CVE-2026-85307: WordPress KP Agent Ready plugin < 1.2.08 - Sensitive Data Exposure vulnerability
Insertion of Sensitive Information Into Sent Data vulnerability in Kevin Pirnie KP Agent Ready allows Retrieve Embedded Sensitive Data.
This issue affects KP Agent Ready: from n/a before 1.2.08.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress KP Agent Ready pluginto a version that resolves this vulnerability.Fixed in 1.2.08
Event History
Frequently Asked Questions
Which installations are affected?
KP Agent Ready versions before 1.2.08 are affected. The available data does not identify a lower bound for affected versions.
Does exploitation require authentication or user interaction?
No. The CVSS vector indicates network-based exploitation with low attack complexity, no privileges required, and no user interaction required.
What is the expected impact of successful exploitation?
An attacker may retrieve embedded sensitive data. The stated impact is limited to confidentiality; integrity and availability impacts are not indicated.