Security Flaw in Popular WordPress Plugin Exposes Sensitive Information
CVE-2026-14920
Currently unrated
Key Information:
- Vendor
WordPress
- Status
- Vendor
- CVE Published:
- 2 August 2026
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2026-14920?
A vulnerability has been identified in a popular WordPress plugin, allowing unauthorized users to access sensitive information. This security flaw can potentially lead to data exposure, putting user privacy at risk. All versions of the affected plugin are susceptible, making it crucial for administrators to implement security measures and updates promptly. Site owners should regularly monitor for announcements from the vendor and apply patches to safeguard their systems.
Affected Version(s)
AcyMailing 0 < 10.11.1
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.