5.3
Moyenne
CVE-2026-13736 The NewPath WildApricotPress Add-on WordPress plugin through 1.0.0 does not enforce its members-only field privacy on…
Description
The NewPath WildApricotPress Add-on WordPress plugin through 1.0.0 does not enforce its members-only field privacy on an unauthenticated REST route, allowing anonymous visitors to read member email addresses and phone numbers that are configured to be visible to members only.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| NewPath WildApricotPress Add-on 1.0 | premières → 1.0.0 | Pas de correctif indiqué |