CVE-2021-39203

score

<0.1

cvss

6.8

epss

0.9%

published

2021-09-09

kev added

—

first seen

2026-10-21

WordPress 5.8 beta contains a permission bypass caused by restrictions in the block editor, letting authenticated users without proper permissions view private post types/data, exploit requires specific conditions during testing.