REST API Log <= 1.7.1 - Unauthenticated Information Exposure
medium
The REST API Log plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 1.7.1. This makes it possible for unauthenticated attackers to extract sensitive user or configuration data.
- CVSS:
- 5.3
- Affected:
- up to 1.7.1
- Fixed in:
- 1.7.2
- Disclosed:
- Aug 7, 2026
CVE-2026-66443 on NVD →
REST API Log <= 1.7.0 - Missing Authorization to Unauthenticated Sensitive Log Data Disclosure
medium
The REST API Log plugin for WordPress is vulnerable to unauthorized access in versions up to, and including, 1.7.0. This is due to missing authentication check in the download_permissions_check() function, which only validated a time-based hash without verifying the requesting user had the required capability to read l...
- CVSS:
- 5.3
- Affected:
- up to 1.7.0
- Fixed in:
- 1.7.1
- Disclosed:
- Jul 27, 2026
CVE-2026-16547 on NVD →
Protect your WordPress site
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free
← Back to the vulnerability database