What is CVE-2026-1233?

CVE-2026-1233 is a high-severity vulnerability in Mvirik Text To Speech – Ttswp, classified under Use of Hard-coded Credentials. CVSS score: 7.5/10. Published 2026-04-04.

How severe is CVE-2026-1233?

High severity. CVSS v3 base score is 7.5 out of 10.

Vulnerability in Mvirik Text To Speech – Ttswp

CVE-2026-1233

The Text to Speech for WP (AI Voices by Mementor) plugin for WordPress is vulnerable to sensitive information exposure in all versions up to, and including, 1.9.8. This is due to the plugin containing hardcoded MySQL database credentials f…

EPSS: 0.000 (7.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.

Affected products

Mvirik Text To Speech – Ttswp — versions 0

Weakness classification (CWE)

CWE-798 — Use of Hard-coded Credentials

References

www.wordfence.com/threat-intel/vulnerabilities/id/b8dc0b5e-87b9-4831-a92a-bbf6e…
plugins.trac.wordpress.org/changeset/3453258/text-to-speech-tts

Frequently asked questions

What is CVE-2026-1233?: CVE-2026-1233 is a high-severity vulnerability in Mvirik Text To Speech – Ttswp, classified under Use of Hard-coded Credentials. CVSS score: 7.5/10. Published 2026-04-04.
How severe is CVE-2026-1233?: High severity. CVSS v3 base score is 7.5 out of 10.