{
 "id": "WPSEC-2026-1542",
 "url": "https://wpsec.com/vuln/WPSEC-2026-1542/",
 "json_url": "https://wpsec.com/vuln/WPSEC-2026-1542/advisory.json",
 "markdown_url": "https://wpsec.com/vuln/WPSEC-2026-1542/index.md",
 "title": "Expandable Paywall <= 2.3.1 - Unauthenticated Sensitive Information Exposure via REST API",
 "description": "The Expandable Paywall plugin for WordPress is vulnerable to Sensitive Information Exposure via the WordPress REST API in all versions up to, and including, 2.3.1. This is due to the basic paywall being enforced only on the rendered singular article page (template_redirect), while REST API post responses were returned unmodified. This makes it possible for unauthenticated attackers to read the full content of paywalled articles by requesting endpoints such as /wp-json/wp/v2/posts/<id>, bypassing the paywall.",
 "plugin": {
  "slug": "expandable-paywall",
  "name": "Expandable Paywall",
  "full_name": "Expandable Paywall",
  "wordpress_org": "https://wordpress.org/plugins/expandable-paywall/",
  "advisories_url": "https://wpsec.com/vuln/plugin/expandable-paywall/",
  "attacksurface": "https://attacksurface.wpsec.com/plugin/expandable-paywall"
 },
 "type": "SENSITIVE DATA DISCLOSURE",
 "cwe": [
  "CWE-200"
 ],
 "cve": [],
 "cvss": {
  "version": "3.1",
  "score": 5.3,
  "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
  "severity": "Medium"
 },
 "affected": {
  "ranges": [
   {
    "from": null,
    "from_inclusive": true,
    "to": "2.3.2",
    "to_inclusive": false
   }
  ],
  "text": [
   "all versions before 2.3.2"
  ]
 },
 "introduced_in": null,
 "fixed_in": "2.3.2",
 "remediation": "Update to 2.3.2 or later.",
 "fix_released": "2026-10-22T17:26:45+00:00",
 "published": "2026-10-23T17:42:37+00:00",
 "updated": "2026-10-23T07:10:11.455093+00:00",
 "also_published_as": null,
 "references": [
  "https://wpsec.com/vuln/WPSEC-2026-1542/",
  "https://plugins.svn.wordpress.org/expandable-paywall/tags/2.3.2/",
  "https://wordpress.org/plugins/expandable-paywall/"
 ],
 "attacksurface_url": "https://attacksurface.wpsec.com/plugin/expandable-paywall",
 "source": "WPSec",
 "license": {
  "name": "CC BY 4.0",
  "url": "https://creativecommons.org/licenses/by/4.0/"
 },
 "usage": {
  "plugin": "Low",
  "affected_versions": "None seen",
  "as_of": "2026-10-23"
 }
}