CyberRota
← Ana sayfaya dön

CVE-2026-12120

MEDIUM · CVSS 5.3 EPSS %0.33

Kaynak: NVD + CISA KEV + EPSS · Yayınlanma: 2026-06-18T06:16:57.680 · Çekilme zamanı: 2026-06-30T12:26:09.555244+00:00

CyberRota Yorumu

Detaylı analiz gerekiyor.

CVE
CVE-2026-12120
Severity
MEDIUM
CVSS
5.3
EPSS
%0.33
WordPress

Orijinal NVD Açıklaması

The FireBox Popups – Increase Sales and Grow Your Email List plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.1.7 via the 'form_id' parameter. This makes it possible for unauthenticated attackers to extract download a full CSV export of all form submissions — including any personally identifiable information submitted by users — for any arbitrary form_id.