CVE-2026-94274 | YayReviews Plugin up to 1.4.0 on WordPress API Route information disclosure

September 30, 2026 Yanac

A vulnerability has been found in YayReviews Plugin up to 1.4.0 on WordPress and classified as problematic. This affects an unknown part of the component API Route. Performing a manipulation results in information disclosure.

This vulnerability is reported as CVE-2026-94274. The attack is possible to be carried out remotely. No exploit exists.

The affected component should be upgraded.VulDB Recent EntriesRead More