Sensitive Information Exposure in Mux Video Uploader for WordPress

CVE-2026-7544

What is CVE-2026-7544?

The Mux Video Uploader plugin for WordPress contains a vulnerability that permits authenticated attackers with subscriber-level permissions or higher to gain unauthorized access to sensitive information. This includes the potential exposure of Mux API credentials through the muxvideo_enqueue_settings_script function. The vulnerability is present in all versions up to and including 1.1.4, making it crucial for site administrators to review their security policies and ensure that their plugins are up to date to mitigate the risks associated with this exposure.

References