https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T20:38:29.257313+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-84926 CVE-2026-84926 — EmbedPress 4.6.0 - 4.6.3 - Contributor+ Administrator Email Disclosure via Google Reviews REST Route 2026-10-09T20:38:29.274225+00:00

Affected: Unknown EmbedPress

The EmbedPress WordPress plugin before 4.6.4 does not correctly restrict access to one of its Google Reviews REST routes to administrators, allowing any authenticated user with contributor-level access or above to read the site administrator's email address, a value WordPress core withholds from that role.