What is the CVSS score of CVE-2026-66684?

CVE-2026-66684 has a CVSS 3.1 base score of 5.3 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N. EPSS exploitation probability: 0.2%.

Export Import Menus CVE-2026-66684

EUVD-2026-53895 MEDIUM

Insertion of Sensitive Information Into Sent Data (CWE-201)

2026-08-06 Patchstack

GHSA-v4p5-f2r6-mrr7

WordPress Information Disclosure Wordpress Plugin Export Import Menus

5.3

CVSS 3.1 · Vendor: Patchstack

Severity by source

Vendor (Patchstack) PRIMARY

5.3 MEDIUM

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

vuln.today AI

5.3 MEDIUM

Network-accessible unauthenticated export endpoint with no prerequisites; impact limited to partial confidentiality, with no integrity or availability consequences.

3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

4.0 AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Primary rating from Vendor (Patchstack).

CVSS VectorVendor: Patchstack

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

None

Availability

None

Lifecycle Timeline

Analysis Generated

Aug 06, 2026 - 16:05 vuln.today

DescriptionCVE.org

Unauthenticated Sensitive Data Exposure in Export Import Menus <= 1.9.2 versions.

AnalysisAI

Unauthenticated sensitive data exposure in the Export Import Menus WordPress plugin (versions up to and including 1.9.2) allows remote, unauthenticated attackers to access sensitive information by invoking the plugin's export functionality without any credentials. Classified under CWE-201 (Insertion of Sensitive Information Into Sent Data), the plugin returns sensitive data in its HTTP responses to unauthenticated requests. No public exploit code has been identified at time of analysis, and this CVE does not appear on the CISA Known Exploited Vulnerabilities catalog.

Technical ContextAI

The Export Import Menus plugin, authored by akshay_menariya and identified by CPE cpe:2.3:a:akshay_menariya:export_import_menus:*:*:*:*:*:*:*:*, provides WordPress administrators with functionality to export and import navigation menu configurations. CWE-201 (Insertion of Sensitive Information Into Sent Data) indicates the root cause is that the plugin transmits sensitive information in responses - likely exposing exported menu data or underlying WordPress configuration details - without enforcing authentication on the relevant REST API endpoint or admin-ajax handler. The CVSS vector AV:N/AC:L/PR:N/UI:N confirms the endpoint is reachable over the network with no prerequisites, consistent with a publicly accessible WordPress REST or AJAX route lacking a capability check or nonce verification.

RemediationAI

Update the Export Import Menus plugin beyond version 1.9.2 as soon as a patched release becomes available; the Patchstack advisory at https://patchstack.com/database/wordpress/plugin/export-import-menus/vulnerability/wordpress-export-import-menus-plugin-1-9-2-sensitive-data-exposure-vulnerability should be monitored for a confirmed fix version, which has not been independently identified in the current input data. As a compensating control, administrators should disable or deactivate the plugin entirely if export/import functionality is not actively required, which eliminates the attack surface with no side effects beyond loss of that feature. Alternatively, restricting access to WordPress admin-ajax.php or relevant REST API routes via server-level rules (e.g., nginx location blocks or WAF rules) for unauthenticated requests can reduce exposure, though this may affect other plugin functionality. No patch version has been confirmed from the available data - treat the input as 'patch available per Patchstack advisory' pending vendor release confirmation.