CVE-2026-3058

CVE-2026-3058 is a Sensitive Information Exposure vulnerability affecting all versions of the Seraphinite Accelerator plugin for WordPress up to 2.28.14. This medium-severity flaw (CVSS 6.5) allows authenticated attackers with low privileges (Subscriber-level) to retrieve sensitive operational data, such as cache status and scheduled tasks, due to missing capability checks in the `OnAdminApi_GetData()` function. Exploitation occurs over the network with low complexity, resulting in a high confidentiality impact. There is currently no evidence of active exploitation, no public exploit code available, and minimal community discussion or media coverage, indicating a low likelihood of widespread exploitation.