Product

WildApricotPress Add-on – Member Directory (1.0.0)

1 brief RSS

Unauthenticated PII Disclosure in NewPath WildApricotPress WordPress Plugin

CVE-2026-13736 allows unauthenticated attackers to scrape sensitive member PII from the NewPath WildApricotPress Member Directory WordPress plugin via an insecure REST API endpoint.

WildApricotPress Add-on – Member Directory wordpress information-disclosure rest-api pii

1r 2t 1c 5m ago