Ad

CVE-2026-2696

NONE EPSS 0.03%
Updated Apr 01, 2026
WordPress
Parameter Value
Affected Versions before 5.1
Vendor WordPress
Public PoC No

The Export All URLs WordPress plugin before 5.1 generates CSV filenames containing posts URLS (including private posts) in a predictable pattern using a random 6-digit number. These files are stored in the publicly accessible wp-content/uploads/ directory. As a result, any unauthenticated user can brute-force the filenames to gain access to sensitive data contained within the exported files.