EUVD-2026-36854
GHSA-r55f-4694-6xmh
Severity by source
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Subscriber-level auth (PR:L) required over the network (AV:N); purely a confidentiality breach with no integrity or availability impact.
Primary rating from Vendor (Patchstack).
CVSS VectorVendor: Patchstack
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Lifecycle Timeline
1DescriptionCVE.org
Subscriber Sensitive Data Exposure in Visual Link Preview <= 2.4.1 versions.
AnalysisAI
Sensitive data exposure in the Visual Link Preview WordPress plugin (versions up to and including 2.4.1) allows authenticated users with subscriber-level access to access restricted data they should not be authorized to view. The vulnerability stems from insufficient access controls over sensitive system information (CWE-497), permitting any logged-in subscriber to trigger a disclosure endpoint or functionality that returns protected data. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires an authenticated WordPress user account with at minimum Subscriber role privileges (PR:L per CVSS). … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 3.1 score of 6.5 (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) reflects a medium-severity issue with a high confidentiality impact but constrained by requiring authenticated access at subscriber level (PR:L). … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An attacker registers a free subscriber account on a target WordPress site that has the Visual Link Preview plugin installed at version 2.4.1 or earlier and has open user registration enabled. Using their subscriber session cookie, the attacker sends a crafted authenticated HTTP request - likely a WordPress AJAX action or REST API call - to the plugin's endpoint, bypassing the missing or insufficient capability check, and receives sensitive data in the response. … |
| Remediation | Update the Visual Link Preview plugin to a version beyond 2.4.1 as soon as a patched release is published by Bootstrapped Ventures; consult the Patchstack advisory at https://patchstack.com/database/wordpress/plugin/visual-link-preview/vulnerability/wordpress-visual-link-preview-plugin-2-4-1-sensitive-data-exposure-vulnerability for the confirmed fixed version, which was not independently verified in the available intelligence at time of analysis. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Share
External POC / Exploit Code
Leaving vuln.today