CVE-2021-39203

WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. In affected versions authenticated users who don't have permission to view private post types/data can bypass restrictions in the block editor under certain conditions. This affected WordPress 5.8 beta during the testing period. It's fixed in the final 5.8 release.

• CWE-200

• https://github.com/WordPress/wordpress-develop/security/advisories/GHSA-qxvw-qxm9-qvg6Third Party Advisory
• https://hackerone.com/reports/1225282Permissions Required
• https://github.com/WordPress/wordpress-develop/security/advisories/GHSA-qxvw-qxm9-qvg6Third Party Advisory
• https://hackerone.com/reports/1225282Permissions Required

Published

Sep 9, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-39198OroCRM is an open source Client Relationship Management (CRM…5.4
• CVE-2021-39199remark-html is an open source nodejs library which compiles …6.1
• CVE-2021-3920grav-plugin-admin is vulnerable to Improper Neutralization o…5.4
• CVE-2021-39200WordPress is a free and open-source content management syste…5.3
• CVE-2021-39201WordPress is a free and open-source content management syste…5.4
• CVE-2021-39202WordPress is a free and open-source content management syste…5.4
• CVE-2021-39204Pomerium is an open source identity-aware access proxy. Envo…7.5
• CVE-2021-39205Jitsi Meet is an open source video conferencing application.…6.1
• CVE-2021-39206Pomerium is an open source identity-aware access proxy. Envo…8.6
• CVE-2021-39207parlai is a framework for training and evaluating AI models …8.8
• CVE-2021-39208SharpCompress is a fully managed C# library to deal with man…4.3
• CVE-2021-39209GLPI is a free Asset and IT management software package. In …8.8