WordPress security by component
icarry
icarry (icarry) is a WordPress plugin with 1 published CVE record in this archive. The latest tracked vulnerability was published Aug 13, 2026; the highest published CVSS base score is 7.5.
Plugin slug:
icarryLatest vulnerability
CVE-2026-66463: iCARRY: Sensitive information exposure
iCARRY is affected by sensitive information exposure. The vulnerable path is reachable without authentication. Successful exploitation can disclose data that should not be available to the caller. The published affected range is n/a through 2.9.
| Safe version |
|
||
|---|---|---|---|
| Aug 13, 2026 |
CVE-2026-66463
iCARRY: Sensitive information exposure
iCARRY is affected by sensitive information exposure. The vulnerable path is reachable without authentication. Successful exploitation can disclose data that should not be available to the caller. The published affected range is n/a through 2.9.
|
See mitigation notes |
CVE7.5
NVDPending
|