W3 Total Cache < 2.8.2 - Log File Exposure

The plugin is vulnerable to Information Exposure through the publicly exposed debug log file. This makes it possible for unauthenticated attackers to view potentially sensitive information in the exposed log file. For example, the log file may contain nonce values that can be used in further CSRF...

CVE-2024-44000

EN GenCookieSessionHijack is a PoC tool designed to exploit insecurely exposed debug logs from WordPress sites and extract session cookies. This allows the attacker to hijack active admin sessions and gain unauthorized access to the WordPress admin dashboard. Features Extract cookies from WordPre...

CVE-2022-29806

CVE-2022-29806 ZoneMinder up to 1.36.12 Language privilege escalation and RCE Description A Path Traversal vulnerability in debug log file and default language option in ZoneMinder version before 1.36.13 and 1.37.11 allows attackers to write and execute arbitrary code to achieve remote command...

CVE-2026-120114

The Debug Log Manager – Conveniently Monitor and Inspect Errors plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'message and pageUrl' parameter in all versions up to, and including, 2.5.2 due to insufficient input sanitization and output escaping. This makes it possible...

EUVD-2026-114705

The Debug Log Manager – Conveniently Monitor and Inspect Errors plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'message and pageUrl' parameter in all versions up to, and including, 2.5.2 due to insufficient input sanitization and output escaping. This makes it possible...

CVE-2026-120114 Debug Log Manager <= 2.5.2 - Unauthenticated Stored Cross-Site Scripting via 'log_js_errors' AJAX Endpoint

The Debug Log Manager – Conveniently Monitor and Inspect Errors plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'message and pageUrl' parameter in all versions up to, and including, 2.5.2 due to insufficient input sanitization and output escaping. This makes it possible...

CVE-2026-120114 Debug Log Manager <= 2.5.2 - Unauthenticated Stored Cross-Site Scripting via 'log_js_errors' AJAX Endpoint

The Debug Log Manager – Conveniently Monitor and Inspect Errors plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'message and pageUrl' parameter in all versions up to, and including, 2.5.2 due to insufficient input sanitization and output escaping. This makes it possible...

CVE-2026-120114

The Debug Log Manager plugin for WordPress (versions up to and including 2.5.2 ) is vulnerable to Unauthenticated Stored Cross-Site Scripting (XSS) . The root cause is insufficient input sanitization and output escaping within the message and pageUrl parameters of the log_js_errors AJAX endpoint....

CVE-2023-40600

CVE-2023-40600 EWWW Image Optimizer = 7.2.0 - Unauthenticated Sensitive Information Exposure via Debug Log Description The EWWW Image Optimizer plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 7.2.0 via the debuglog function. This makes it...

WordPress Debug Log Manager – Conveniently Monitor and Inspect Errors plugin <= 2.5.2 - Unauthenticated Stored Cross-Site Scripting vulnerability

Unauthenticated Stored Cross-Site Scripting vulnerability discovered by Josef Azizov Spoofable in WordPress Plugin Debug Log Manager versions = 2.5.2...

KasperMeow

Kaspersky arkmon.sys KASLR Bypass via Kernel Debug Log Leak Kaspersky's anti-rootkit monitor driver arkmon.sys stores a kernel debug log containing raw kernel pointers. The log is "encrypted" with XOR 0xCC + ROT13 - trivially reversible. Any admin user can read and decrypt this log via IOCTL,...

CVE-2026-120114: qriouslad Debug Log Manager – Conveniently Monitor and Inspect Errors: The Debug Log Manager – Conveniently Monitor and Inspect Errors plugin for WordPress is vulnerable to Stored Cross-Site…

The Debug Log Manager – Conveniently Monitor and Inspect Errors plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'message and pageUrl' parameter in all versions up to, and including, 2.5.2 due to insufficient input sanitization and output escaping. This makes it possible...

PT-2026-134505

Name of the Vulnerable Software and Affected Versions Debug Log Manager – Conveniently Monitor and Inspect Errors versions prior to 2.5.3 Description Insufficient input sanitization and output escaping allow unauthenticated attackers to perform Stored Cross-Site Scripting. This occurs via the...

EUVD-2026-114267

Insertion of sensitive information into a log file in Amazon Kinesis Producer Library for Java before 1.0.8, when the library's logger is configured at DEBUG log level, might allow local users to obtain the AWS credentials that the library resolved for the application. Separately, affected versio...

PT-2026-133734

Insertion of sensitive information into a log file in Amazon Kinesis Producer Library for Java before 1.0.8, when the library's logger is configured at DEBUG log level, might allow local users to obtain the AWS credentials that the library resolved for the application. Separately, affected versio...

CVE-2026-54711 PGHoard: Password written to debug log

pghoard is a PostgreSQL backup daemon and restore tooling that stores backup data in cloud object stores. Prior to version 2.7.1, when using .pgpass, database connection information including the username and password will be logged at the debug level. This issue has been patched in version 2.7.1...

CVE-2026-54711 PGHoard: Password written to debug log

pghoard is a PostgreSQL backup daemon and restore tooling that stores backup data in cloud object stores. Prior to version 2.7.1, when using .pgpass, database connection information including the username and password will be logged at the debug level. This issue has been patched in version 2.7.1...

CVE-2026-54711 PGHoard: Password written to debug log

pghoard is a PostgreSQL backup daemon and restore tooling that stores backup data in cloud object stores. Prior to version 2.7.1, when using .pgpass, database connection information including the username and password will be logged at the debug level. This issue has been patched in version 2.7.1...

CVE-2026-54711

The pghoard PostgreSQL backup daemon and restore tooling is vulnerable to CWE-532 (Insertion of Sensitive Information into Log File). Prior to version 2.7.1 , the application logs database connection information, including usernames and passwords , at the debug level when using .pgpass . This exp...

CVE-2026-104000

The Simply Schedule Appointments plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'status' parameter in all versions up to, and including, 1.6.12.35 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...