Itron vulnerabilities

Products

• MV-90 xi 1
• WP Logger 1

Latest Itron CVEs

Newest publication first

1. CVE-2026-103548 Improperly Stored Credentials

   Published 2026-09-30

   Medium·CVSS 5.3

   Improperly stored passwords in the config file in Itron MV-90 xi 3.0 allows attackers to decode the passwords and password histories to gain access to the MV-90 application as any user.

2. CVE-2025-39456 WordPress WP Logger plugin <= 2.2 - Broken Access Control vulnerability

   Published 2025-04-17

   Medium·CVSS 5.4

   Missing Authorization vulnerability in iTRON WP Logger wp-data-logger allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Logger: from n/a through <= 2.2.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.