CVE-2026-66684
Received Received - Intake

Unauthenticated Sensitive Data Exposure in Export Import Menus

Publication date: 2026-08-06

Last updated on: 2026-08-06

Assigner: Patchstack

Description
Unauthenticated Sensitive Data Exposure in Export Import Menus <= 1.9.2 versions.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-06
Last Modified
2026-08-06
Generated
2026-08-06
AI Q&A
2026-08-06
EPSS Evaluated
N/A
NVD
CVE-2026-66684
EUVD
EUVD-2026-53895

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
patchstack export_import_menus_plugin to 1.9.2 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-201 The code transmits data to another actor, but a portion of the data includes sensitive information that should not be accessible to that actor.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-66684 is an unauthenticated sensitive data exposure vulnerability in the WordPress Export Import Menus Plugin versions 1.9.2 or lower. It allows attackers to view sensitive information without authentication, potentially leading to further exploitation.

Detection Guidance

To detect this vulnerability, check if the WordPress Export Import Menus plugin version 1.9.2 or lower is installed. Inspect plugin files for exposed sensitive data endpoints or unauthorized access to menu exports. No specific commands are provided in the context.

Impact Analysis

This vulnerability could expose sensitive data that is typically restricted, enabling attackers to gather information that may be used to exploit other system weaknesses. The impact is considered low severity but still poses a risk to data confidentiality.

Mitigation Strategies

Immediately update the Export Import Menus plugin to the latest version if available. If no patch exists, disable the plugin temporarily and contact your hosting provider or a web developer for assistance. Monitor for unusual data access patterns.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-66684. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart