Threats tagged 'ghsa-rrqj-x694-jg5v'

CVE-2026-17515 is a medium severity information exposure vulnerability in the MLSImport: IDX Plugin & MLS Plugin for Real Estate Listings WordPress plugin before version 7.0.4. The flaw arises because one of the plugin's AJAX actions lacks authorization and CSRF protections, allowing any authenticated user, including low-privileged subscribers, to read the import log file and import-related metadata of arbitrary posts. This could lead to unauthorized disclosure of potentially sensitive information stored in these logs and metadata.