CVE-2026-49077
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk9th percentile - higher than 9% of all known CVEs
Summary
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Tips and Tricks HQ WP eMember allows Retrieve Embedded Sensitive Data. This issue affects WP eMember from n/a through v10.2.2.
Risk Assessment
An attacker can access sensitive system information, potentially leading to leakage of user data or configuration details.
Recommendation
Update the WP eMember plugin to the latest version and restrict access to sensitive data.
Other vulnerabilities in WP eMember
Original NVD description (English source)
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Tips and Tricks HQ WP eMember allows Retrieve Embedded Sensitive Data. This issue affects WP eMember: from n/a through v10.2.2.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS