CyberSecBulletin

Mvirik vulnerabilities

We track 2 vulnerabilities in Mvirik products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on April 4, 2026.

2vulnerabilities
0critical
2high
0exploited
8.2average CVSS score

Latest Mvirik vulnerabilities

  • 7.5 High severity

    Text to Speech – TTSWP: Use of Hard-coded Credentials

    CVE-2026-1233Mvirik

    The Text to Speech for WP (AI Voices by Mementor) plugin for WordPress is vulnerable to sensitive information exposure in all versions up to, and including, 1.9.8. This is due to the plugin containing hardcoded MySQL database credentials for the vendor's exter

  • 8.8 High severity

    Mementor Core: Improper Privilege Management

    CVE-2025-11168Mvirik

    The Mementor Core plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.2.5. This is due to plugin not properly handling the user switch back function. This makes it possible for authenticated attackers, with Subscr