Security Lab & CTF

~/research/tags/#Information Disclosure

> #Information Disclosure

2 RESEARCH ENTRIES

CVE-2026-78259 - WPLegalPages API Secret Disclosure and Account Disconnect via Unauthenticated REST API

CVE-2026-78259

WPLegalPages API Secret Disclosure and Account Disconnect via Unauthenticated REST API

Unauthenticated WPLegalPages <= 3.6.4 REST endpoints disclose API secrets and allow attackers to disconnect the connected account.

Read Advisory SECREPORT

#CVE #WordPress #Information Disclosure #Broken Access Control

CVE-2026-54804 - Melhor Envio Subscriber API Token Disclosure and Overwrite

CVE-2026-54804

Melhor Envio Subscriber API Token Disclosure and Overwrite

Broken authentication in Melhor Envio <= 2.16.3 lets a low-privilege Subscriber read and overwrite the store's Melhor Envio API tokens.

Read Advisory SECREPORT

#CVE #WordPress #Information Disclosure #Broken Access Control