Skip to content
OpenAdvisories

Vendor

mvirik

2 known vulnerabilities.

Products

Mementor Core 1 Text to Speech – TTSWP 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2026-1233

    Text to Speech (TTS) by Mementor <= 1.9.8 - Use of Hardcoded Password to Unauthenticated Remote Database Access

    The Text to Speech for WP (AI Voices by Mementor) plugin for WordPress is vulnerable to sensitive information exposure in all versions up to, and including, 1.9.8. This is due to the plugin containing hardcoded MySQL database credentials for the vendor's exte…

    mvirik Text to Speech – TTSWP Web / CMS
  • High 8.8
    CVE-2025-11168

    Mementor Core <= 2.2.5 - Authenticated (Subscriber+) Privilege Escalation

    The Mementor Core plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.2.5. This is due to plugin not properly handling the user switch back function. This makes it possible for authenticated attackers, with Subsc…

    mvirik Mementor Core Web / CMS