CVE-2025-32251

CVE-2025-32251 concerns the Jetpack Feedback Exporter WordPress plugin. The entry states an Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability that could allow Retrieve Embedded Sensitive Data, affecting Jetpack Feedback Exporter versions up to 1.23. CVSS 3.1...

CVE-2025-32251 WordPress Jetpack Feedback Exporter plugin <= 1.23 - Sensitive Data Exposure Vulnerability

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in J. Tyler Wiest Jetpack Feedback Exporter jetpack-feedback-exporter allows Retrieve Embedded Sensitive Data.This issue affects Jetpack Feedback Exporter: from n/a through = 1.23...

CVE-2025-32251: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in J. Tyler Wiest Jetpack Feedback Exporter jetpack-feedback-exporter allows Retrieve Embedded Sensitive Data.This issue affects Jetpack Feedback Exporter: from n/a through = 1.23...

PT-2025-15007 · WordPress · Jetpack Feedback Exporter

Name of the Vulnerable Software and Affected Versions: Jetpack Feedback Exporter versions 1.23 and earlier Description: The issue allows exposure of sensitive system information to an unauthorized control sphere, enabling the retrieval of embedded sensitive data. Recommendations: For Jetpack...

WordPress plugin Jetpack Feedback Exporter 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

WordPress Export All Posts, Products, Orders, Refunds & Users plugin <= 2.13 - Unauthenticated PHP Object Injection vulnerability

Unauthenticated PHP Object Injection vulnerability discovered by Webbernaut in WordPress Plugin WP Ultimate Exporter versions = 2.13...

AZL-58413 CVE-2025-22870 affecting package prometheus-process-exporter for versions less than 0.8.2-2

Matching of hosts against proxy patterns can improperly treat an IPv6 zone ID as a hostname component. For example, when the NOPROXY environment variable is set to ".example.com", a request to "::1%25.example.com:80 will incorrectly match and not be proxied...

AZL-58422 CVE-2025-22870 affecting package prometheus-node-exporter for versions less than 1.7.0-3

Matching of hosts against proxy patterns can improperly treat an IPv6 zone ID as a hostname component. For example, when the NOPROXY environment variable is set to ".example.com", a request to "::1%25.example.com:80 will incorrectly match and not be proxied...

Malicious code in grafana-resources-exporter-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 32638374c532240fe824d5d3467c0adbbf3fc762b0efc727f36fc93271e9933b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2174 Malicious code in grafana-resources-exporter-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 32638374c532240fe824d5d3467c0adbbf3fc762b0efc727f36fc93271e9933b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Linux Distros Unpatched Vulnerability : CVE-2022-46146

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Prometheus Exporter Toolkit is a utility package to build exporters. Prior to versions 0.7.2 and 0.8.2, if someone has access to a Prometheus web.yml file and...

CVE-2025-26995

Missing Authorization vulnerability in Anton Vanyukov Market Exporter market-exporter allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Market Exporter: from n/a through = 2.0.21...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: yam, kubernetes-event-exporter, kubebuilder, shfmt, metallb, govulncheck, secrets-store-csi-driver-provider-gcp, kubeflow-katib, direnv, pulumi-kubernetes-operator, cni-plugins, grype, kubernetes-csi-livenessprobe, esbuild, kubernetes-dns-node-cache,...

GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: secrets-store-csi-driver-provider-gcp, kubeflow-katib, cni-plugins, skopeo, flux-helm-controller, kserve-modelmesh-serving, nri-jmx, rancher-loglevel, k8sgpt, kuberlr, osv-scanner, aws-application-networking-k8s, prometheus-alertmanager, x509-certificate-exporter, ns...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: yam, kubernetes-event-exporter, kubebuilder, shfmt, metallb, govulncheck, secrets-store-csi-driver-provider-gcp, kubeflow-katib, direnv, pulumi-kubernetes-operator, cni-plugins, grype, kubernetes-csi-livenessprobe, esbuild, kubernetes-dns-node-cache,...

CVE-2025-26995

Missing Authorization vulnerability in Anton Vanyukov Market Exporter market-exporter allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Market Exporter: from n/a through = 2.0.21...

CVE-2025-26995 WordPress Market Exporter plugin <= 2.0.21 - Broken Access Control vulnerability

Missing Authorization vulnerability in Anton Vanyukov Market Exporter market-exporter allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Market Exporter: from n/a through = 2.0.21...

CVE-2025-26995

CVE-2025-26995 corresponds to a Missing Authorization vulnerability in Market Exporter. Connected data show affected software Market Exporter versions

GHSA-5FQ7-4MXC-535H vulnerabilities

Vulnerabilities for packages: flux-source-controller, external-secrets-fips, caddy, certificate-transparency, falcoctl-fips, govulncheck, karpenter-fips, aws-flb-firehose-fips, neuvector-scanner, aws-efs-csi-driver-fips, php-fpmexporter, tfsec, aws-flb-cloudwatch-fips, policy-controller, fulcio,...

WordPress plugin Market Exporter 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exist...