← CVE Intelligence

CVE-2026-7385

Decent Comments < 3.0.2 - Unauthenticated Email Address Disclosure PUBLISHED

Description (CNA)

The Decent Comments WordPress plugin before 3.0.2 does not restrict access to comment author email addresses and post author email addresses via its REST API endpoint, allowing unauthenticated attackers to enumerate registered user email addresses.

Affected (CNA)

Vendor / productVersions
Unknown / Decent Commentsaffected 0 before 3.0.2

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.