Unrated
The WP Post Author WordPress plugin before 4.2.0 does not restrict the integration settings it...
CVE-2026-108686
First seen on SecPulse
Affected packages
| Ecosystem | Package | Affected | Fixed |
|---|---|---|---|
| CVE | WP Post Author |
< 4.2.0 |
4.2.0 |
Original description The description as published by the source.
The WP Post Author WordPress plugin before 4.2.0 does not restrict the integration settings it returns to visitors, allowing unauthenticated users to read the reCAPTCHA secret key when one has been saved.
Source: CVE.org (CVE Program・cvelistV5) NVD GitHub Advisory
References
- web contact@wpscan.com
- web nvd.nist.gov
- web wpscan.com
- web github.com