What is the CVSS score of CVE-2026-65535?

CVE-2026-65535 has a CVSS 3.1 base score of 4.3 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N. EPSS exploitation probability: 0.2%.

TinyMCE Templates CVE-2026-65535

EUVD-2026-48136 MEDIUM

Exposure of Sensitive System Information to an Unauthorized Control Sphere (CWE-497)

2026-07-23 Patchstack

GHSA-q6w3-4rvx-qj26

WordPress Information Disclosure Wordpress Plugin Tinymce Templates

4.3

CVSS 3.1 · Vendor: Patchstack

Severity by source

Vendor (Patchstack) PRIMARY

4.3 MEDIUM

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

vuln.today AI

4.3 MEDIUM

Requires Contributor-role authentication (PR:L); network-reachable via WordPress; confidentiality-only impact with no integrity or availability consequence.

3.1 AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

4.0 AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Primary rating from Vendor (Patchstack).

CVSS VectorVendor: Patchstack

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

None

Availability

None

Lifecycle Timeline

Analysis Generated

Jul 23, 2026 - 13:09 vuln.today

DescriptionCVE.org

Contributor Sensitive Data Exposure in TinyMCE Templates <= 4.8.1 versions.

AnalysisAI

Sensitive data exposure in the TinyMCE Templates WordPress plugin (versions <= 4.8.1) allows authenticated users holding the Contributor role to access information beyond their authorization boundary. The flaw is classified under CWE-497, indicating that system or application internals are being surfaced to an unauthorized control sphere - in this case, low-privileged WordPress users. No active exploitation or public proof-of-concept has been identified at time of analysis, and the CVSS score of 4.3 (Medium) reflects the limited scope: confidentiality-only impact with no integrity or availability consequences.

Technical ContextAI

The affected component is the TinyMCE Templates WordPress plugin (CPE: cpe:2.3:a:takayuki_miyauchi:tinymce_templates:*:*:*:*:*:*:*:*), developed by Takayuki Miyauchi and available through the WordPress plugin ecosystem. TinyMCE Templates extends the TinyMCE WYSIWYG editor within WordPress to support reusable content templates. CWE-497 (Exposure of Sensitive System Information to an Unauthorized Control Sphere) is the root cause class, meaning the plugin exposes data - likely internal WordPress configuration, template metadata, path information, or similar - to Contributors who should be restricted from seeing it. WordPress Contributors are unprivileged editorial roles that can create and edit posts but cannot publish or manage settings; any plugin functionality accessible to this role that returns sensitive data constitutes a privilege boundary violation.

RemediationAI

Check the WordPress plugin repository or the Patchstack advisory at https://patchstack.com/database/wordpress/plugin/tinymce-templates/vulnerability/wordpress-tinymce-templates-plugin-4-8-1-sensitive-data-exposure-vulnerability for a patched release beyond version 4.8.1 - an exact fix version is not independently confirmed from the available data. If a patched version is not yet available, site administrators should audit whether Contributor-role accounts are held by untrusted users and restrict that role assignment as a compensating control; reducing the Contributor user count limits the exploitable attack surface with minimal operational impact. Additionally, consider whether the TinyMCE Templates plugin is actively needed: deactivating it removes the attack surface entirely until a patch is confirmed. No generic 'defense in depth' measures substitute for patching once a fix is released.