Threats tagged 'ghsa-qxp8-27xq-3fvx'

CVE-2026-66685 is a medium severity vulnerability in Alex Featured Video Plus versions up to 2.3.3 that allows unauthenticated sensitive data exposure. The flaw involves insertion of sensitive information into sent data, classified under CWE-201. There is no official patch or remediation guidance currently available from the vendor. No known exploits are reported in the wild.