CVE-2026-102387: WordPress Xserver Migrator plugin <= 1.6.6 - Sensitive Data Exposure vulnerability

Q: Who can exploit this issue?

The issue is unauthenticated, so an attacker does not need a WordPress account or prior privileges to attempt exploitation over the network.

Q: What is the potential impact if exploitation succeeds?

The vulnerability can expose sensitive data. The supplied CVSS vector indicates high confidentiality impact, with no stated integrity or availability impact.

Q: Which plugin versions are affected?

Xserver Migrator versions 1.6.6 and earlier are affected. The provided information does not identify a fixed version.

Published Oct 6, 2026

Updated

Unauthenticated Sensitive Data Exposure in Xserver Migrator <= 1.6.6 versions.

Affected Software

1 affected component

Xserver Xserver Migrator<=1.6.6

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade WordPress Xserver Migrator plugin to a version that resolves this vulnerability.
Fixed in 1.6.7

Event History

Oct 6, 2026

CVE Published

via MITRE·08:35 AM

Data Sourced

via MITRE·08:35 AM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·09:17 AM

DescriptionSeverityWeakness

Frequently Asked Questions

Who can exploit this issue?

The issue is unauthenticated, so an attacker does not need a WordPress account or prior privileges to attempt exploitation over the network.

What is the potential impact if exploitation succeeds?

The vulnerability can expose sensitive data. The supplied CVSS vector indicates high confidentiality impact, with no stated integrity or availability impact.

Which plugin versions are affected?

Xserver Migrator versions 1.6.6 and earlier are affected. The provided information does not identify a fixed version.

CVE-2026-102387: WordPress Xserver Migrator plugin <= 1.6.6 - Sensitive Data Exposure vulnerability

Affected Software

Remediation

Event History

Frequently Asked Questions

Who can exploit this issue?

What is the potential impact if exploitation succeeds?

Which plugin versions are affected?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

What is the potential impact if exploitation succeeds?

Which plugin versions are affected?