CVE-2026-2696

The Export All URLs WordPress plugin, in versions prior to 5.1 , is vulnerable to unauthenticated sensitive data exposure . The flaw exists because the plugin generates CSV filenames containing post URLs (including private posts) using a predictable pattern based on a random 6-digit number. These...