CVE-2026-108686
WP Post Author < 4.2.0 - Unauthenticated reCAPTCHA Secret Key Disclosure
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
The WP Post Author WordPress plugin before 4.2.0 does not restrict the integration settings it returns to visitors, allowing unauthenticated users to read the reCAPTCHA secret key when one has been saved.
| Vendor | unknown |
| Product | wp post author |
| Published | Oct 29, 2026 |
Stay Ahead of the Next One
Get instant alerts for unknown wp post author
Be the first to know when new unknown vulnerabilities affecting unknown wp post author are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Unknown / WP Post Author
0 < 4.2.0
References
Credits
Mutantgun WPScan