CVE-2026-109191 | extendthemes Image Hub Plugin up to 1.2.0 on WordPress image_hub_update_settings AJAX handler update_option image_hub_api_keys_* missing encryption

October 16, 2026 Yanac

A vulnerability described as problematic has been identified in extendthemes Image Hub Plugin up to 1.2.0 on WordPress. This affects the function update_option of the component image_hub_update_settings AJAX handler. The manipulation of the argument image_hub_api_keys_* results in missing encryption of sensitive data.

This vulnerability is cataloged as CVE-2026-109191. The attack may be launched remotely. There is no exploit available.VulDB Recent EntriesRead More