WP Crowdfunding: Unauthenticated sensitive data exposure (CVE-2026-118083)
WP Crowdfunding versions 2.2.2 and earlier contain an unauthenticated sensitive data exposure vulnerability.
CVE search metadata
CVE search record: CVE-2026-118083. Severity: high. CVSS: 7.5. KEV: no. Product: WP Crowdfunding (<= 2.2.2). Brief: WP Crowdfunding: Unauthenticated sensitive data exposure (CVE-2026-118083). Brief link: https://feed.craftedsignal.io/briefs/2026-10-wp-crowdfunding-data-exposure/
CVE search record: CVE-2026-42692. Severity: high. CVSS: 7.1. KEV: no. Product: WP Crowdfunding (<= 2.2.2). Brief: WP Crowdfunding: Unauthenticated sensitive data exposure (CVE-2026-118083). Brief link: https://feed.craftedsignal.io/briefs/2026-10-wp-crowdfunding-data-exposure/
Triage facts
Revision 2- Applicability
- WP Crowdfunding (<= 2.2.2)
- Evidence
- Unknown
- Severity
- High
- Sources
- 2 public sources
- Freshness
- Revision 2Oct 29, 17:41 UTC
- Vulnerabilities
- 2 CVEs
- Source quality
- A2Roughly even chance
Revision history 1 entry · Revision 2
- Revision 2
added CVE-2026-42692
Changed: cves, lastmod, references, tags, updates
Sources: 1
CVE-2026-118083 identifies an unauthenticated sensitive data exposure vulnerability in WP Crowdfunding versions 2.2.2 and earlier. The vulnerability has a CVSS v3.1 base score of 7.5.