CVE Watch23 jul 2026

CVE-2026-61945

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in MultiVendorX WooCommerce Product Stock Alert all

CVSS

6.5

Medio

EPSS

—

KEV

—

Exploit Today

0-100

Publicado: 23 jul 2026 · Última mod.: 23 jul 2026 · CWE-497

EPSS · 30d

Sin historial EPSS suficiente todavía.

Descripción técnica

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in MultiVendorX WooCommerce Product Stock Alert allows Retrieve Embedded Sensitive Data. This issue affects WooCommerce Product Stock Alert: from n/a through 3.0.6.

Referencias oficiales

patchstack.comhttps://patchstack.com/database/wordpress/plugin/woocommerce-product-stock-alert/vulnerability/wordpress-woocommerce-product-stock-alert-plugin-3-0-6-sensitive-data-exposure-vulnerability?_s_id=cve

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2026-655354.3 MED

—

——0Contributor Sensitive Data Exposure in TinyMCE Templates <= 4.8.1 versions.6h CVE-2026-655215.3 MED

—

——0Unauthenticated Sensitive Data Exposure in WP Social Ninja <= 4.3.0 versions.6h CVE-2026-655055.3 MED

—

——0Unauthenticated Sensitive Data Exposure in Ultimate Store Kit Elementor Addons <= 3.0.5 versions.6h CVE-2026-654985.3 MED

—

——0Unauthenticated Sensitive Data Exposure in Complianz <= 7.5.0 versions.6h CVE-2026-654905.3 MED

—

——0Unauthenticated Sensitive Data Exposure in Create by Mediavine <= 2.5.3 versions.6h CVE-2026-654745.3 MED

—

——0Unauthenticated Sensitive Data Exposure in Ninja Tables <= 5.2.10 versions.6h