Sensitive Data Exposure in WP Desk ShopMagic for WooCommerce

CVE-2026-114195

What is CVE-2026-114195?

The ShopMagic for WooCommerce plugin by WP Desk is susceptible to a vulnerability that permits the insertion of sensitive information into an externally-accessible file or directory. This security flaw enables attackers to retrieve embedded sensitive data, which poses significant risks to users' information security and data protection efforts. The affected version includes ShopMagic up to 4.9.1, emphasizing the need for users to update their installations promptly to mitigate potential security threats.

References