CVE-2026-97302: WordPress MPG plugin <= 4.2.3 - Sensitive Data Exposure vulnerability
Published Sep 30, 2026
·Updated
Unauthenticated Sensitive Data Exposure in MPG <= 4.2.3 versions.
Affected Software
1 affected component
WordPress MPG plugin<=4.2.3
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress MPG pluginto a version that resolves this vulnerability.Fixed in 4.2.4
Event History
Sep 30, 2026
CVE Published
via MITRE·12:28 PM
Data Sourced
via MITRE·12:28 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·01:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Who can exploit this issue?
The vulnerability is unauthenticated, so an attacker does not need a WordPress account or other prior privileges to attempt exploitation over the network.
2
What security impact is reported?
The reported impact is limited to disclosure of sensitive data. No integrity or availability impact is identified in the provided severity vector.
3
Which MPG versions are affected?
MPG versions up to and including 4.2.3 are reported as affected.