SEPTEMBER 14, 2026
Live Feed
Back to database
Case File

CVE-2026-62088

MEDIUM · CVSS 5.3 EPSS 0.20%

Source: NVD + CISA KEV + EPSS · Published 2026-09-11 · Last synced 2026-09-14

CyberRota Analysis

AI-Generated

ElasticPress versions up to 5.3.4 are vulnerable to an information disclosure flaw that allows the retrieval of embedded sensitive data. This could lead to unauthorized access to sensitive information, potentially impacting user privacy and data security. Organizations using affected versions should prioritize remediation to mitigate the risk of data exposure.

CVE
CVE-2026-62088
Severity
MEDIUM
CVSS
5.3
EPSS
0.20%

Original NVD Description

Insertion of Sensitive Information Into Sent Data vulnerability in 10up ElasticPress allows Retrieve Embedded Sensitive Data. This issue affects ElasticPress: from n/a through 5.3.4.