CVE-2026-110889: WordPress Gantry 5 Framework plugin <= 5.6.4 - Sensitive Data Exposure vulnerability
Generation of Error Message Containing Sensitive Information vulnerability in Gantry Gantry 5 Framework gantry5 allows Retrieve Embedded Sensitive Data.This issue affects Gantry 5 Framework: from n/a through 5.6.4.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this issue?
The vulnerability has network attack vector, low attack complexity, and requires no privileges or user interaction. This indicates that an unauthenticated remote attacker may be able to trigger the affected error condition.
What is the potential impact?
The reported impact is exposure of embedded sensitive data through generated error messages. The provided severity vector indicates high confidentiality impact, with no stated integrity or availability impact.
Which versions are affected?
Gantry 5 Framework versions through 5.6.4 are affected. The provided information does not identify a fixed version.
How can I tell whether my site may be affected?
Check whether the WordPress site uses the Gantry 5 Framework plugin and determine its installed version. An installation at version 5.6.4 or earlier falls within the reported affected range.