plugin

Wp Rest Api Log Vulnerabilities

2 known security issues reported for the Wp Rest Api Log WordPress plugin. Most recent disclosed Aug 7, 2026.

2 medium

Running Wp Rest Api Log on your site? Check whether your installed version is affected.

Scan your site free

REST API Log <= 1.7.1 - Unauthenticated Information Exposure

medium

The REST API Log plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 1.7.1. This makes it possible for unauthenticated attackers to extract sensitive user or configuration data.

CVSS:
5.3
Affected:
up to 1.7.1
Fixed in:
1.7.2
Disclosed:
Aug 7, 2026

CVE-2026-66443 on NVD →

REST API Log <= 1.7.0 - Missing Authorization to Unauthenticated Sensitive Log Data Disclosure

medium

The REST API Log plugin for WordPress is vulnerable to unauthorized access in versions up to, and including, 1.7.0. This is due to missing authentication check in the download_permissions_check() function, which only validated a time-based hash without verifying the requesting user had the required capability to read l...

CVSS:
5.3
Affected:
up to 1.7.0
Fixed in:
1.7.1
Disclosed:
Jul 27, 2026

CVE-2026-16547 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database