CVE-2026-95600: WordPress TrustedLogin Connector plugin <= 2.0.3 - Sensitive Data Exposure vulnerability
Published Sep 23, 2026
·Updated
Unauthenticated Sensitive Data Exposure in TrustedLogin Connector <= 2.0.3 versions.
Affected Software
1 affected component
TrustedLogin TrustedLogin Connector<=2.0.3
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress TrustedLogin Connector Pluginto a version that resolves this vulnerability.Fixed in 2.0.4
Event History
Sep 23, 2026
CVE Published
via MITRE·06:14 PM
Data Sourced
via MITRE·06:14 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·07:19 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What access does an attacker need to exploit this issue?
No authentication or user interaction is required. The CVSS vector indicates it can be exploited remotely over the network with low attack complexity.
2
What is the likely security impact?
The issue may expose sensitive information. The provided CVSS vector indicates low confidentiality impact, with no integrity or availability impact.
3
Which plugin versions are affected?
TrustedLogin Connector versions 2.0.3 and earlier are identified as affected.