CVE-2026-4019

The Complianz plugin's REST API endpoint is open to unauthorized access due to a flawed permission check in all versions up to 7.4.5. Specifically, the cmplz_rest_consented_content function retrieves post data without verifying whether it's publicly accessible or if the user has viewing privileges. As a result, attackers can read sensitive block content from private posts.

Based on public CVE data (MITRE/NVD).