EASY-JS-WPAPI Client HANDLE for the WordPress REST-API (Through 2.0) - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/easy-js-wpapi-client-handle-for-the-wordpress-rest-api-through-2.0/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioMon, 09 Nov 2026 17:49:49 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgEASY-JS-WPAPI Client HANDLE: Sensitive information disclosure and authentication bypass (CVE-2026-115213)https://feed.craftedsignal.io/briefs/2026-11-easy-js-wpapi-vuln/Mon, 09 Nov 2026 17:49:49 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-easy-js-wpapi-vuln/The EASY-JS-WPAPI Client HANDLE WordPress plugin through version 2.0 does not prevent disclosure of stored administrator credentials to unauthenticated users and fails to correctly verify authentication, allowing unauthenticated attackers to gain full administrator access.<p>CVE-2026-115213 identifies a vulnerability in the EASY-JS-WPAPI Client HANDLE for the WordPress REST-API plugin through version 2.0. The plugin fails to prevent disclosure of stored administrator credentials to unauthenticated users and does not correctly verify authentication, allowing unauthenticated attackers to obtain administrator credentials and gain full administrator access to the site.</p> criticaladvisory