medium5.4
CVE-2026-19782
The WPS Bidouille WordPress plugin before 1.33.5 does not have proper authorisation checks in an AJAX action, allowing any authenticated user, such as a subscr…
Impact
The WPS Bidouille WordPress plugin before 1.33.5 does not have proper authorisation checks in an AJAX action, allowing any authenticated user, such as a subscriber, to retrieve the email addresses of all registered users.
Affected products
| Product | Affected versions |
|---|---|
| WPS Bidouille WordPress Plugin | before 1.33.5 |
Versions were read from the advisory text. No structured product data has been published for this record yet.