Threats tagged 'ghsa-wfgm-582m-23r9'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	–	CVE-2026-118168The MapPress WordPress plugin before 2.97.15 does not restrict which user's data its front-end map embed handler Medium2026-11-01GCVE DatabaseCVE-2026-118168 The MapPress WordPress plugin versions before 2.97.15 have a vulnerability where the front-end map embed handler does not restrict access to user data. This flaw allows unauthenticated visitors to enumerate user IDs and retrieve email addresses and display names of any user on the site. Report on CVE-2026-118168 Vulnerability #ghsa-wfgm-582m-23r9	GCVE Database	2026-11-01

Page 1 of 1