PatchSiren cyber security CVE debrief
CVE-2026-49068 RelyWP CVE debrief
A HIGH severity vulnerability, CVE-2026-49068, was found in Coupon Affiliates versions up to 7.8.1. This vulnerability exposes subscriber sensitive data. The CVSS score for this vulnerability is 7.5.
- Vendor
- RelyWP
- Product
- Coupon Affiliates
- CVSS
- HIGH 7.5
- CISA KEV
- Not listed in stored evidence
- Original CVE published
- 2026-06-15
- Original CVE updated
- 2026-06-15
- Advisory published
- 2026-06-15
- Advisory updated
- 2026-06-15
Who should care
Users of Coupon Affiliates plugin versions up to 7.8.1 should update to a patched version to prevent exposure of subscriber sensitive data.
Technical summary
The vulnerability, identified as CWE-497, allows for the exposure of subscriber sensitive data in Coupon Affiliates versions up to 7.8.1. The CVSS vector for this vulnerability is CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.
Defensive priority
HIGH
Recommended defensive actions
- Update Coupon Affiliates plugin to a version that is not vulnerable.
- Review subscriber data access controls to prevent unauthorized exposure.
Evidence notes
Evidence for this vulnerability comes from Patchstack, as indicated by the reference domain candidate.
Official resources
-
CVE-2026-49068 CVE record
CVE.org
-
CVE-2026-49068 NVD detail
NVD
-
Source item URL
nvd_modified
- Mitigation or vendor reference
CVE-2026-49068 was published on 2026-06-15T21:17:19.650Z and modified on 2026-06-15T21:24:32.790Z.