CVE-2026-97261: WordPress Notivo plugin <= 1.4.2 - Sensitive Data Exposure vulnerability
Published Sep 30, 2026
·Updated
Unauthenticated Sensitive Data Exposure in Notivo <= 1.4.2 versions.
Affected Software
1 affected component
WordPress Notivo plugin<=1.4.2
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress Notivo pluginto a version that resolves this vulnerability.Fixed in 1.4.3
Event History
Sep 30, 2026
CVE Published
via MITRE·12:28 PM
Data Sourced
via MITRE·12:28 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·01:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Who can exploit this issue?
The vulnerability is unauthenticated, so it can be exploited remotely without a WordPress account or other prior privileges.
2
What security impact is reported?
The reported impact is exposure of sensitive data. The supplied metrics indicate low confidentiality impact and no reported integrity or availability impact.
3
Which plugin versions are affected?
Notivo versions 1.4.2 and earlier are identified as affected.