{"id":"CVE-2026-104643","title":"The Easy HTTPS Redirection (SSL) WordPress plugin before 2.0.2 does not perform capability checks in some of its AJAX actions, allowing any authenticated user, such as a Subscriber, to read URLs its content scanner collected from private…","summary":"The Easy HTTPS Redirection (SSL) WordPress plugin before 2.0.2 does not perform capability checks in some of its AJAX actions, allowing any authenticated user, such as a Subscriber, to read URLs its content scanner collected from private…","severity":"medium","cvss":4.2,"cvssVector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N","cwe":["CWE-862"],"product":"Easy HTTPS Redirection (SSL)","affected":["easy_https_redirection_ssl < 2.0.2"],"published":"2026-10-15","updated":"2026-10-15","sourceUpdated":"2026-10-15T14:47:05.720","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-104643","references":[{"url":"https://wpscan.com/vulnerability/8b75ec7a-2b37-4e77-a83a-18b5e6f71d51/","label":"contact@wpscan.com"}],"tags":["nvd","cve.org"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-10-15T10:38:11.571612Z"},"ingestedAt":"2026-10-15T06:56:27.297Z","epss":0.00145,"epssPercentile":0.03744,"slug":"CVE-2026-104643","body":"## Overview\n\nThe Easy HTTPS Redirection (SSL) WordPress plugin before 2.0.2 does not perform capability checks in some of its AJAX actions, allowing any authenticated user, such as a Subscriber, to read URLs its content scanner collected from private and draft posts and from site options, and to trigger a site-wide rewrite of those URLs, once an administrator has run a scan.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":23,"depthScoreParts":{"impact":23.1,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[{"seq":222128,"id":"CVE-2026-104643","ts":1792062087598,"field":"cvss","old":null,"new":"4.2"},{"seq":222127,"id":"CVE-2026-104643","ts":1792062087598,"field":"severity","old":"none","new":"medium"}]}