WordPress Plugin Vulnerabilities

Ezoic < 2.23.1 - Unauthenticated Database Export via Content Export REST Routes

Description

The plugin does not properly restrict access to some of its content export functionality, allowing unauthenticated attackers to trigger a server-side export of the site's database, including user password hashes and password reset tokens, as well as to persistently change some of its settings.

Proof of Concept

Affects Plugins

Plugin icon
ezoic-integration
Fixed in 2.23.1

References

CVE
CVE-2026-18789

Classification

Type
NO AUTHORISATION
OWASP top 10
A5: Broken Access Control
CWE
CWE-862
CVSS
7.5 (high)

Miscellaneous

Original Researcher
Usama Arshad
Submitter
Usama Arshad
Submitter website
https://www.usamaarshad.me/
Submitter twitter
usama0x01
Verified
Yes
WPVDB ID
1e2ce237-dc91-4144-875a-339b5ea05f3a

Timeline

Publicly Published
2026-08-10 (about 3 days ago)
Added
2026-08-10 (about 2 days ago)
Last Updated
2026-08-11 (about 1 day ago)

Other

Published
Title
Published
2026-02-17
Title
Blog2Social: Social Media Auto Post & Scheduler < 8.7.5 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Modification
Published
2024-07-15
Title
Brizy – Page Builder < 2.4.45 - Missing Authorization to Authenticated (Contributor+) Post Modification
Published
2023-12-21
Title
Uncode Core < 2.8.9 - Authenticated (Subscriber+) Arbitrary File Deletion
Published
2026-01-06
Title
Unify < 3.4.10 - Missing Authorization to Unauthenticated Option Deletion via 'unify_plugin_downgrade' Parameter
Published
2026-01-29
Title
SupportCandy – Helpdesk & Customer Support Ticket System < 3.4.5 - Missing Authorization