CVE-2026-104401

4.3 MEDIUM

Published 2026-10-05 · Updated 2026-10-06

AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.

NVD description

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Memberful Memberful - Membership Plugin memberful-wp allows Retrieve Embedded Sensitive Data.This issue affects Memberful - Membership Plugin: from n/a through 1.81.2.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Weaknesses

CWE-497

All references

https://patchstack.com/database/wordpress/plugin/memberful-wp/vulnerability/wordpress-memberful-membership-plugin-plugin-1-81-2-sensitive-data-exposure-vulnerability?_s_id=cve

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

MEDIUMCVE-2025-33141
HIGHCVE-2026-102387
MEDIUMCVE-2026-105073
UNSCOREDCVE-2026-106106PoC
MEDIUMCVE-2026-108462
MEDIUMCVE-2026-110466
CRITICALCVE-2026-44945PoC
MEDIUMCVE-2026-62036

Related by shared AI tags and CWE weakness class. Browse the full archive.