CVE WatchJul 23, 2026

CVE-2026-61945

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in MultiVendorX WooCommerce Product Stock Alert all

CVSS

6.5

Medium

EPSS

—

KEV

—

Exploit Today

0-100

Published: Jul 23, 2026 · Last modified: Jul 23, 2026 · CWE-497

EPSS · 30d

Not enough EPSS history yet.

Technical description

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in MultiVendorX WooCommerce Product Stock Alert allows Retrieve Embedded Sensitive Data. This issue affects WooCommerce Product Stock Alert: from n/a through 3.0.6.

Official references

patchstack.comhttps://patchstack.com/database/wordpress/plugin/woocommerce-product-stock-alert/vulnerability/wordpress-woocommerce-product-stock-alert-plugin-3-0-6-sensitive-data-exposure-vulnerability?_s_id=cve

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-655354.3 MED

—

——0Contributor Sensitive Data Exposure in TinyMCE Templates <= 4.8.1 versions.5h CVE-2026-655215.3 MED

—

——0Unauthenticated Sensitive Data Exposure in WP Social Ninja <= 4.3.0 versions.5h CVE-2026-655055.3 MED

—

——0Unauthenticated Sensitive Data Exposure in Ultimate Store Kit Elementor Addons <= 3.0.5 versions.5h CVE-2026-654985.3 MED

—

——0Unauthenticated Sensitive Data Exposure in Complianz <= 7.5.0 versions.5h CVE-2026-654905.3 MED

—

——0Unauthenticated Sensitive Data Exposure in Create by Mediavine <= 2.5.3 versions.5h CVE-2026-654745.3 MED

—

——0Unauthenticated Sensitive Data Exposure in Ninja Tables <= 5.2.10 versions.5h