2coders vulnerabilities

🔔 Create alert RSS

Published CVEs affecting 2coders products: 1 record(s), with severity, exploitation and fixes.

Mux Video Uploader 1

Exploited only (KEV) →

CVE-2026-7544 Medium · 4.3 CWE-200 Jul 11, 2026

Mux Video Uploader <= 1.1.4 - Authenticated (Subscriber+) Information Exposure

The Mux Video Uploader plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.1.4 via the muxvideo_enqueue_settings_script. This makes it possible for authenticated attackers, with subscriber-level access and above, to extract sensitive data including Mux API credentials.