Is CVE-2026-110762 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-110762?

CVE-2026-110762 has a CVSS v3 severity of LOW (3.7).

Back

CVE-2026-110762

Description

bbPress before 2.6.19 contains an information disclosure vulnerability that allows unauthenticated visitors to view restricted subforum posts because hide_sitewide ignores ancestor forum visibility. Topics and replies in public subforums nested under private or hidden parents expose title, permalink and body via the BuddyPress activity stream and REST endpoint.