Unauthenticated Sensitive Data Exposure in Edwiser Bridge by Edwiser
CVE-2026-39729

7.2HIGH

Key Information:

Vendor

WordPress
Status
Edwiser Bridge
Vendor
CVE Published:
6 October 2026

What is CVE-2026-39729?

The Edwiser Bridge plugin versions 4.3.4 and earlier are susceptible to a significant vulnerability that enables unauthenticated users to access sensitive data. This exposure can lead to the unauthorized retrieval of information stored within the system, potentially compromising user privacy and security.

Affected Version(s)

Edwiser Bridge <= 4.3.4

References

https://patchstack.com/database/wordpress/plugin/edwiser-...
vdb-entry

CVSS V3.1

Score:
7.2
Severity:
HIGH
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Jakub Herman | Patchstack Bug Bounty Program
.