CVE-2026-114195 — WordPress ShopMagic plugin <= 4.9.1 - Sensitive Data Exposure vulnerability
Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in WP Desk ShopMagic shopmagic-for-woocommerce allows Retrieve Embedded Sensitive D…
Published: 2026-10-22 · CVSS: 5.3 · CVSS 3.1
Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in WP Desk ShopMagic shopmagic-for-woocommerce allows Retrieve Embedded Sensitive Data.This issue affects ShopMagic: from n/a through 4.9.1.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7