Unrated severityNVD Advisory· Published Aug 12, 2026
CVE-2026-18943
CVE-2026-18943
Description
The WPC Admin Columns WordPress plugin before 2.3.4 does not have authorisation checks in one of its AJAX actions, allowing users with a role as low as subscriber to read arbitrary user, post and term metadata, including data belonging to administrators.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: <2.3.4
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.