Tag: Information Disclosure (2 posts)

CVE

CVE-2026-78259 - WPLegalPages API Secret Disclosure and Account Disconnect via Unauthenticated REST API

Unauthenticated WPLegalPages <= 3.6.4 REST endpoints disclose API secrets and allow attackers to disconnect the connected account.

Read

CVE WordPress Information Disclosure Broken Access Control

CVE

CVE-2026-54804 - Melhor Envio Subscriber API Token Disclosure and Overwrite

Broken authentication in Melhor Envio <= 2.16.3 lets a low-privilege Subscriber read and overwrite the store's Melhor Envio API tokens.

Read

CVE WordPress Information Disclosure Broken Access Control