{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-105983", "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", "state": "PUBLISHED", "assignerShortName": "WPScan", "dateReserved": "2026-10-06T10:03:26.521Z", "datePublished": "2026-11-14T06:00:05.988Z", "dateUpdated": "2026-11-14T06:00:05.988Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", "shortName": "WPScan", "dateUpdated": "2026-11-14T06:00:05.988Z"}, "title": "Email Marketing 4Dem <= 2.0.5 - Unauthenticated Settings Modification and Configuration Disclosure", "problemTypes": [{"descriptions": [{"description": "CWE-862 Missing Authorization", "lang": "en", "type": "CWE"}]}], "affected": [{"vendor": "Unknown", "product": "Email Marketing 4Dem", "versions": [{"status": "affected", "versionType": "semver", "version": "0", "lessThanOrEqual": "2.0.5"}], "defaultStatus": "unknown"}], "descriptions": [{"lang": "en", "value": "The Email Marketing 4Dem WordPress plugin through 2.0.5 does not perform authorization or capability checks on several of its AJAX actions and REST routes, allowing unauthenticated users to disclose the Email Marketing 4Dem WordPress plugin through 2.0.5's stored configuration and data and to modify its stored settings."}], "references": [{"url": "https://wpscan.com/vulnerability/9f280371-d1de-4bf9-8200-44b8e3e4b71d/", "tags": ["exploit", "vdb-entry", "technical-description"]}], "credits": [{"lang": "en", "value": "Pablo Gonz\u00e1lez P\u00e9rez", "type": "finder"}, {"lang": "en", "value": "Francisco Jos\u00e9 Ram\u00edrez Vicente", "type": "finder"}, {"lang": "en", "value": "and I\u00f1igo S\u00e1nchez Enciso", "type": "finder"}, {"lang": "en", "value": "WPScan", "type": "coordinator"}], "source": {"discovery": "EXTERNAL"}, "x_generator": {"engine": "WPScan CVE Generator"}}}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unknown", "product": "Email Marketing 4Dem", "vendor": "Unknown", "versions": [{"lessThanOrEqual": "2.0.5", "status": "affected", "version": "0", "versionType": "semver"}]}], "source": "contact@wpscan.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The Email Marketing 4Dem WordPress plugin through 2.0.5 does not perform authorization or capability checks on several of its AJAX actions and REST routes, allowing unauthenticated users to disclose the Email Marketing 4Dem WordPress plugin through 2.0.5's stored configuration and data and to modify its stored settings."}], "id": "CVE-2026-105983", "lastModified": "2026-11-14T07:17:12.540", "metrics": {}, "published": "2026-11-14T07:17:12.540", "references": [{"source": "contact@wpscan.com", "url": "https://wpscan.com/vulnerability/9f280371-d1de-4bf9-8200-44b8e3e4b71d/"}], "sourceIdentifier": "contact@wpscan.com", "vulnStatus": "Received"}

{}

{"created": "2026-11-14T11:45:21.905665+00:00", "updated": "2026-11-14T11:45:21.905678+00:00", "vendors": [], "weaknesses": ["CWE-285", "CWE-200"]}