CVE Intelligence

Pete Nelson vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Pete Nelson products: 2 record(s), with severity, exploitation and fixes.

REST API Log 2

Exploited only (KEV) →

CVE-2026-100514 High · 7.5 CWE-639 Oct 1, 2026
WordPress REST API Log plugin <= 1.7.2 - Insecure Direct Object References (IDOR) vulnerability
Unauthenticated Insecure Direct Object References (IDOR) in REST API Log <= 1.7.2 versions.
CVE-2026-66443 High · 7.5 CWE-201 Aug 13, 2026
WordPress REST API Log plugin <= 1.7.1 - Sensitive Data Exposure vulnerability
Unauthenticated Sensitive Data Exposure in REST API Log <= 1.7.1 versions.