CVE-2023-5561-PoC

PoC CVE-2023-5561 - WordPress User Email Disclosure Description This script exploits the CVE-2023-5561 vulnerability in WordPress to enumerate and disclose user email addresses via the /wp-json/wp/v2/users API endpoint. Requirements Python 3.x requests library Install the required library:...

CVE-2026-92436

The Mailchimp for WooCommerce WordPress plugin (versions before 6.3 ) is vulnerable to an Insecure Direct Object Reference (IDOR) . The application fails to require authentication or verify ownership when loading a saved cart from a request-supplied identifier derived from a customer's email addr...

CVE-2024-0235-PoC

CVE-2024-0235-PoC El plugin EventON de WordPress anterior a 4.5.5 y el plugin EventON de WordPress anterior a 2.2.7 no tienen autorización en una acción AJAX, lo que permite a usuarios no autenticados recuperar las direcciones de correo electrónico de cualquier usuario del blog. Uso: usage:...

CVE-2025-56132-Liquidfiles

CVE-2025-56132 - POC de enumeración de usuarios en LiquidFiles Descripción de la vulnerabilidad Esta vulnerabilidad fue identificada en la versión 4.1 de LiquidFiles y versiones anteriores. Al iniciar un restablecimiento de contraseña a través del endpoint “POST /passwordreset”, la aplicación...

EUVD-2026-85053

The FluentBoards WordPress plugin before 2.1.0 does not properly restrict the member data returned by its public, token-shared board feature, allowing unauthenticated users to disclose the email addresses of a shared board's members, typically including administrators...

CVE-2026-18365

The zportals WordPress plugin in versions prior to 6.4.2 is vulnerable to an unauthorized information disclosure flaw. The root cause is the failure to perform capability or nonce checks on one of its AJAX actions . This allows authenticated users with subscriber-level accounts to disclose the di...

CVE-2026-18365 Zportals < 6.4.2 - Subscriber+ User Email Disclosure

The zportals WordPress plugin before 6.4.2 does not perform any capability or nonce check on one of its AJAX actions, allowing users with a subscriber-level account to disclose the display name and email address of every registered user, including administrators...

WordPress zportals plugin < 6.4.2 - Subscriber+ User Email Disclosure vulnerability

Subscriber+ User Email Disclosure vulnerability discovered by Erwan LR WPScan in WordPress Plugin Zportals versions 6.4.2...

CVE-2026-48974 HomeBox: Forced Group Membership Without Consent in Homebox AddMember Handler

HomeBox is a home inventory and organization system. Prior to 0.26.0, POST /v1/groups/members invokes HandleGroupMemberAdd and GroupService.AddMember using a caller-supplied userID without requiring an owner role, an invitation token, target-user consent, or target-user notification. Any...

CVE-2026-89030 Blog2Social WordPress Plugin < 9.1.0 User Email Disclosure via b2s_search_user

Adenion Blog2Social plugin for WordPress before 9.1.0 exposes the email addresses of all registered WordPress users to low-privileged accounts. The b2ssearchuser AJAX handler in includes/Ajax/Get.php invokes B2STools::searchUser in includes/Tools.php, which returns the email address of every...

CVE-2026-89030

The Adenion Blog2Social plugin for WordPress (before 9.1.0 ) allows low-privileged users to enumerate email addresses of all registered users, including administrators. The b2s_search_user AJAX handler in includes/Ajax/Get.php calls B2S_Tools::searchUser() in includes/Tools.php, which returns the...

CVE-2026-18110

Concrete CMS 9 9.0.0 through 9.5.2 does not perform an authorization check on the user selector autocomplete endpoint /ccm/system/user/autocomplete, which backs the "Preview as User" panel and other user-selector components. The endpoint validates only a CSRF-style access token that is bound to t...

CVE-2026-90934

EspoCRM before 10.0.4 contains a field-level security bypass vulnerability in the meeting and call attendees endpoints that allows authenticated users to read restricted email addresses. Attackers can recover hidden attendee emails by exploiting incorrect ACL scope validation that checks parent...

EUVD-2026-77452

EspoCRM before 10.0.4 contains a field-level security bypass vulnerability in the meeting and call attendees endpoints that allows authenticated users to read restricted email addresses. Attackers can recover hidden attendee emails by exploiting incorrect ACL scope validation that checks parent...

CVE-2026-90934 EspoCRM before 10.0.4 Field-level Security Bypass via Attendees

EspoCRM before 10.0.4 contains a field-level security bypass vulnerability in the meeting and call attendees endpoints that allows authenticated users to read restricted email addresses. Attackers can recover hidden attendee emails by exploiting incorrect ACL scope validation that checks parent...

PT-2026-91210

EspoCRM before 10.0.4 contains a field-level security bypass vulnerability in the meeting and call attendees endpoints that allows authenticated users to read restricted email addresses. Attackers can recover hidden attendee emails by exploiting incorrect ACL scope validation that checks parent...

PT-2026-90794

The User Registration & Membership WordPress plugin before 5.2.8 does not verify that the visitor requesting its membership confirmation page owns the account named in the request, nor that any registration or purchase has taken place, allowing unauthenticated users to retrieve another user's ema...

WordPress SureRank SEO plugin 1.6.2-1.10.0 - Unauthenticated Author Email Disclosure vulnerability

Unauthenticated Author Email Disclosure vulnerability discovered by Vaibhav Narkhede in WordPress Plugin SureRank versions 1.6.2-1.10.0...

EUVD-2026-72360

Affected versions of MISP inconsistently enforced email-address visibility in DashboardsController::listTemplates. The query always fetched User.email, while redaction happened only inside the non-REST rendering branch. As a result, the same authenticated user who saw redacted data in the normal...

CVE-2026-86417 MISP Dashboard Template REST API Exposes Template Owner Email Addresses to Unauthorized Users

Affected versions of MISP inconsistently enforced email-address visibility in DashboardsController::listTemplates. The query always fetched User.email, while redaction happened only inside the non-REST rendering branch. As a result, the same authenticated user who saw redacted data in the normal...