Threats tagged 'ghsa-59gj-2qfc-4w2p'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.3	EPSS 0.2%	CVE-2026-94274YayReviews (WordPress plugin) · Information Exposure Medium5.3EPSS 0.2%2026-09-30CVE Database V5CVE-2026-94274 The YayReviews WordPress plugin before 1.4.1 does not restrict access to an API route that returns individual customer review records, including reviews still pending moderation, allowing unauthenticated attackers to harvest reviewers' email addresses and other non-public review content. EPSS 0.2%Vulnerability CWE-200 #ghsa-59gj-2qfc-4w2p	CVE Database V5	2026-09-30

Page 1 of 1