CVE-2026-118168

CVSS 3.1: 5.3 medium
EPSS: —
Published: Nov 1, 2026 · 14h ago
Modified: Nov 1, 2026

Analyze CVE-2026-118168 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

The MapPress WordPress plugin before 2.97.15 does not restrict which user's data its front-end map embed handler renders, allowing unauthenticated visitors to retrieve the email address and display name of any user on the site by enumerating user IDs.

Ecosystems: WordPress

Weakness: CWE-200

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (—)

In the news

0 stories

No ingested article mentions this CVE yet.