Information Exposure Vulnerability in Liaison Site Prober Plugin for WordPress

CVE-2026-3569

What is CVE-2026-3569?

The Liaison Site Prober plugin for WordPress is susceptible to an information exposure vulnerability through its REST API endpoint, /wp-json/site-prober/v1/logs. This issue arises from the permissions_read() callback, which indiscriminately returns true without verifying user capabilities. As a result, this flaw allows unauthorized users to access sensitive audit log information, such as IP addresses, user IDs, usernames, login/logout events, and records of failed login attempts. This can significantly compromise the security of affected WordPress sites by revealing critical operational data.

References