AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2026-22203

MEDIUM · CVSS 4.9 EPSS 0.27%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2026-03-13 · Last synced 2026-08-04

CyberRota Analysis

This is a medium severity vulnerability with a CVSS score of 4.9. See the original NVD description below for full technical details.

CVE
CVE-2026-22203
Severity
MEDIUM
CVSS
4.9
EPSS
0.27%

Original NVD Description

wpDiscuz before 7.6.47 contains an information disclosure vulnerability that allows administrators to inadvertently expose OAuth secrets by exporting plugin options as JSON. Attackers can obtain exported files containing plaintext API secrets like fbAppSecret, googleClientSecret, twitterAppSecret, and other social login credentials from support tickets, backups, or version control repositories.

Related CVEs

Other vulnerabilities affecting the same vendor(s)