Vulnerability record/PUBLISHED/Published Nov 10, 2026 06:00:04 UTC
CVE-2026-119273
The BulletProof Security WordPress plugin through 7.2 does not sufficiently protect its security log files or prevent sensitive authentication material from being written to them, relying on access controls that are not enforced under all common web-server configurations, allowing unauthenticated attackers to read logged request data on affected deployments.
Base scoreN/A/ 10
SeverityNoneCVSS unscored
Exploitability / impact
CVSS metric breakdown
Base severityNone
No CVSS vector is available for this record.
CVSS communicates standardized severity and impact characteristics. It does not establish whether a system is exploitable in your specific environment.
Record context
CVE Numbering AuthorityWPScan
Last updatedNov 10, 2026 06:00:04 UTC
PublishedNov 10, 2026 06:00:04 UTC
ReservedOct 29, 2026 18:32:17 UTC
Credits
- Charles Vosburgh
- WPScan