Medium · 5.9 CVE-2026-66435 EUVD-2026-96326GHSA-wwcc-9gfr-hgp3

WordPress WP Rollback plugin <= 3.1.2 - Sensitive Data Exposure vulnerability

Published Oct 10, 2026 · Updated Oct 11, 2026 · Assigned by Patchstack

Vendor: Devin Walker Product: WP Rollback

Description

Insertion of Sensitive Information Into Sent Data vulnerability in Devin Walker WP Rollback wp-rollback allows Retrieve Embedded Sensitive Data.This issue affects WP Rollback: from n/a through 3.1.2.

Affected products

Vendor	Product	Affected	Fixed
Devin Walker	WP Rollback	≤ 3.1.2	—

References

https://patchstack.com/database/wordpress/plugin/wp-rollback/vulnerability/wordpress-wp-rollback-plugin-3-1-2-sensitive-data-exposure-vulnerability?_s_id=cve vdb-entry