IT-Sentinel

« BACK_TO_HOME

PUBLISHED

2026-05-20 07:16

MODIFIED

2026-05-20 07:16

EPSS (Prob. Exploit)

0.35%

Top 73.2%

DATA SOURCES:

NVD 🔗 2026-05-20 FIRST EPSS 🔗 2026-10-25 GITHUB 🔗 2026-10-29

> DESCRIPTION

The Decent Comments WordPress plugin before 3.0.2 does not restrict access to comment author email addresses and post author email addresses via its REST API endpoint, allowing unauthenticated attackers to enumerate registered user email addresses.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> GITHUB SECURITY ADVISORY

GHSA-gxrg-x694-283w MODERATE

Solspace Freeform: Limited Twig template injection via submitted field values

AFFECTED PACKAGES:

COMPOSER / solspace/craft-freeform

>= 5.0.0, <= 5.10.13

Fixed in: 5.10.14

> HISTORIQUE DES MODIFICATIONS

Première apparition

20/05/2026 07:16

Source: NVD

Total des modifications: 0 Dernière mise à jour: 5 months ago

> REFERENCES