Security Advisory
CVE-2026-84926
N/A
UNKNOWN
Vulnerability Description
The EmbedPress WordPress plugin before 4.6.4 does not correctly restrict access to one of its Google Reviews REST routes to administrators, allowing any authenticated user with contributor-level access or above to read the site administrator's email address, a value WordPress core withholds from that role.
Published Date
September 5, 2026
Official Source
NIST NVD Advisory