UNKNOWNCVSS not yet scoredVulnerability
CVE-2026-118168
The MapPress WordPress plugin before 2.97.15 does not restrict which user's data its front-end map embed handler renders, allowing unauthenticated visitors to retrieve the email address and display name of any user on the site by enumerating user IDs.
Properties
- Last source
- NVD
- Nvd fetched at
- 2026-11-01T08:29:47.771607+00:00
- Cve id
- CVE-2026-118168
- First seen by Signal
- 2026-11-01T08:25:06+00:00
- Retrieved at
- 2026-11-01T08:30:51+00:00
- Published at
- 2026-11-01T05:18:57.360
- Last modified
- 2026-11-01T05:18:57.360
Explore deeper with Ninja Signal's threat intelligence graph