CVE-2026-39729: WordPress Edwiser Bridge plugin <= 4.3.4 - Sensitive Data Exposure vulnerability
Published Oct 6, 2026
·Updated
Unauthenticated Sensitive Data Exposure in Edwiser Bridge <= 4.3.4 versions.
Affected Software
1 affected component
Edwiser Edwiser Bridge<=4.3.4
Event History
Oct 6, 2026
CVE Published
via MITRE·08:34 AM
Data Sourced
via MITRE·08:34 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·09:17 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Who can exploit this issue?
The issue is unauthenticated, so an attacker does not need a WordPress account or prior access to the site. The network attack vector indicates it can be reached remotely.
2
Which installations are affected?
Edwiser Bridge versions 4.3.4 and earlier are identified as affected. The provided information does not state whether any particular configuration or feature must be enabled.
3
What is the potential impact?
The vulnerability is rated high with a CVSS score of 7.2. It can expose sensitive data and has low integrity and availability impact; the scope is changed.