CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2026-62088

WordPress ElasticPress plugin <= 5.3.4 - Sensitive Data Exposure vulnerability

Status: Published
Published: 2026-09-11
Updated: 2026-09-11
Assigning organization: Patchstack

Description

Insertion of Sensitive Information Into Sent Data vulnerability in 10up ElasticPress allows Retrieve Embedded Sensitive Data. This issue affects ElasticPress: from n/a through 5.3.4.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

10up ElasticPress

Default version status: unaffected

n/a to ≤ 5.3.4affected

References

https://patchstack.com/database/wordpress/plugin/elasticpress/vulnerability/wordpress-elasticpress-plugin-5-3-4-sensitive-data-exposure-vulnerability?_s_id=cve ↗