Lucene search
+L

22296 matches found

CVE
CVE
•added 2026/10/10 7:42 p.m.•21 views

CVE-2026-66480

The YITH WooCommerce Product Add-Ons WordPress plugin (versions ≤ 4.34.0 ) is affected by a Sensitive Data Exposure vulnerability (CWE-497). This flaw allows an attacker to retrieve embedded sensitive data from an unauthorized control sphere. While the specific root cause and impacted components ...

5.3CVSS5.8AI score0.00197EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/10 7:42 p.m.•52 views

CVE-2026-66480 WordPress YITH WooCommerce Product Add-Ons plugin <= 4.34.0 - Sensitive Data Exposure vulnerability

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in YITH YITH WooCommerce Product Add-Ons allows Retrieve Embedded Sensitive Data. This issue affects YITH WooCommerce Product Add-Ons: from n/a through 4.34.0...

5.3CVSS0.00197EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/10 7:35 p.m.•48 views

CVE-2026-62043 WordPress Contact Form 7 – Dynamic Text Extension plugin <= 5.0.7 - Sensitive Data Exposure vulnerability

Unauthenticated Sensitive Data Exposure in Contact Form 7 – Dynamic Text Extension = 5.0.7 versions...

7.5CVSS0.00303EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/10 7:35 p.m.•25 views

CVE-2026-62043

The Contact Form 7 – Dynamic Text Extension plugin for WordPress is affected by an unauthenticated Sensitive Data Exposure vulnerability in versions

7.5CVSS5.8AI score0.00303EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/10 7:35 p.m.•12 views

EUVD-2026-96473

Unauthenticated Sensitive Data Exposure in Contact Form 7 – Dynamic Text Extension = 5.0.7 versions...

7.5CVSS5.8AI score0.00303EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/10 7:35 p.m.•17 views

CVE-2026-42630

The Web Plura Backup & Restore Manager WordPress plugin versions

7.5CVSS5.8AI score0.00303EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/10 7:35 p.m.•10 views

EUVD-2026-96432

Unauthenticated Sensitive Data Exposure in Web Plura Backup & Restore Manager = 0.2.25 versions...

7.5CVSS5.8AI score0.00303EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/10 7:35 p.m.•43 views

CVE-2026-42630 WordPress Web Plura Backup & Restore Manager plugin <= 0.2.25 - Sensitive Data Exposure vulnerability

Unauthenticated Sensitive Data Exposure in Web Plura Backup & Restore Manager = 0.2.25 versions...

7.5CVSS0.00303EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/10 7:35 p.m.•16 views

CVE-2026-42419

The Swish Migrate and Backup WordPress plugin, in versions

5.9CVSS5.8AI score0.00257EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/10 7:35 p.m.•8 views

EUVD-2026-96543

Unauthenticated Sensitive Data Exposure in Swish Migrate and Backup = 1.4.0 versions...

5.9CVSS5.7AI score0.00257EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/10 7:35 p.m.•43 views

CVE-2026-42419 WordPress Swish Migrate and Backup plugin <= 1.4.0 - Sensitive Data Exposure vulnerability

Unauthenticated Sensitive Data Exposure in Swish Migrate and Backup = 1.4.0 versions...

5.9CVSS0.00257EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/10 2:00 p.m.•50 views

CVE-2026-66435 WordPress WP Rollback plugin <= 3.1.2 - Sensitive Data Exposure vulnerability

Insertion of Sensitive Information Into Sent Data vulnerability in Devin Walker WP Rollback wp-rollback allows Retrieve Embedded Sensitive Data.This issue affects WP Rollback: from n/a through 3.1.2...

5.9CVSS0.00208EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/10 2:00 p.m.•26 views

CVE-2026-66435

The WP Rollback WordPress plugin (versions 3.1.2 and below ) is vulnerable to an Insertion of Sensitive Information Into Sent Data (CWE-201) vulnerability. This flaw allows an attacker to Retrieve Embedded Sensitive Data . Specific technical details regarding the root cause or affected functions ...

5.9CVSS5.7AI score0.00208EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/10 6:40 a.m.•23 views

CVE-2026-15178

The Fluent Forms plugin for WordPress is vulnerable to an authorization bypass in all versions up to and including 6.2.5 . The root cause is the plugin's failure to properly verify if a user is authorized to perform specific actions. This flaw allows authenticated attackers with Custom-level acce...

5.4CVSS5.7AI score0.00155EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/10/10 6:40 a.m.•45 views

CVE-2026-15178 Fluent Forms <= 6.2.5 - Missing Authorization to Authenticated (Custom+) Sensitive Data Exposure and Modification

The Fluent Forms plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 6.2.5. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with Custom-level access an...

5.4CVSS0.00155EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/10/10 12:00 a.m.•16 views

Linux Distros Unpatched Vulnerability : CVE-2026-108104

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Xerial snappy-java from 1.1.7.4 before 1.1.10.10 contains a double release vulnerability in SnappyFramedInputStream that returns pooled buffers twice when...

6.3CVSS6AI score0.00215EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/10 12:00 a.m.•11 views

PT-2026-109763

Name of the Vulnerable Software and Affected Versions Web Plura Backup & Restore Manager versions prior to 0.2.26 Description An issue exists that allows unauthenticated users to access sensitive data. Recommendations Update to a version newer than 0.2.25...

7.5CVSS5.7AI score0.00303EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/10/10 12:00 a.m.•12 views

PT-2026-109762

Name of the Vulnerable Software and Affected Versions Swish Migrate and Backup versions prior to 1.4.1 Description An issue exists that allows unauthenticated users to access sensitive data. Recommendations Update to a version newer than 1.4.0...

5.9CVSS5.7AI score0.00257EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/10 12:00 a.m.•5 views

CVE-2026-42630: Insertion of Sensitive Information Into Sent Data

Unauthenticated Sensitive Data Exposure in Web Plura Backup & Restore Manager = 0.2.25 versions...

7.5CVSS5.8AI score0.00303EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/10 12:00 a.m.•5 views

CVE-2026-42419: Insertion of Sensitive Information Into Sent Data

Unauthenticated Sensitive Data Exposure in Swish Migrate and Backup = 1.4.0 versions...

5.9CVSS5.7AI score0.00257EPSS
SaveExploits0References2
Rows per page
Query Builder