CVE-2026-6801 is a vulnerability in the Context Blog WordPress theme (postmagthemes) that exposes sensitive information. Specifically, all versions up to and including 1.3.5 are affected by an information disclosure flaw in the context_blog_modal_popup functionality. This flaw allows unauthenticated attackers to extract the content of password-protected posts, bypassing intended access controls. The vulnerability has a CVSS 3.1 score of 5.3 (medium severity) with network attack vector, low attack complexity, no privileges required, no user interaction, and impacts confidentiality only.

An unauthenticated attacker can access the content of password-protected posts, leading to unauthorized disclosure of sensitive information. There is no impact on integrity or availability. This exposure could compromise the confidentiality of protected content intended only for authorized users.

No official fix or patch is currently available for this vulnerability. Users of the Context Blog theme up to version 1.3.5 should monitor the vendor's advisories for updates or patches. Until a fix is released, consider disabling or restricting access to the context_blog_modal_popup feature or replacing the theme with a secure alternative to prevent unauthorized information disclosure.