CVE Catalog
CVE-2026-39469
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk0.18%
8th percentile - higher than 8% of all known CVEs
Summary
The PageLayer plugin for WordPress up to version 2.0.8 has an exposure of sensitive system information vulnerability that allows retrieving embedded sensitive data.
Risk Assessment
The organization risks leakage of confidential system information, such as configurations or credentials, which could facilitate further attacks.
Recommendation
Update the PageLayer plugin to the latest version. Remove or secure any embedded sensitive data in page content.
Original NVD description (English source)
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Softaculous PageLayer pagelayer allows Retrieve Embedded Sensitive Data.This issue affects PageLayer: from n/a through <= 2.0.8.