CVE-2026-18789

None

Open

TLP:CLEAR

Ezoic < 2.23.1 - Unauthenticated Database Export via Content Export REST Routes

NVD CVE.org

AI Analysis

No AI analysis yet.

Description

The Ezoic WordPress plugin before 2.23.1 does not properly restrict access to some of its content export functionality, allowing unauthenticated attackers to trigger a server-side export of the site's database, including user password hashes and password reset tokens, as well as to persistently change some of its settings.

Details

EPSS Score ⓘ: 0.15%

4.6th percentile
Confidence: 90%
Published: Aug 12, 2026
Last Modified: Aug 12, 2026

Notes

0

Log in to add a note

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

0

Log in to add an opinion

No opinions yet. Be the first to assess this intelligence.