CVE-2026-16547

The REST API Log WordPress plugin (versions before 1.7.1 ) is vulnerable to unauthenticated sensitive log data disclosure . The root cause is that the plugin fails to bind the security token protecting its log download feature to the specific log entry being requested, and it does not verify the ...