CVE-2026-114195 — WordPress ShopMagic plugin <= 4.9.1 - Sensitive Data Exposure vulnerability

CVE-2026-114195

WordPress ShopMagic plugin <= 4.9.1 - Sensitive Data Exposure vulnerability PUBLISHED

Description (CNA)

Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in WP Desk ShopMagic shopmagic-for-woocommerce allows Retrieve Embedded Sensitive Data.This issue affects ShopMagic: from n/a through 4.9.1.

Affected (CNA)

Vendor / product	Versions
WP Desk / ShopMagic	affected 0 through 4.9.1

CWE

CWE-538

References

https://patchstack.com/database/wordpress/plugin/shopmagic-for-woocommerce/vulnerability/wordpress-shopmagic-plugin-4-9-1-sensitive-data-exposure-vulnerability?_s_id=cve

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.