{"vulnerability": "CVE-2026-104643", "sightings": [{"uuid": "ae9ac312-212a-4b89-8281-b60ae3e8f189", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104643", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117443541182220568", "content": "CVE-2026-104643 Easy HTTPS Redirection (SSL) < 2.0.2 - Subscriber+ Scan Result Disclosure and Site-Wide URL Rewrite The Easy HTTPS Redirection (SSL) WordPress plugin before 2.0.2 does not perform capability checks in some of its AJAX actions, allowing any authenticated user, such as a Subscriber, to read URLs its content scanner collected from private and draft posts and from site options, and to trigger a site-wide rewrite of those URLs, once an administrator has run a scan.\nhttps://www.cve.org/CVERecord?id=CVE-2026-104643https://wpscan.com/vulnerability/8b75ec7a-2b37-4e77-a83a-18b5e6f71d51/#CVE_2026_104643#bot", "creation_timestamp": "2026-10-15T06:37:02.358673Z"}]}