CVE-2026-16983
Received Received - Intake

Password Disclosure in Gutentor WordPress Plugin

Publication date: 2026-09-02

Last updated on: 2026-09-02

Assigner: WPScan

Description
The Gutentor WordPress plugin before 4.0.6 does not apply the correct context restriction to one of its REST endpoints, exposing the plaintext passwords of password-protected posts to any authenticated user with at least the Subscriber role.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-02
Last Modified
2026-09-02
Generated
2026-09-02
AI Q&A
2026-09-02
EPSS Evaluated
N/A
NVD
CVE-2026-16983
EUVD
EUVD-2026-69866

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
gutentor gutentor to 4.0.6 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

The Gutentor WordPress plugin before version 4.0.6 has a vulnerability where an improperly restricted REST API endpoint exposes plaintext passwords of password-protected posts to any authenticated user with at least the Subscriber role.

Detection Guidance

Check the installed version of the Gutentor plugin. If it is below 4.0.6, the system is vulnerable. Use WordPress admin panel or run a command like 'wp plugin list' if using WP-CLI to verify the version.

Impact Analysis

This vulnerability allows unauthorized users to access sensitive data, specifically plaintext passwords of password-protected posts, potentially leading to data breaches or unauthorized content access.

Compliance Impact

This vulnerability could lead to non-compliance with data protection regulations like GDPR or HIPAA due to unauthorized access to sensitive data, potentially resulting in legal penalties or reputational damage.

Mitigation Strategies

Update the Gutentor plugin to version 4.0.6 or later immediately. If updating is not possible, consider disabling the plugin temporarily until an update is applied.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-16983. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart