CVE-2026-114195
CVE-2026-114195 · WordPress ShopMagic plugin <= 4.9.1 - Sensitive Data Exposure vulnerability
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in WP Desk ShopMagic shopmagic-for-woocommerce allows Retrieve Embedded Sensitive Data.This issue affects ShopMagic: from n/a through 4.9.1.
CVSS 5.3 · Medium · EPSS 0.2% · Fix available
- Published
- Updated
Affected products and versions
shopmagic
- Versions
- ≥ 0, ≤ 4.9.1: Affected; ≥ 4.9.2: Not affected (custom)
Update to 4.9.2