CVE-2026-92423 Meow Gallery < 5.5.5 - Author+ Draft and Private Post Disclosure via fetch_posts

The Meow Gallery WordPress plugin before 5.5.5 does not perform a proper capability check or restrict results to the requesting user's own posts before returning post data, allowing authenticated users with Author-level access and above to disclose the titles, authors, dates and statuses of other...

WordPress Motors plugin < 1.4.121 - Unauthenticated Draft/Private Listing Disclosure vulnerability

Unauthenticated Draft/Private Listing Disclosure vulnerability discovered by Pedro Pinho in WordPress Plugin Motors versions 1.4.121...

WordPress Essential Addons for Elementor plugin < 6.6.10 - Unauthenticated Draft/Private WooCommerce Product Disclosure vulnerability

Unauthenticated Draft/Private WooCommerce Product Disclosure vulnerability discovered by Revanth Hari Narayana Matte in WordPress Plugin Essential Addons for Elementor versions 6.6.10...

Elementor Addon Elements < 1.12.8 - Unauthenticated Post ID/Tile Disclosure

Description The plugin does not have authorisation in its ajaxeaepostdata function, allowing unauthenticated users to retrieve arbitrary posts/pages such as draft, private etc IDs and tiles...