Security Advisory

CVE-2026-10823

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-06-26 06:00:02

Last updated 2026-06-26 12:17:10

Assigner WPScan

CVSS score not scored

State PUBLISHED

Description

The YMC Filter WordPress plugin before 3.11.3 does not properly authorize access to one of its REST API endpoints and does not validate a user-supplied query parameter, allowing unauthenticated attackers to retrieve the titles and content of private, draft, and other non-public posts.

← Browse all CVEs View on cve.org ↗