{"id":"CVE-2026-41563","published":"2026-10-06T06:17:01.530","lastModified":"2026-10-06T15:04:25.990","description":"Unauthenticated Sensitive Data Exposure in Sitemovr <= 1.0.1 versions.","cvssScore":7.5,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cwes":["CWE-201"],"vendors":[],"products":[],"references":[{"url":"https://patchstack.com/database/wordpress/plugin/sitemovr/vulnerability/wordpress-sitemovr-plugin-1-0-1-sensitive-data-exposure-vulnerability?_s_id=cve","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"The Sitemovr application suffers from unauthenticated sensitive data exposure, allowing attackers to access protected information without any authentication or authorization. This vulnerability is particularly concerning as it affects versions 1.0.1 and earlier, potentially exposing confidential data to anyone who can reach the application.","exploitability":"Exploitation is straightforward with no prerequisites, as the vulnerability allows unauthenticated access to sensitive data through exposed endpoints.","blast_radius":"The impact could be significant across all users of Sitemovr versions 1.0.1 and earlier, potentially exposing sensitive information to any external attacker who can reach the application.","remediation":"Upgrade to version 1.0.2 or later to remediate this vulnerability.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["data-exfiltration","unauthenticated-access","web"],"model":"garnet-coder","analyzedAt":"2026-10-13T09:00:44.321Z"}}