CyberRota
← Ana sayfaya dön

CVE-2026-8386

MEDIUM · CVSS 5.3 EPSS %0.22

Kaynak: NVD + CISA KEV + EPSS · Yayınlanma: 2026-06-15T08:16:22.007 · Çekilme zamanı: 2026-06-30T18:21:19.961591+00:00

CyberRota Yorumu

Saldırganın giriş yapmış olması gerekebilir.

CVE
CVE-2026-8386
Severity
MEDIUM
CVSS
5.3
EPSS
%0.22
WordPress

Orijinal NVD Açıklaması

The WP Go Maps WordPress plugin before 10.0.10 does not perform any approval-state filtering on its public single-marker REST endpoint, allowing unauthenticated users to retrieve marker records that an administrator has not yet approved for public display, including any PII placed in the address and description fields and the marker's geographic coordinates.