CVE-2026-109191

The Image Hub plugin for WordPress (versions up to and including 1.2.0 ) contains a Sensitive Information Exposure vulnerability. Authenticated attackers with Subscriber-level access or higher can extract plaintext API credentials for six third-party services—including Giphy, Openverse, Pexels, P...