EUVD-2026-49245

Unauthenticated Sensitive Data Exposure in Exclusive Addons Elementor = 2.8.0 versions...

CVE-2026-66438

Unauthenticated Sensitive Data Exposure in Exclusive Addons Elementor = 2.8.0 versions...

CVE-2026-66438 WordPress Exclusive Addons Elementor plugin <= 2.8.0 - Sensitive Data Exposure vulnerability

Unauthenticated Sensitive Data Exposure in Exclusive Addons Elementor = 2.8.0 versions...

CVE-2026-65564

Unauthenticated Sensitive Data Exposure in MapPress Maps for WordPress = 2.97.6 versions...

CVE-2026-65564 WordPress MapPress Maps for WordPress plugin <= 2.97.6 - Sensitive Data Exposure vulnerability

Unauthenticated Sensitive Data Exposure in MapPress Maps for WordPress = 2.97.6 versions...

CVE-2026-65434

The CVE-2026-65434 entry concerns the WordPress plugin ЮKassa для WooCommerce (YuKassa for WooCommerce)

EUVD-2026-49229

Subscriber Sensitive Data Exposure in ЮKassa для WooCommerce = 2.16.1 versions...

CVE-2026-65434 WordPress ЮKassa для WooCommerce plugin <= 2.16.1 - Sensitive Data Exposure vulnerability

Subscriber Sensitive Data Exposure in ЮKassa для WooCommerce = 2.16.1 versions...

EUVD-2026-49217

Unauthenticated Sensitive Data Exposure in Byteflows Travel & Hotel Booking = 1.0.0 versions...

CVE-2026-59548

The CVE concerns WordPress Byteflows Travel & Hotel Booking plugin, version

CVE-2026-59528

Subscriber Sensitive Data Exposure in ShipTime: Discounted Shipping Rates = 1.1.1 versions...

EUVD-2026-49205

Unauthenticated Sensitive Data Exposure in Ebook Store = 6.19 versions...

CVE-2026-59528

CVE-2026-59528 concerns the WordPress plugin ShipTime: Discounted Shipping Rates (versions

CVE-2026-59529

The CVE-2026-59529 entry concerns the WordPress Ebook Store plugin versions ≤ 6.19 with an unauthenticated sensitive data exposure vulnerability. Provided details indicate an external attacker can access sensitive data without authentication (CVSS v3.1: 7.5 HIGH, AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A...

CVE-2026-59528 WordPress ShipTime: Discounted Shipping Rates plugin <= 1.1.1 - Sensitive Data Exposure vulnerability

Subscriber Sensitive Data Exposure in ShipTime: Discounted Shipping Rates = 1.1.1 versions...

CVE-2026-59529 WordPress Ebook Store plugin <= 6.19 - Sensitive Data Exposure vulnerability

Unauthenticated Sensitive Data Exposure in Ebook Store = 6.19 versions...

Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read through the thriftbufferedtransportreadslow and thriftframedtransportreadslow paths in the cglib transport bindings. An attacker can trigger the bug by sending a read request that spans both buffered data and new...

CVE-2026-9830

The bookingpress-appointment-booking-pro WordPress plugin before 5.7.3 does not correctly invoke its REST permission callback, leaving every route in one of its API namespaces reachable without authentication and allowing unauthenticated attackers to read customer booking data and modify other...

BIT-OPENBAO-2025-4166 Vault May Include Sensitive Data in Error Logs When Using the KV v2 Plugin

Vault Community and Vault Enterprise Key/Value kv Version 2 plugin may unintentionally expose sensitive information in server and audit logs when users submit malformed payloads during secret creation or update operations via the Vault REST API. This vulnerability, identified as CVE-2025-4166, is...

Siemens SIMATIC S7-1500 CPU 1518 MFP Exposure of Sensitive Information Due to Incompatible Policies (CVE-2025-39955)

This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid505852; scriptversion"1.3"; scriptsetattributeattribute:"pluginmodificationdate",...