CVE-2026-41561

Adrian Lin Museder RestoreOne

Published 6 Oct 2026 · updated 6 Oct 2026 · Deferred

7.5 High · CVSS 3.1, patchstack.com

Description

Unauthenticated Sensitive Data Exposure in Museder RestoreOne <= 2.7.276 versions.

References

patchstack.com/database/wordpress/plugin/museder-restoreone/vulnerability/wordpress-museder-restoreone-plugin-2-7-276-sensitive-data-exposure-vulnerability?_s_id=cve