CVE-2026-123465

HIGH NVD

CVSS Score 7.5

Severity HIGH

Published Nov 09, 2026

Vendor unknown

Description

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in myCred myCred mycred allows Retrieve Embedded Sensitive Data.This issue affects myCred: from n/a through 4.0.2.

References

https://patchstack.com/database/wordpress/plugin/mycred/vulnerability/wordpress-mycred-plugin-4-0-2-sensitive-data-exposure-vulnerability?_s_id=cve