PULSE
ESPT
FEED
ransominterlock reclama a Madison Honda · US · Retail & E-Commerceransominterlock reclama a Custom Floors Unlimited · US · Retail & E-Commerceransominterlock reclama a Meadows Valley School District · US · Educationransominterlock reclama a Ridgway High School · US · Educationransominterlock reclama a Southwest Orthopedic & Reconstructive Specialists · US · Healthcareransominterlock reclama a Assiniboine Dental Group · CA · Healthcareransominterlock reclama a Elmcrest Children's Center, Inc · US · Healthcareransominterlock reclama a Conecuh Sausage Company Inc · US · Agriculture and Food Productionransomblack x reclama a Forus Deporte y Ocio S.L · ES · Hospitalityransomblack x reclama a DomusVi · ES · Healthcareransomvortex reclama a CRESA · US · Professional Servicesransomvortex reclama a ALEXION · US · Healthcareransomvortex reclama a PYRAMID HEALTHCARE · US · Healthcareransomn0n reclama a Landmark Group · AE · Retail & E-Commerceransominterlock reclama a Madison Honda · US · Retail & E-Commerceransominterlock reclama a Custom Floors Unlimited · US · Retail & E-Commerceransominterlock reclama a Meadows Valley School District · US · Educationransominterlock reclama a Ridgway High School · US · Educationransominterlock reclama a Southwest Orthopedic & Reconstructive Specialists · US · Healthcareransominterlock reclama a Assiniboine Dental Group · CA · Healthcareransominterlock reclama a Elmcrest Children's Center, Inc · US · Healthcareransominterlock reclama a Conecuh Sausage Company Inc · US · Agriculture and Food Productionransomblack x reclama a Forus Deporte y Ocio S.L · ES · Hospitalityransomblack x reclama a DomusVi · ES · Healthcareransomvortex reclama a CRESA · US · Professional Servicesransomvortex reclama a ALEXION · US · Healthcareransomvortex reclama a PYRAMID HEALTHCARE · US · Healthcareransomn0n reclama a Landmark Group · AE · Retail & E-Commerce
← All CVEs
CVE WatchNov 10, 2026

CVE-2026-119273

The BulletProof Security WordPress plugin through 7.2 does not sufficiently protect its security log files or prevent sensitive authenticati

CVSS

—

No CVSS

EPSS

—

KEV

—

Exploit Today

—

0-100

Published: Nov 10, 2026 · Last modified: Nov 10, 2026

EPSS · 30d

Not enough EPSS history yet.

Technical description

The BulletProof Security WordPress plugin through 7.2 does not sufficiently protect its security log files or prevent sensitive authentication material from being written to them, relying on access controls that are not enforced under all common web-server configurations, allowing unauthenticated attackers to read logged request data on affected deployments.

Official references
Related CVEs

No related CVEs by CWE or product.