CVE-2026-59519

MediumCVSS 5.3

Published: 05/07/2026(UTC)Updated: 07/07/2026(UTC)Translated: 08/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.20%

10th percentile - higher than 10% of all known CVEs

Summary

The FormLayer plugin for WordPress versions up to 1.0.6 contains a vulnerability that inserts sensitive information into sent data, allowing retrieval of embedded sensitive data.

Risk Assessment

An attacker can intercept sensitive data (e.g., passwords, tokens) submitted via forms, leading to confidentiality breaches and potential user data leakage.

Recommendation

Immediately update the FormLayer plugin to the latest available version that fixes this vulnerability.

Original NVD description (English source)

Insertion of Sensitive Information Into Sent Data vulnerability in Softaculous FormLayer allows Retrieve Embedded Sensitive Data. This issue affects FormLayer: from n/a through 1.0.6.