Trustedlogin Connector
Monthly
Unauthenticated sensitive data exposure in the TrustedLogin Connector WordPress plugin (versions 2.0.3 and earlier) allows any remote attacker to read information that should not be publicly accessible. The vulnerability is rated CVSS 3.1 5.3 (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N), meaning it is network-reachable, requires no authentication, no privileges and no user interaction, but the impact is confined to a LOW-severity confidentiality leak with no integrity or availability effect. Exploitation status is no public exploit identified at time of analysis, and no CISA KEV listing or public proof-of-concept was reported by the source (Patchstack) or by EUVD-2026-85503; the practical limiter on risk is the narrow scope of the leak rather than the difficulty of reaching it.
Unauthenticated sensitive data exposure in the TrustedLogin Connector WordPress plugin (versions 2.0.3 and earlier) allows any remote attacker to read information that should not be publicly accessible. The vulnerability is rated CVSS 3.1 5.3 (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N), meaning it is network-reachable, requires no authentication, no privileges and no user interaction, but the impact is confined to a LOW-severity confidentiality leak with no integrity or availability effect. Exploitation status is no public exploit identified at time of analysis, and no CISA KEV listing or public proof-of-concept was reported by the source (Patchstack) or by EUVD-2026-85503; the practical limiter on risk is the narrow scope of the leak rather than the difficulty of reaching it.