{
 "id": "WPSEC-2026-1978",
 "url": "https://wpsec.com/vuln/WPSEC-2026-1978/",
 "json_url": "https://wpsec.com/vuln/WPSEC-2026-1978/advisory.json",
 "markdown_url": "https://wpsec.com/vuln/WPSEC-2026-1978/index.md",
 "title": "Titan Anti-spam & Security <= 7.5.4 - Unauthenticated Sensitive Information Exposure via Debug Log Export",
 "description": "The Titan Anti-spam & Security plugin for WordPress is vulnerable to Sensitive Information Exposure via the debug log export feature in all versions up to, and including, 7.5.4. This is due to the export ZIP archive, which contains the plugin's logs and system information, being written to the public uploads directory under a predictable date-based filename (titan_debug_report-YYYY-MM-DD.zip) and never being removed. This makes it possible for unauthenticated attackers to download the archive and read potentially sensitive log and system data after an administrator has exported the logs.",
 "plugin": {
  "slug": "anti-spam",
  "name": "Titan Anti-spam & Security",
  "full_name": "Titan Anti-spam & Security – Brute Force Protection, 2FA & Spam Filter",
  "wordpress_org": "https://wordpress.org/plugins/anti-spam/",
  "advisories_url": "https://wpsec.com/vuln/plugin/anti-spam/",
  "attacksurface": "https://attacksurface.wpsec.com/plugin/anti-spam"
 },
 "type": "SENSITIVE DATA DISCLOSURE",
 "cwe": [
  "CWE-552"
 ],
 "cve": [],
 "cvss": {
  "version": "3.1",
  "score": 3.7,
  "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
  "severity": "Low"
 },
 "affected": {
  "ranges": [
   {
    "from": "7.5.0",
    "from_inclusive": true,
    "to": "7.5.5",
    "to_inclusive": false
   }
  ],
  "text": [
   "from 7.5.0 before 7.5.5"
  ]
 },
 "introduced_in": "7.5.0",
 "fixed_in": "7.5.5",
 "remediation": "Update to 7.5.5 or later.",
 "fix_released": "2026-10-28T23:44:42+00:00",
 "published": "2026-10-29T23:45:53+00:00",
 "updated": "2026-10-29T17:42:35.929549+00:00",
 "also_published_as": null,
 "references": [
  "https://wpsec.com/vuln/WPSEC-2026-1978/",
  "https://plugins.svn.wordpress.org/anti-spam/tags/7.5.5/",
  "https://wordpress.org/plugins/anti-spam/"
 ],
 "attacksurface_url": "https://attacksurface.wpsec.com/plugin/anti-spam",
 "source": "WPSec",
 "license": {
  "name": "CC BY 4.0",
  "url": "https://creativecommons.org/licenses/by/4.0/"
 },
 "usage": {
  "plugin": "Medium",
  "affected_versions": "Low",
  "as_of": "2026-10-29"
 }
}