Description
Unauthenticated Insecure Direct Object References (IDOR) in REST API Log <= 1.7.2 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Pete Nelson | REST API Log | ≤ 1.7.2 | — |
High · 7.5
CVE-2026-100514
EUVD-2026-90842GHSA-hq3m-89xx-6g67
WordPress REST API Log plugin <= 1.7.2 - Insecure Direct Object References (IDOR) vulnerability
Published Oct 1, 2026 · Updated Oct 1, 2026 · Assigned by Patchstack