Loops Logic
by WordPress
CVEs (2)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-95604 | Hig | 0.49 | 7.5 | 0.00 | Sep 23, 2026 | Unauthenticated Broken Access Control in Loops & Logic <= 4.2.4 versions. | ||
| CVE-2026-16960 | Hig | 0.49 | 7.5 | 0.00 | Sep 9, 2026 | The Loops & Logic WordPress plugin before 4.3.0 does not restrict its public template-data action to the data a visitor is permitted to see, allowing unauthenticated users to read arbitrary user records (including email addresses and roles) and arbitrary site options. |
- risk 0.49cvss 7.5epss 0.00
Unauthenticated Broken Access Control in Loops & Logic <= 4.2.4 versions.
- risk 0.49cvss 7.5epss 0.00
The Loops & Logic WordPress plugin before 4.3.0 does not restrict its public template-data action to the data a visitor is permitted to see, allowing unauthenticated users to read arbitrary user records (including email addresses and roles) and arbitrary site options.