{"affected":[{"defaultStatus":"unaffected","product":"AppPresser","source":"CNA: WPScan","vendor":"Unknown","versions":[{"lessThan":"5.0.0","status":"affected","version":"0","versionType":"semver"}]}],"cveId":"CVE-2026-121853","cwes":["CWE-200"],"description":"The AppPresser  WordPress plugin before 5.0.0 does not restrict access to two of its REST API endpoints, allowing unauthenticated visitors to retrieve the installed versions of AppPresser, its add-ons, several third-party AppPresser  WordPress plugin before 5.0.0 and its .","epss":null,"exploits":[{"kind":"exploit","source":"CNA: WPScan","url":"https://wpscan.com/vulnerability/674849e9-44ad-496f-baba-6d17d58b5807/"}],"kev":null,"metrics":[],"modifiedAt":1794549607647,"publishedAt":1794549607647,"references":[{"source":"CNA: WPScan","tags":["exploit","vdb-entry","technical-description"],"url":"https://wpscan.com/vulnerability/674849e9-44ad-496f-baba-6d17d58b5807/"}],"remediation":[],"revision":"33d87726d90d9bbbd6b78db57bf59100aacdf89a6d31dbfb49d2ad67157ab505","sources":[{"modifiedAt":1794549607647,"name":"CNA: WPScan","retrievedAt":1794550143374,"url":"https://www.cve.org/CVERecord?id=CVE-2026-121853"}],"ssvc":null,"status":"published","title":"AppPresser < 5.0.0 - Unauthenticated Plugin and Theme Version Disclosure","updatedAt":1794550143374}