CVE-2026-119273

{
  "etk_id": "ETK-2026-4032",
  "cve_id": "CVE-2026-119273",
  "display_id": "CVE-2026-119273",
  "ghsa_id": "GHSA-8fwc-9jq4-4rmv",
  "euvd_id": "EUVD-2026-120813",
  "status": "published",
  "anchor_state": "anchored",
  "title": "Unauthenticated security log disclosure in BulletProof Security",
  "summary": "BulletProof Security for WordPress through 7.2 may expose security log files on deployments where web-server access controls are not enforced. An unauthenticated attacker could read logged request data, including sensitive authentication material. Exposure depends on the affected log files being reachable through the web server.",
  "mitigation": "Restrict web access to BulletProof Security log files and review deployed web-server rules to ensure those files cannot be served. Limit access to affected installations and rotate potentially exposed authentication material; no fixed version is recorded in the advisory.",
  "vendor": null,
  "product": "BulletProof Security",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        ">= 0, <= 7.2"
      ],
      "ecosystem": null,
      "fixed_versions": [],
      "package_name": "BulletProof Security",
      "purl": null
    }
  ],
  "cwes": null,
  "cvss_score": null,
  "cvss_src": null,
  "cvss_vector": null,
  "epss_score": null,
  "epss_percentile": null,
  "epss_asof": null,
  "automation": "deterministic",
  "check": false,
  "check_confidence_basis": null,
  "exploit": false,
  "pipeline_minutes": 24.145811066666667,
  "t0_at": "2026-11-10T06:00:04.617000+00:00",
  "signals": {
    "trigger_signal": {
      "at": "2026-11-10T06:00:04.617000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-11-10T06:00:04.617000+00:00",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-119273"
    }
  }
}