CVSS
6.8
CVSS v3.1
EPSS
0.4%
Exploit Prediction Score
Published
August 6, 2026
Exploitability
EPSS probability 0.4%
The DataPress (Dataverse Integration) WordPress plugin before 2.91 does not properly restrict access to its template rendering feature and exposes the viewing user's data to it, allowing users with a role as low as Contributor to disclose sensitive information, such as the session cookies of higher privileged users who view the affected content.
No package data available.
Publisher and database URLs for this record (shown for attribution; reading stays in Bugflare).