UNKNOWN NVD

CVE-2026-18789

The Ezoic WordPress plugin before 2.23.1 does not properly restrict access to some of its content export functionality, allowing unauthenticated attackers to tr

The Ezoic WordPress plugin before 2.23.1 does not properly restrict access to some of its content export functionality, allowing unauthenticated attackers to trigger a server-side export of the site's database, including user password hashes and password reset tokens, as well as to persistently change some of its settings.

References

https://wpscan.com/vulnerability/1e2ce237-dc91-4144-875a-339b5ea05f3a/

Published: 2026-08-12 · Source: NVD · Feed updated: 2026-08-12

This unknown severity vulnerability was published on 2026-08-12 via NVD.

vulnfeed aggregates 9910 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.