CVE-2026-39571

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Themefic Instantio instantio allows Retrieve Embedded Sensitive Data.This issue affects Instantio: from n/a through <= 3.3.30.

Score

CVSS 3.1 5.3 Medium

Status

Deferred - audit@patchstack.com

Published

2026-04-08

Last modified

2026-04-29

Weaknesses

CWE-497

Affected products

• Instantio (Themefic)

References

• https://patchstack.com/database/Wordpress/Plugin/instantio/vulnerability/wordpress-instantio-plugin-3-3-30-sensitive-da…