CVE-2026-16547

CVE-2026-16547 affects the WordPress REST API Log plugin prior to 1.7.1. The log download endpoint does not bind the token to the requested log entry nor verify requester capabilities, allowing unauthenticated users possessing a valid token to download REST API request/response logs that may incl...