{"id":"CVE-2026-22203","state":"PUBLISHED","title":"wpDiscuz before 7.6.47 - Options Export Leaks OAuth Secrets in Plaintext","description":"wpDiscuz before 7.6.47 contains an information disclosure vulnerability that allows administrators to inadvertently expose OAuth secrets by exporting plugin options as JSON. Attackers can obtain exported files containing plaintext API secrets like fbAppSecret, googleClientSecret, twitterAppSecret, and other social login credentials from support tickets, backups, or version control repositories.","publishedAt":"2026-03-13T01:18:09.696Z","updatedAt":"2026-03-13T16:07:55.322Z","severity":{"score":6.9,"label":"Medium","version":"4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N","source":"VulnCheck"},"assigner":"VulnCheck","products":["gVectors wpDiscuz"],"affected":[{"vendor":"gVectors","product":"wpDiscuz","packageURL":"pkg:wordpress-plugin/wpdiscuz","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"7.6.47","versionType":"custom"},{"version":"7.6.47","status":"unaffected"}]}],"references":["https://wordpress.org/plugins/wpdiscuz/#developers","https://wordpress.org/plugins/wpdiscuz/","https://www.vulncheck.com/advisories/wpdiscuz-before-options-export-leaks-oauth-secrets-in-plaintext"],"weaknesses":["CWE-200"],"ingestedAt":"2026-10-29T20:11:21.040Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/22xxx/CVE-2026-22203.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-22203","state":"PUBLISHED","datePublished":"2026-03-13T01:18:09.696Z","dateUpdated":"2026-03-13T16:07:55.322Z","assignerShortName":"VulnCheck","assignerOrgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","dateReserved":"2026-01-06T16:47:17.185Z"},"containers":{"cna":{"title":"wpDiscuz before 7.6.47 - Options Export Leaks OAuth Secrets in Plaintext","descriptions":[{"lang":"en","value":"wpDiscuz before 7.6.47 contains an information disclosure vulnerability that allows administrators to inadvertently expose OAuth secrets by exporting plugin options as JSON. Attackers can obtain exported files containing plaintext API secrets like fbAppSecret, googleClientSecret, twitterAppSecret, and other social login credentials from support tickets, backups, or version control repositories."}],"affected":[{"vendor":"gVectors","product":"wpDiscuz","packageURL":"pkg:wordpress-plugin/wpdiscuz","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"7.6.47","versionType":"custom"},{"version":"7.6.47","status":"unaffected"}]}],"references":[{"url":"https://wordpress.org/plugins/wpdiscuz/#developers","name":"wpDiscuz Changelog","tags":["patch"]},{"url":"https://wordpress.org/plugins/wpdiscuz/","name":"wpDiscuz","tags":["product"]},{"url":"https://www.vulncheck.com/advisories/wpdiscuz-before-options-export-leaks-oauth-secrets-in-plaintext","name":"VulnCheck Advisory: wpDiscuz before 7.6.47 - Options Export Leaks OAuth Secrets in Plaintext","tags":["third-party-advisory"]}],"metrics":[{"cvssV4_0":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","baseScore":6.9,"baseSeverity":"MEDIUM","exploitMaturity":"NOT_DEFINED","privilegesRequired":"HIGH","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"format":"CVSS"},{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":4.9,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"HIGH","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","version":"3.1"},"format":"CVSS"}],"problemTypes":[{"descriptions":[{"cweId":"CWE-200","lang":"en","description":"Exposure of Sensitive Information to an Unauthorized Actor","type":"CWE"}]}],"providerMetadata":{"shortName":"VulnCheck","orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","dateUpdated":"2026-03-13T01:18:09.696Z"},"datePublic":"2026-03-11T00:00:00.000Z","cpeApplicability":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gvectors:wpdiscuz:*:*:*:*:*:wordpress:*:*","versionEndExcluding":"7.6.47"}]}]}],"x_generator":{"engine":"scooter"},"credits":[{"lang":"en","value":"Scott Moore - VulnCheck","type":"finder"}]},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-03-13T16:07:46.382049Z","id":"CVE-2026-22203","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-03-13T16:07:55.322Z"}}]}}}