CVE-2026-39469: WordPress PageLayer plugin <= 2.0.8 - Sensitive Data Exposure vulnerability
Published Apr 8, 2026
·Updated
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Softaculous PageLayer pagelayer allows Retrieve Embedded Sensitive Data.This issue affects PageLayer: from n/a through <= 2.0.8.
Affected Software
1 affected component
Softaculous PageLayer<=2.0.8
Event History
Apr 8, 2026
CVE Published
via MITRE·08:30 AM
Data Sourced
via MITRE·08:30 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·09:16 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2026-39469?
CVE-2026-39469 is classified as a medium severity vulnerability due to the exposure of sensitive data.
2
How do I fix CVE-2026-39469?
To fix CVE-2026-39469, update the PageLayer plugin to a version greater than 2.0.8.
3
What kind of sensitive data is exposed in CVE-2026-39469?
CVE-2026-39469 allows unauthorized access to sensitive system information embedded within the PageLayer plugin.
4
Which versions of Softaculous PageLayer are affected by CVE-2026-39469?
CVE-2026-39469 affects Softaculous PageLayer versions from n/a through 2.0.8.
5
Is authentication required to exploit CVE-2026-39469?
No, CVE-2026-39469 can be exploited by an unauthorized user without authentication.