CVE-2026-66444

Affected software: WordPress Payment Forms for Paystack plugin

EUVD-2026-57865

Subscriber Sensitive Data Exposure in WPJAM Basic = 7.0.2.1 versions...

CVE-2026-66432

CVE-2026-66432 affects the WordPress WPJAM Basic plugin, versions

CVE-2026-66432

Subscriber Sensitive Data Exposure in WPJAM Basic = 7.0.2.1 versions...

CVE-2026-66432 WordPress WPJAM Basic plugin <= 7.0.2.1 - Sensitive Data Exposure vulnerability

Subscriber Sensitive Data Exposure in WPJAM Basic = 7.0.2.1 versions...

EUVD-2026-57957

Customer Sensitive Data Exposure in WP Event SOlution = 4.1.18 versions...

CVE-2026-28174

Customer Sensitive Data Exposure in WP Event SOlution = 4.1.18 versions...

CVE-2026-28174

Technical details, affected components, exploit vectors, and remediation are not publicly provided in the supplied documents; monitor for updates.

CVE-2026-28174 WordPress WP Event SOlution plugin <= 4.1.18 - Sensitive Data Exposure vulnerability

Customer Sensitive Data Exposure in WP Event SOlution = 4.1.18 versions...

EUVD-2026-57948

Unauthenticated Insecure Direct Object References IDOR in Do Lasso = 358 versions...

CVE-2026-28156

Subscriber SQL Injection in Do Lasso = 358 versions...

.NET: .NET Information Disclosure Vulnerability

Improper removal of sensitive information before storage or transfer in .NET allows an unauthorized attacker to disclose information over a network...

CVE-2025-62318

CVE-2025-62318 affects HCL AION. The issue involves JavaScript responses that contain data being referenced by external pages, enabling potential JavaScript hijacking where an attacker-controlled page could capture sensitive information under certain conditions. The vulnerability is described wit...

.NET: .NET Information Disclosure Vulnerability

Improper removal of sensitive information before storage or transfer in .NET allows an unauthorized attacker to disclose information over a network...

MINI-879H-JQMR-HQ3V

Bulletin has no description...

ECHO-7458-DC2A-8577

Bulletin has no description...

CVE-2026-73608

SiYuan has a missing-authorization vulnerability in the development branch for the /api/av/getAttributeViewSearchTarget endpoint. The route is protected only by CheckAuth and performs no further authorization checks, allowing anonymous readers to query with a database identifier and a keyword to ...

CVE-2026-73604

Flowise (pre-3.1.3) has an incomplete credential redaction vulnerability in GET /api/v1/credentials/:id that exposes decrypted secrets to authenticated users with credentials:view. Impact described includes database connection URLs with passwords, cloud service account JSON with private keys, and...

CVE-2026-73604 Flowise before 3.1.3 Credential Exposure via API

Flowise before 3.1.3 contains an incomplete credential redaction vulnerability in the GET /api/v1/credentials/:id endpoint that returns decrypted secrets in plaintext. Authenticated users with credentials:view permission can retrieve sensitive data including database connection URLs with embedded...

CVE-2026-73604 Flowise before 3.1.3 Credential Exposure via API

Flowise before 3.1.3 contains an incomplete credential redaction vulnerability in the GET /api/v1/credentials/:id endpoint that returns decrypted secrets in plaintext. Authenticated users with credentials:view permission can retrieve sensitive data including database connection URLs with embedded...