headless_cms_plugin vulnerabilities

CVEs whose affected-version data names the headless_cms_plugin package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-121509Medium· 5.3PoC

5d ago

Headless CMS Plugin REST API post get_required_post_data information disclosure

A security flaw has been discovered in Headless CMS Plugin up to 2.0.4 on WordPress. This affects the function get_required_post_data of the file /wp-json/rae/v1/post of the component REST API. The manipulation of the argument post_id/po…

▾ TwilightEPSS 0.38%via CVEORG