What is CVE-2026-16547?

CVE-2026-16547 is a medium-severity vulnerability in Rest Api Log, classified under Improper Access Control. CVSS score: 5.9/10. Published 2026-08-04.

How severe is CVE-2026-16547?

Medium severity. CVSS v3 base score is 5.9 out of 10.

Vulnerability in Rest Api Log

CVE-2026-16547

The REST API Log WordPress plugin before 1.7.1 does not bind the token protecting its log download feature to the log entry being requested, nor does it check the capability of the requester, allowing unauthenticated users in possession of…

CVSS v3 metric

CVSS v3 base score 5.9 (Medium). Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N.

Affected products

Unknown Rest Api Log — versions 0

Weakness classification (CWE)

CWE-284 — Improper Access Control

References

contact@wpscan.com (technical-description, exploit, vdb-entry)

Frequently asked questions

What is CVE-2026-16547?: CVE-2026-16547 is a medium-severity vulnerability in Rest Api Log, classified under Improper Access Control. CVSS score: 5.9/10. Published 2026-08-04.
How severe is CVE-2026-16547?: Medium severity. CVSS v3 base score is 5.9 out of 10.