CyberSecBulletin

MgoSync vulnerabilities

We track 1 vulnerability in MgoSync products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on September 19, 2026.

1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score

Latest MgoSync vulnerabilities

  • 7.5 High severity

    MgoSync: Exposure of Sensitive Information to an Unauthorized Actor

    CVE-2026-92404MgoSync

    The MgoSync WordPress plugin before 2.1.7 does not have authorization controls on one of its REST API endpoints, allowing unauthenticated users to retrieve the stored WooCommerce API credentials, including a read/write consumer key and secret, from a configure