CVE-2026-2295

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-2295", "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "state": "PUBLISHED", "assignerShortName": "Wordfence", "dateReserved": "2026-02-10T16:22:48.874Z", "datePublished": "2026-02-11T09:27:15.103Z", "dateUpdated": "2026-04-08T17:18:06.404Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "shortName": "Wordfence", "dateUpdated": "2026-04-08T17:18:06.404Z"}, "affected": [{"vendor": "wpzoom", "product": "WPZOOM Addons for Elementor \u2013 Starter Templates & Widgets", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "1.3.2", "versionType": "semver"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "The WPZOOM Addons for Elementor \u2013 Starter Templates & Widgets plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'ajax_post_grid_load_more' function in all versions up to, and including, 1.3.2. This makes it possible for unauthenticated attackers to retrieve protected (draft, future, pending) post titles and excerpts that should not be accessible to unauthenticated users."}], "title": "WPZOOM Addons for Elementor \u2013 Starter Templates & Widgets <= 1.3.2 - Unauthenticated Protected Post Exposure via ajax_post_grid_load_more", "references": [{"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/b9961347-7c47-4fa1-af35-609c39a6cd8b?source=cve"}, {"url": "https://plugins.trac.wordpress.org/browser/wpzoom-elementor-addons/tags/1.3.1/includes/wpzoom-elementor-ajax-posts-grid.php#L66"}, {"url": "https://plugins.trac.wordpress.org/changeset/3458416/wpzoom-elementor-addons"}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor", "cweId": "CWE-200", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "baseScore": 5.3, "baseSeverity": "MEDIUM"}}], "credits": [{"lang": "en", "type": "finder", "value": "Craig Smith"}], "timeline": [{"time": "2026-02-10T20:36:46.000Z", "lang": "en", "value": "Vendor Notified"}, {"time": "2026-02-10T21:12:39.000Z", "lang": "en", "value": "Disclosed"}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-02-11T15:20:23.230467Z", "id": "CVE-2026-2295", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-02-11T15:20:31.931Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-2295", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-02-11T15:20:23.230467Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-02-11T15:20:29.447Z"}}], "cna": {"title": "WPZOOM Addons for Elementor \u2013 Starter Templates & Widgets <= 1.3.2 - Unauthenticated Protected Post Exposure via ajax_post_grid_load_more", "credits": [{"lang": "en", "type": "finder", "value": "Craig Smith"}], "metrics": [{"cvssV3_1": {"version": "3.1", "baseScore": 5.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}}], "affected": [{"vendor": "wpzoom", "product": "WPZOOM Addons for Elementor \u2013 Starter Templates & Widgets", "versions": [{"status": "affected", "version": "*", "versionType": "semver", "lessThanOrEqual": "1.3.2"}], "defaultStatus": "unaffected"}], "timeline": [{"lang": "en", "time": "2026-02-10T20:36:46.000+00:00", "value": "Vendor Notified"}, {"lang": "en", "time": "2026-02-10T21:12:39.000+00:00", "value": "Disclosed"}], "references": [{"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/b9961347-7c47-4fa1-af35-609c39a6cd8b?source=cve"}, {"url": "https://plugins.trac.wordpress.org/browser/wpzoom-elementor-addons/tags/1.3.1/includes/wpzoom-elementor-ajax-posts-grid.php#L66"}, {"url": "https://plugins.trac.wordpress.org/changeset/3458416/wpzoom-elementor-addons"}], "descriptions": [{"lang": "en", "value": "The WPZOOM Addons for Elementor \u2013 Starter Templates & Widgets plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'ajax_post_grid_load_more' function in all versions up to, and including, 1.3.2. This makes it possible for unauthenticated attackers to retrieve protected (draft, future, pending) post titles and excerpts that should not be accessible to unauthenticated users."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-200", "description": "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor"}]}], "providerMetadata": {"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "shortName": "Wordfence", "dateUpdated": "2026-02-11T09:27:15.103Z"}}}, "cveMetadata": {"cveId": "CVE-2026-2295", "state": "PUBLISHED", "dateUpdated": "2026-02-11T15:20:31.931Z", "dateReserved": "2026-02-10T16:22:48.874Z", "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "datePublished": "2026-02-11T09:27:15.103Z", "assignerShortName": "Wordfence"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "WPZOOM Addons for Elementor \u2013 Starter Templates & Widgets", "vendor": "wpzoom", "versions": [{"lessThanOrEqual": "1.3.2", "status": "affected", "version": "0", "versionType": "semver"}]}], "source": "security@wordfence.