What is the CVSS score of CVE-2026-16968?

CVE-2026-16968 has a CVSS 3.1 base score of 6.5 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N. EPSS exploitation probability: 0.1%.

Is there a public PoC exploit available for CVE-2026-16968?

Yes, a public proof-of-concept exploit is available for CVE-2026-16968. Prioritise patching immediately. EPSS: 0.1%.

Is there a patch available for CVE-2026-16968?

Yes, a patch is available for CVE-2026-16968. Update the affected software to the latest version immediately.

GeoDirectory CVE-2026-16968

EUVD-2026-53112 MEDIUM

Information Exposure (CWE-200)

2026-08-05 WPScan

GHSA-826p-m5jc-6mc3

WordPress Information Disclosure Geodirectory

6.5

CVSS 3.1 · Vendor: WPScan

Severity by source

Vendor (WPScan) PRIMARY

6.5 MEDIUM

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

vuln.today AI

6.5 MEDIUM

Contributor authentication (PR:L) required over network (AV:N); full user email enumeration justifies C:H with no integrity or availability impact.

3.1 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

4.0 AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Primary rating from Vendor (WPScan).

CVSS VectorVendor: WPScan

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Lifecycle Timeline

Analysis Generated

Aug 05, 2026 - 16:47 vuln.today

Patch available

Aug 05, 2026 - 07:01 EUVD

CVE Published

Aug 05, 2026 - 06:00 cve.org

UNKNOWN (no severity yet)

CVE Published

Aug 05, 2026 - 06:00 cve.org

MEDIUM 6.5

DescriptionCVE.org

The GeoDirectory WordPress plugin before 2.8.168 does not restrict a user-search handler to users allowed to list users, allowing any authenticated user with Contributor-level access or higher to retrieve the email addresses of all registered users, including administrators.

AnalysisAI

Information disclosure in the GeoDirectory WordPress plugin (before 2.8.168) exposes the email addresses of all registered users - including site administrators - to any authenticated Contributor-level or higher user. The root cause is an unrestricted user-search handler that performs no authorization check against WordPress's capability system, meaning any low-privilege authenticated user can invoke it freely. …

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access

Delivery

Authenticate to WordPress site

Exploit

Send crafted request to GeoDirectory user-search handler

Execution

Bypass missing authorization check

Persist

Retrieve all registered user email addresses including admins

Impact

Use emails for phishing or credential-stuffing

Access

Delivery

Authenticate to WordPress site

Exploit

Send crafted request to GeoDirectory user-search handler

Execution

Bypass missing authorization check

Persist

Retrieve all registered user email addresses including admins

Impact

Use emails for phishing or credential-stuffing

Vulnerability AssessmentAI

Exploitation	Exploitation requires a valid WordPress session with at minimum Contributor-level privileges on a site running GeoDirectory prior to version 2.8.168. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment	The CVSS 3.1 vector AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N scores 6.5, accurately reflecting network-accessible, low-complexity exploitation requiring only Contributor-level authentication with no user interaction, resulting in high confidentiality impact but no integrity or availability loss. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario	An attacker registers a Contributor account on a WordPress site with open registration and GeoDirectory installed. Using the publicly available exploit code documented by WPScan, the attacker sends an authenticated request to the unguarded GeoDirectory user-search handler. …
Remediation	Update GeoDirectory to version 2.8.168 or later, which introduces proper authorization checks on the user-search handler. … Detailed patch versions, workarounds, and compensating controls in full report.