CVE-2026-65543 HIGH

CVE-2026-65543: WordPress Vimeo plugin <= 1.2.2 - Sensitive Data Exposure vulnerability

Vendor Vimeodev
Product Vimeo
Weakness CWE-201
Published August 6, 2026
Last update August 6, 2026
View on NVD All CVEs

CVSS base score

7.5/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality High
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

What the vulnerability does

01Description

Subscriber Sensitive Data Exposure in Vimeo <= 1.2.2 versions.

Explanation of Vulnerability in Simple Terms

02Summary

Vimeo versions up to 1.2.2 leak sensitive information in outbound network traffic. An attacker on the network path between the site and Vimeo's servers can intercept and read data that should remain private. No authentication or user interaction is required to exploit this vulnerability.

What an attacker can do

03Attacker Capabilities

Read sensitive data transmitted by the site to Vimeo's servers.

Potential impact on your site

04Site Impact

Sensitive information may be exposed to network eavesdroppers if traffic is not encrypted.

Conditions required to exploit

05Prerequisites

Network access to intercept traffic between the site and Vimeo.

Key dates

06Disclosure timeline

August 6, 2026 CVE published
August 6, 2026 Record updated

Related vulnerabilities

08Related CVE

CVE-2026-66685 WordPress Featured Video Plus plugin <= 2.3.3 - Sensitive Data Exposure vulnerability CVE-2026-32538 WordPress SMTP Mailer plugin <= 1.1.24 - Sensitive Data Exposure vulnerability CVE-2026-24565 WordPress B Accordion plugin <= 2.0.2 - Sensitive Data Exposure vulnerability CVE-2026-39480 WordPress Backup Migration plugin <= 2.1.1 - Sensitive Data Exposure vulnerability CVE-2026-39586 WordPress RepairBuddy plugin <= 4.1132 - Sensitive Data Exposure vulnerability