CVE-2026-121853
Received Received - Intake

Information Disclosure in AppPresser WordPress Plugin

Publication date: 2026-11-13

Last updated on: 2026-11-13

Assigner: WPScan

Description
The AppPresser WordPress plugin before 5.0.0 does not restrict access to two of its REST API endpoints, allowing unauthenticated visitors to retrieve the installed versions of AppPresser, its add-ons, several third-party AppPresser WordPress plugin before 5.0.0 and its .

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-11-13
Last Modified
2026-11-13
Generated
2026-11-13
AI Q&A
2026-11-13
EPSS Evaluated
N/A
NVD
CVE-2026-121853
EUVD
EUVD-2026-124842

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
Unknown AppPresser From 0 (inc) to 5.0.0 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-121853 is a vulnerability in the AppPresser WordPress plugin versions before 5.0.0. It allows unauthenticated users to access two REST API endpoints that expose sensitive information such as installed versions of AppPresser, its add-ons, third-party plugins, and themes.

Impact Analysis

This vulnerability could allow attackers to gather information about your WordPress setup without authentication. This information might be used to identify outdated or vulnerable components, increasing the risk of further attacks or data breaches.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-121853. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart

Security Radar

News mentioning this vulnerability
Loading related security news...