CVE-2026-6801 is a vulnerability in the Context Blog WordPress theme (postmagthemes) that exposes sensitive information. Specifically, all versions up to and including 1.3.5 are affected by an issue in the context_blog_modal_popup component, which allows unauthenticated attackers to extract the content of password-protected posts. The vulnerability is categorized under CWE-200 (Exposure of Sensitive Information) and has a CVSS 3.1 base score of 5.3, indicating a medium severity. No official patch or remediation level has been provided by the vendor, and there are no known exploits in the wild as of the published date.

An unauthenticated attacker can bypass password protections on posts and access their content, leading to unauthorized disclosure of sensitive information. There is no indication of impact on integrity or availability, only confidentiality is affected.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or remediation level is indicated, users of the Context Blog theme should monitor for vendor updates or consider disabling the vulnerable feature (context_blog_modal_popup) if possible until a fix is available.