Detections
Analytics
CVE-2026-2696
medium
Description
The Export All URLs WordPress plugin before 5.1 generates CSV filenames containing posts URLS (including private posts) in a predictable pattern using a random 6-digit number. These files are stored in the publicly accessible wp-content/uploads/ directory. As a result, any unauthenticated user can brute-force the filenames to gain access to sensitive data contained within the exported files.
References
https://wpscan.com/vulnerability/55d627c1-ad05-4cd1-ae7b-932d84c19313/