Unknown WPC Admin Columns vulnerabilities

1 vulnerability

Known vulnerabilities in Unknown WPC Admin Columns, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.5CVE-2026-18943unknownwpc admin columns+1
EPSS score
0.37%
The WPC Admin Columns WordPress plugin before 2.3.4 does not have authorisation checks in one of its AJAX actions, allowing users with a role as low as subscriber to read arbitrary user, post and term metadata, including data belonging to administrators.