Security Flaw in EASY-JS-WPAPI Client for WordPress REST-API
CVE-2026-115213
Currently unrated
Key Information:
- Vendor
WordPress
- Vendor
- CVE Published:
- 9 November 2026
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2026-115213?
The EASY-JS-WPAPI Client for the WordPress REST-API prior to version 2.0 suffers from a serious security flaw that allows unauthenticated users to access stored administrator credentials. This vulnerability stems from the lack of proper authentication verification, which enables attackers to gain unrestricted access to the site as an administrator. Without adequate security measures, sensitive data and site integrity are at risk.
Affected Version(s)
EASY-JS-WPAPI Client HANDLE for the WordPress REST-API 0 <= 2.0
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.