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The WPZOOM Addons for Elementor \u2013 Starter Templates & Widgets plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'ajax_post_grid_load_more' function in all versions up to, and including, 1.3.2. This makes it possible for unauthenticated attackers to retrieve protected (draft, future, pending) post titles and excerpts that should not be accessible to unauthenticated users."}, {"lang": "es", "value": "El plugin WPZOOM Addons para Elementor \u2013 Starter Templates &amp; Widgets para WordPress es vulnerable a acceso no autorizado a datos debido a una comprobaci\u00f3n de capacidad faltante en la funci\u00f3n 'ajax_post_grid_load_more' en todas las versiones hasta la 1.3.2, ambas inclusive. Esto hace posible que atacantes no autenticados recuperen t\u00edtulos y extractos de publicaciones protegidas (borrador, futuras, pendientes) que no deber\u00edan ser accesibles para usuarios no autenticados."}], "id": "CVE-2026-2295", "lastModified": "2026-06-17T10:30:44.387", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 1.4, "source": "security@wordfence.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-2295", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-02-11T15:20:23.230467Z", "version": "2.0.3"}}]}, "published": "2026-02-11T10:15:51.357", "references": [{"source": "security@wordfence.com", "url": "https://plugins.trac.wordpress.org/browser/wpzoom-elementor-addons/tags/1.3.1/includes/wpzoom-elementor-ajax-posts-grid.php#L66"}, {"source": "security@wordfence.com", "url": "https://plugins.trac.wordpress.org/changeset/3458416/wpzoom-elementor-addons"}, {"source": "security@wordfence.com", "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/b9961347-7c47-4fa1-af35-609c39a6cd8b?source=cve"}], "sourceIdentifier": "security@wordfence.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-200"}], "source": "security@wordfence.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "unaffected", "versions": null}], "product": "wordpress", "vendor": "wordpress"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,1.3.2]"}}], "product": "wpzoom_addons_for_elementor_\u2013_starter_templates_&_widgets", "vendor": "wpzoom"}], "analysis": {"en": {"generated_at": "2026-04-15T17:17:09.684892+00:00", "value": {"mitigation_remediation": ["Update the WPZOOM Addons for Elementor \u2013 Starter Templates & Widgets plugin to version\u00a01.3.3 or later, which removes the missing capability check.", "If an immediate update is not possible, disable the ajax_post_grid_load_more endpoint by preventing public access to the ajax URL using web server rules (e.g., .htaccess or Nginx configuration).", "Review content visibility settings and enforce stricter role\u2011based access controls to ensure protected posts remain inaccessible to unauthenticated users."], "summary": {"action": "Patch", "impact": "Unauthenticated data exposure"}, "threat_synthesis": {"affected_systems": "WordPress sites that have the wpzoom:WPZOOM Addons for Elementor \u2013 Starter Templates & Widgets plugin installed with a version\u00a0up to and including\u00a01.3.2 are impacted. The vulnerability is present in all versions of the plugin through 1.3.2.", "description_and_impact": "The WPZOOM Addons for Elementor plugin contains a missing capability check in the ajax_post_grid_load_more function. An unauthenticated attacker can call this Ajax endpoint and retrieve the titles and excerpts of posts that are marked as draft, future, or pending, exposing content that should remain confidential. This results in moderate information disclosure.", "risk_and_exploitability": "The CVSS score of 5.3 indicates moderate severity, and the EPSS score of less than 1% suggests a low probability of real\u2011world exploitation at this time. The weakness is not currently listed in CISA\u2019s KEV catalog, but the vulnerability can be triggered simply by accessing the public Ajax URL, requiring no prior authentication or complex conditions. If exploited, an attacker gains read access to protected post content, potentially revealing sensitive information or compromising user privacy."}}}}, "created": "2026-02-11T21:45:51.966163+00:00", "updated": "2026-04-15T17:30:10.477700+00:00", "vendors": ["wordpress", "wordpress$PRODUCT$wordpress", "wpzoom", "wpzoom$PRODUCT$wpzoom_addons_for_elementor_\u2013_starter_templates_&_widgets"]}