PT-2026-68753
CVE-2026-5336
·
Published
2026-08-06
·
Updated
2026-08-07
Description by
CVSS 3.1
6.8
MediumMetricsAV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
DataPress (Dataverse Integration) WordPress plugin versions prior to 2.91
Description
Insufficient access restrictions in the template rendering feature allow users with Contributor roles to disclose sensitive information. This issue occurs because the feature exposes the data of the viewing user, which can be leveraged to obtain session cookies of higher privileged users who interact with the affected content.
Recommendations
Update the plugin to version 2.91 or later.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