CVE-2026-123465

7.5 HIGH

Published 2026-11-09 · Updated 2026-11-09

AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.

NVD description

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in myCred myCred mycred allows Retrieve Embedded Sensitive Data.This issue affects myCred: from n/a through 4.0.2.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weaknesses

CWE-497

All references

https://patchstack.com/database/wordpress/plugin/mycred/vulnerability/wordpress-mycred-plugin-4-0-2-sensitive-data-exposure-vulnerability?_s_id=cve

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

MEDIUMCVE-2025-33141
HIGHCVE-2026-102387
MEDIUMCVE-2026-102868
MEDIUMCVE-2026-104401
MEDIUMCVE-2026-105073
MEDIUMCVE-2026-105557
UNSCOREDCVE-2026-106106PoC
MEDIUMCVE-2026-108018

Related by shared AI tags and CWE weakness class. Browse the full archive.