CVE-2026-19782

The WPS Bidouille WordPress plugin prior to version 1.33.5 contains a vulnerability that lacks adequate authorization checks in an AJAX action, enabling any authenticated user, including subscribers, to access the email addresses of all registered users. This exposure can lead to privacy breaches and potential phishing attacks. WordPress site administrators using this plugin should prioritize updating to the latest version to mitigate this risk.