the REST API.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-123656
https://wpscan.com/vulnerability/5a670095-e8c7-4317-a929-a896d01ee648
https://github.com/advisories/GHSA-pgcv-pw6q-4vjj