PULSE
FEED
ransomblack x reclama a Forus Deporte y Ocio S.L · ES · Hospitalityransomblack x reclama a DomusVi · ES · Healthcareransomvortex reclama a CRESA · US · Professional Servicesransomvortex reclama a ALEXION · US · Healthcareransomvortex reclama a PYRAMID HEALTHCARE · US · Healthcareransomn0n reclama a Landmark Group · AE · Retail & E-Commerceransomn0n reclama a Vertex Pharmaceuticals Incorporated · US · Healthcareransomiah6477 reclama a fhiworks · Healthcareransomaoqin reclama a Irwin Automotive Group · US · Retail & E-Commerceransomsilentransomgroup reclama a Wilentz, Goldman & Spitzer · Professional Servicesransomsilentransomgroup reclama a B... W...ransompixelleaks reclama a Published · Technologyransomglobal secret group reclama a Ornico · ZA · Professional Servicesransomglobal secret group reclama a Heartland Honda · US · Retail & E-Commerceransomblack x reclama a Forus Deporte y Ocio S.L · ES · Hospitalityransomblack x reclama a DomusVi · ES · Healthcareransomvortex reclama a CRESA · US · Professional Servicesransomvortex reclama a ALEXION · US · Healthcareransomvortex reclama a PYRAMID HEALTHCARE · US · Healthcareransomn0n reclama a Landmark Group · AE · Retail & E-Commerceransomn0n reclama a Vertex Pharmaceuticals Incorporated · US · Healthcareransomiah6477 reclama a fhiworks · Healthcareransomaoqin reclama a Irwin Automotive Group · US · Retail & E-Commerceransomsilentransomgroup reclama a Wilentz, Goldman & Spitzer · Professional Servicesransomsilentransomgroup reclama a B... W...ransompixelleaks reclama a Published · Technologyransomglobal secret group reclama a Ornico · ZA · Professional Servicesransomglobal secret group reclama a Heartland Honda · US · Retail & E-Commerce
← Todos os CVEs
CVE Watch10 de nov. de 2026

CVE-2026-119273

The BulletProof Security WordPress plugin through 7.2 does not sufficiently protect its security log files or prevent sensitive authenticati

CVSS

—

Sem CVSS

EPSS

—

KEV

—

Exploit Today

—

0-100

Publicado: 10 de nov. de 2026 · Última mod.: 10 de nov. de 2026

EPSS · 30d

Ainda não há histórico EPSS suficiente.

Descrição técnica

The BulletProof Security WordPress plugin through 7.2 does not sufficiently protect its security log files or prevent sensitive authentication material from being written to them, relying on access controls that are not enforced under all common web-server configurations, allowing unauthenticated attackers to read logged request data on affected deployments.

Referências oficiais
CVEs relacionados

Nenhum CVE relacionado por CWE ou produto.