Lucene search
+L

632 matches found

Positive Technologies
Positive Technologies
•added 2025/12/31 12:00 a.m.•17 views

PT-2025-54388

Name of the Vulnerable Software and Affected Versions Digages Direct Payments WP versions through 1.3.0 Description A flaw exists in Digages Direct Payments WP that allows the retrieval of embedded sensitive data, leading to exposure of sensitive system information to an unauthorized control...

4.3CVSS5.7AI score0.00302EPSS
SaveExploits0References9
CNNVD
CNNVD
•added 2025/12/31 12:00 a.m.•19 views

WordPress plugin Post Video Players 安全漏洞

Expo, etc. are products of Expo. expo is a product of WebSockets ws, etc. are products of WebSockets open source. ws is a Node.js WebSocket library. tanStack form, etc. are products of TanStack open source. form is a form state management program. A security vulnerability exists in the WordPress...

4.3CVSS6.2AI score0.00209EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/12/31 12:00 a.m.•13 views

WordPress plugin Gerencianet Oficial 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

5.3CVSS6.3AI score0.00669EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/12/31 12:00 a.m.•22 views

PT-2025-54391

Name of the Vulnerable Software and Affected Versions BoomDevs WordPress Coming Soon Plugin versions through 1.0.4 Description The BoomDevs WordPress Coming Soon Plugin contains a flaw that allows the retrieval of embedded sensitive data, potentially exposing system information to unauthorized...

4.3CVSS5.7AI score0.00267EPSS
SaveExploits0References9
EUVD
EUVD
•added 2025/12/30 12:30 p.m.•21 views

EUVD-2025-205719

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Aethonic Poptics: AI-Powered Popup Builder for Lead Generation, Conversions, Exit-Intent, Email Opt-ins & WooCommerce Sales poptics allows Retrieve Embedded Sensitive Data.This issue affects Poptics:...

6.3AI score0.00209EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/12/30 12:30 p.m.•12 views

EUVD-2025-205748

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in o2oe E-Invoice App Malaysia einvoiceapp-malaysia allows Retrieve Embedded Sensitive Data.This issue affects E-Invoice App Malaysia: from n/a through = 1.1.0...

7.5CVSS6.4AI score0.00298EPSS
SaveExploits0References2
NVD
NVD
•added 2025/12/30 11:16 a.m.•35 views

CVE-2025-69026

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Roxnor PopupKit popup-builder-block allows Retrieve Embedded Sensitive Data.This issue affects PopupKit: from n/a through = 2.1.5...

4.3CVSS0.00219EPSS
SaveExploits0References1
CVE
CVE
•added 2025/12/30 10:47 a.m.•28 views

CVE-2025-69025

CVE-2025-69025 describes Exposure of Sensitive System Information to an Unauthorized Control Sphere in Poptics (Branda/Popup Builder plugin family). Affected software: Poptics – AI-Powered Popup Builder for Lead Generation, Conversions, Exit-Intent & WooCommerce Popups; vulnerable versions are up...

4.3CVSS5.8AI score0.00209EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/12/30 10:47 a.m.•39 views

CVE-2025-68988 WordPress E-Invoice App Malaysia plugin <= 1.3.0 - Sensitive Data Exposure vulnerability

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in o2oe E-Invoice App Malaysia einvoiceapp-malaysia allows Retrieve Embedded Sensitive Data.This issue affects E-Invoice App Malaysia: from n/a through = 1.3.0...

5.3CVSS0.00298EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/12/30 12:32 a.m.•17 views

EUVD-2025-205670

Insertion of Sensitive Information Into Sent Data vulnerability in weDevs WP Project Manager wedevs-project-manager allows Retrieve Embedded Sensitive Data.This issue affects WP Project Manager: from n/a through 3.0.1...

6.5CVSS6.4AI score0.0026EPSS
SaveExploits0References2
NVD
NVD
•added 2025/12/30 12:15 a.m.•18 views

CVE-2025-68040

Insertion of Sensitive Information Into Sent Data vulnerability in weDevs WP Project Manager wedevs-project-manager allows Retrieve Embedded Sensitive Data.This issue affects WP Project Manager: from n/a through = 3.0.1...

6.5CVSS0.0026EPSS
SaveExploits0References1
CNVD
CNVD
•added 2025/12/30 12:00 a.m.•19 views

WordPress Eight Day Week Print Workflow plugin Information Disclosure Vulnerability

WordPress Eight Day Week Print Workflow plugin is a tool designed for news organizations or publishing teams. The WordPress Eight Day Week Print Workflow plugin suffers from an information disclosure vulnerability that originates from allowing an unauthorized control field to retrieve embedded...

7.5CVSS6.2AI score0.00255EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/12/30 12:00 a.m.•27 views

WordPress plugin Poptics 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

4.3CVSS5.8AI score0.00209EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/12/30 12:00 a.m.•13 views

PT-2025-53878

Name of the Vulnerable Software and Affected Versions Contact Form 7 Extension For Mailchimp versions through 0.9.49 Description The Contact Form 7 Extension For Mailchimp contains a flaw that allows retrieval of embedded sensitive data. This occurs due to the insertion of sensitive information...

7.5CVSS6.3AI score0.00255EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2025/12/29 12:00 a.m.•21 views

PT-2025-53906

Name of the Vulnerable Software and Affected Versions Aethonic Poptics: AI-Powered Popup Builder for Lead Generation, Conversions, Exit-Intent, Email Opt-ins & WooCommerce Sales versions through 1.0.20 Description The software contains a flaw that allows retrieval of embedded sensitive data. This...

4.3CVSS5.7AI score0.00209EPSS
SaveExploits0References7
RedhatCVE
RedhatCVE
•added 2025/12/25 1:23 p.m.•13 views

CVE-2025-68516

Insertion of Sensitive Information Into Sent Data vulnerability in Essekia Tablesome tablesome allows Retrieve Embedded Sensitive Data.This issue affects Tablesome: from n/a through = 1.1.35.1...

5CVSS6.9AI score0.00212EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/12/25 1:23 p.m.•16 views

CVE-2025-68576

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Virusdie Virusdie virusdie allows Retrieve Embedded Sensitive Data.This issue affects Virusdie: from n/a through = 1.1.6...

4.3CVSS6.9AI score0.00255EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/12/25 1:23 p.m.•15 views

CVE-2025-68494

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Leap13 Premium Addons for Elementor premium-addons-for-elementor allows Retrieve Embedded Sensitive Data.This issue affects Premium Addons for Elementor: from n/a through = 4.11.53...

5.3CVSS6.9AI score0.00338EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/12/24 3:30 p.m.•21 views

EUVD-2025-205259

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Virusdie Virusdie virusdie allows Retrieve Embedded Sensitive Data.This issue affects Virusdie: from n/a through = 1.1.6...

7.5CVSS6.4AI score0.00255EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/12/24 3:30 p.m.•14 views

EUVD-2025-205202

Insertion of Sensitive Information Into Sent Data vulnerability in Essekia Tablesome tablesome allows Retrieve Embedded Sensitive Data.This issue affects Tablesome: from n/a through = 1.1.35.1...

7.5CVSS6.4AI score0.00212EPSS
SaveExploits0References2
Rows per page
Query Builder