Aller au contenu
Se connecter
4.3 Moyenne

CVE-2026-18365 The zportals WordPress plugin before 6.4.2 does not perform any capability or nonce check on one of its AJAX actions,…

Description

The zportals WordPress plugin before 6.4.2 does not perform any capability or nonce check on one of its AJAX actions, allowing users with a subscriber-level account to disclose the display name and email address of every registered user, including administrators.

Produits et versions touchés

Produit Versions touchées Corrigé en
zportals 6.4 premières → < 6.4.2 6.4.2

Autres CVE de zportals

Les 3 CVE de zportals →
CVE-2026-18364 The zportals WordPress plugin before 6.4.2 does not perform any capability or nonce check on several of its AJAX… 4.3 Moyenne CVE-2026-14553 The zportals WordPress plugin before 6.3.4 does not properly validate uploaded files, trusting the client-supplied… 8.1 Élevée
Suivre cette CVE