CVE-2023-5561-PoC

PoC CVE-2023-5561 - WordPress User Email Disclosure Description This script exploits the CVE-2023-5561 vulnerability in WordPress to enumerate and disclose user email addresses via the /wp-json/wp/v2/users API endpoint. Requirements Python 3.x requests library Install the required library: pip...

CVE-2024-0235-PoC

CVE-2024-0235-PoC The EventON WordPress plugin before 4.5.5, EventON WordPress plugin before 2.2.7 do not have authorisation in an AJAX action, allowing unauthenticated users to retrieve email addresses of any users on the blog Usage: usage: CVE-2024-0235.py -h --url URL CVE-2024-0235.py: error:...

CVE-2025-56132-Liquidfiles

CVE-2025-56132 - LiquidFiles User Enumeration POC Vulnerability Description This vulnerability was identified in LiquidFiles version 4.1 and below. When initiating a password reset via the “POST /passwordreset” endpoint, the application responds differently depending on whether the supplied email...

WordPress AWP Classifieds plugin < 4.4.9 - Unauthenticated Listing Contact Email Disclosure vulnerability

Unauthenticated Listing Contact Email Disclosure vulnerability discovered by Usama Arshad in WordPress Plugin AWP Classifieds versions 4.4.9...

CVE-2026-109204

LogicalDOC Community Edition through 9.3 contains an improper authorization vulnerability in the PswRecovery servlet that fails to bind password recovery tickets to the requesting user. Attackers can obtain a ticket for their own account and reuse it with any userId, including administrators, to...

CVE-2026-109204 LogicalDOC Community Edition through 9.3 Forced Password Reset via Unbound PswRecovery Ticket

LogicalDOC Community Edition through 9.3 contains an improper authorization vulnerability in the PswRecovery servlet that fails to bind password recovery tickets to the requesting user. Attackers can obtain a ticket for their own account and reuse it with any userId, including administrators, to...

CVE-2026-109204

LogicalDOC Community Edition through version 9.3 is vulnerable to an improper authorization flaw in the PswRecovery servlet . The root cause is the failure to bind password recovery tickets to the specific requesting user. This allows an attacker to obtain a ticket for their own account and reuse...

CVE-2026-109204: Weak Password Recovery Mechanism for Forgotten Password

LogicalDOC Community Edition through 9.3 contains an improper authorization vulnerability in the PswRecovery servlet that fails to bind password recovery tickets to the requesting user. Attackers can obtain a ticket for their own account and reuse it with any userId, including administrators, to...

CVE-2026-96962 Pie Register < 3.8.4.14 - Unauthenticated User Email Disclosure via Invitation Code

The Pie Register WordPress plugin before 3.8.4.14 does not restrict access to an invitation-code report, allowing unauthenticated visitors who know a valid invitation code to obtain the username and email address of every user who registered with that code...

CVE-2026-96962 Pie Register < 3.8.4.14 - Unauthenticated User Email Disclosure via Invitation Code

The Pie Register WordPress plugin before 3.8.4.14 does not restrict access to an invitation-code report, allowing unauthenticated visitors who know a valid invitation code to obtain the username and email address of every user who registered with that code...

CVE-2026-90972 WP Fusion Lite < 3.48.0 - Subscriber+ User Email Disclosure and Cross-User CRM Data Deletion

The WP Fusion Lite WordPress plugin before 3.48.0 does not perform a capability check on two of its admin AJAX handlers, allowing any authenticated subscriber to read other users' email addresses and to trigger a cross-user CRM re-sync...

CVE-2026-90972

The WP Fusion Lite WordPress plugin, in versions prior to 3.48.0 , contains a vulnerability where it fails to perform a capability check on two of its admin AJAX handlers . This security oversight allows any authenticated subscriber to access sensitive information, specifically enabling them to r...

CVE-2026-90972 WP Fusion Lite < 3.48.0 - Subscriber+ User Email Disclosure and Cross-User CRM Data Deletion

The WP Fusion Lite WordPress plugin before 3.48.0 does not perform a capability check on two of its admin AJAX handlers, allowing any authenticated subscriber to read other users' email addresses and to trigger a cross-user CRM re-sync...

WordPress WP Fusion Lite plugin < 3.48.0 - Subscriber+ User Email Disclosure and Cross-User CRM Data Deletion vulnerability

Subscriber+ User Email Disclosure and Cross-User CRM Data Deletion vulnerability discovered by Artus KG in WordPress Plugin WP Fusion Lite versions 3.48.0...

WordPress Mailchimp for WooCommerce plugin < 6.3 - Unauthenticated Customer Email and Cart Disclosure vulnerability

Unauthenticated Customer Email and Cart Disclosure vulnerability discovered by JunHee CHO in WordPress Plugin MailChimp For WooCommerce versions 6.3...

CVE-2026-92436

The Mailchimp for WooCommerce WordPress plugin (versions before 6.3 ) is vulnerable to an Insecure Direct Object Reference (IDOR) . The application fails to require authentication or verify ownership when loading a saved cart from a request-supplied identifier derived from a customer's email addr...

CVE-2026-89331 FluentBoards 1.95 - 2.0.15 - Unauthenticated Board Member Email Address Disclosure via Public Board Endpoints

The FluentBoards WordPress plugin before 2.1.0 does not properly restrict the member data returned by its public, token-shared board feature, allowing unauthenticated users to disclose the email addresses of a shared board's members, typically including administrators...

EUVD-2026-85053

The FluentBoards WordPress plugin before 2.1.0 does not properly restrict the member data returned by its public, token-shared board feature, allowing unauthenticated users to disclose the email addresses of a shared board's members, typically including administrators...

CVE-2026-18365

The zportals WordPress plugin in versions prior to 6.4.2 is vulnerable to an unauthorized information disclosure flaw. The root cause is the failure to perform capability or nonce checks on one of its AJAX actions . This allows authenticated users with subscriber-level accounts to disclose the di...

WordPress zportals plugin < 6.4.2 - Subscriber+ User Email Disclosure vulnerability

Subscriber+ User Email Disclosure vulnerability discovered by Erwan LR WPScan in WordPress Plugin Zportals versions 6.4.2...