CVE-2026-110361: WordPress Infinite Uploads plugin <= 3.4.1 - Sensitive Data Exposure vulnerability

Q: What level of access does an attacker need to exploit this issue?

The vulnerability requires low-level privileges. It can be exploited remotely without user interaction, but it is not exploitable by an entirely unauthenticated attacker according to the provided vector.

Q: What is the potential impact if exploitation succeeds?

Successful exploitation may expose sensitive information embedded in data sent by the plugin. The provided severity vector indicates high confidentiality impact, with no stated integrity or availability impact.

Q: Which Infinite Uploads versions are affected?

The issue affects ClikIT Infinite Uploads through version 3.4.1. No unaffected fixed version is provided in the available data.

Published Oct 15, 2026

Updated

Insertion of Sensitive Information Into Sent Data vulnerability in ClikIT Infinite Uploads infinite-uploads allows Retrieve Embedded Sensitive Data.This issue affects Infinite Uploads: from n/a through 3.4.1.

Affected Software

1 affected component

ClikIT Infinite Uploads<=3.4.1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade infinite-uploads to a version that resolves this vulnerability.
Fixed in 3.4.2

Event History

Oct 15, 2026

CVE Published

via MITRE·06:21 PM

Data Sourced

via MITRE·06:21 PM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

The vulnerability requires low-level privileges. It can be exploited remotely without user interaction, but it is not exploitable by an entirely unauthenticated attacker according to the provided vector.

What is the potential impact if exploitation succeeds?

Successful exploitation may expose sensitive information embedded in data sent by the plugin. The provided severity vector indicates high confidentiality impact, with no stated integrity or availability impact.

Which Infinite Uploads versions are affected?

The issue affects ClikIT Infinite Uploads through version 3.4.1. No unaffected fixed version is provided in the available data.

CVE-2026-110361: WordPress Infinite Uploads plugin <= 3.4.1 - Sensitive Data Exposure vulnerability

Affected Software

Remediation

Event History

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

What is the potential impact if exploitation succeeds?

Which Infinite Uploads versions are affected?

Company

Resources

Contact

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

What is the potential impact if exploitation succeeds?

Which Infinite Uploads versions are affected?