All intelligence
// vulnerability record
cached · NVD via COSMOS syncCVE-2026-18789
HIGHpublished 2026-08-12 06:20 UTC · 21 hours ago · modified 2026-08-12 13:17 UTC
7.5
CVSS / 10
// description
The Ezoic WordPress plugin before 2.23.1 does not properly restrict access to some of its content export functionality, allowing unauthenticated attackers to trigger a server-side export of the site's database, including user password hashes and password reset tokens, as well as to persistently change some of its settings.
// weaknesses (CWE)
- CWE-862