CVE · Medium

CVE-2026-125766 — Insertion of Sensitive Information Into Sent Data

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2026-125766 Insertion of Sensitive Information Into Sent Data Insertion of Sensitive Information Into Sent Data Medium 5.3 < 2.4.2 2.4.2 2026-11-11 —

CVE-2026-125766 is a Insertion of Sensitive Information Into Sent Data vulnerability in the WordPress plugin instagram-widget-by-wpzoom (instagram-widget-by-wpzoom). Versions before 2.4.2 are affected. Fixed in 2.4.2. CVSS score: 5.3 (Medium). Published 2026-11-11.

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.