easy-login-woocommerce < 4.0.2 Unauthenticated Email Address Disclosure via Lost Password Response (CVE-2026-18470)

Vulnerability Overview Vulnerability Name: Login & Register Forms < 4.0.2 - Unauthenticated Registered User Email Address Disclosure via Lost Password Response Description: The plugin does not verify that password reset requests originate from the account owner and fails to adequately mask information in the return address, allowing unauthorized users to obtain the email addresses of registered users (including administrators). Conditions: The non-default CAPTCHA reset mode must be enabled; default settings are not affected. Impact: By preserving address length and structure, attackers can reconstruct and validate full candidate addresses. If the username itself is in an email format, the stored address will be returned in full. Affected Scope Affected Plugin: easy-login-woocommerce Fixed Version: 4.0.2 Remediation Fixed Version: Upgrade to version 4.0.2 or higher. Additional Information CVE Number: CVE-2026-18470 Classification: - Type: Sensitive Data Exposure - OWASP Top 10: A3: Sensitive Data Exposure - CWE: CWE-200 - CVSS Score: 5.3 (Medium) Researcher: Artus KG Submitter: Artus KG Twitter: @artuskg Validation Status: Validated WPVDB ID: 589b7661-4a0d-4041-8c29-2819d8b1e402 Timeline: - Public Release Date: 2026-08-05 - Added Date: 2026-08-05 - Last Updated Date: 2026-08-05 Related Vulnerabilities Active Directory Integration < 4.1.10: Unauthorized log leakage OneClick Chat to Order < 1.0.9: Insecure Direct Object Reference leading to unauthorized sensitive information disclosure Open Graph < 1.11.3: Unauthorized sensitive information disclosure Code Quality Control Tool < 2.2: Unauthorized information leakage via log files Ultimate Member Widgets for Elementor < 2.4: Unauthorized information disclosure Summary This vulnerability involves unauthorized users obtaining registered users' email addresses through the lost password response. It is recommended to upgrade to version 4.0.2 or higher as soon as possible to fix this issue.

Goal Reached Thanks to every supporter — we hit 100%!

easy-login-woocommerce < 4.0.2 Unauthenticated Email Address Disclosure via Lost Password Response (CVE-2026-18470)

More from this source