83943 matches found
WordPress MPG plugin <= 4.2.3 - Sensitive Data Exposure vulnerability
Sensitive Data Exposure vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin MPG versions = 4.2.3...
WordPress Notivo plugin <= 1.4.2 - Sensitive Data Exposure vulnerability
Sensitive Data Exposure vulnerability discovered by Ashish Agarwal @Donrulezz in WordPress Plugin Notivo versions = 1.4.2...
CVE-2026-96342 WordPress WPMobile.App plugin <= 11.83 - Sensitive Data Exposure vulnerability
Missing Authorization vulnerability in Amauri.IO WPMobile.App wpappninja allows Retrieve Embedded Sensitive Data.This issue affects WPMobile.App: from n/a through 11.83...
CVE-2026-97995
A flaw was found in the virtioconsole driver in the Linux kernel. When unbinding or removing a virtio console device while control messages remain queued, the driver misidentifies internal control buffers and attempts to release them as standard data buffers. This issue results in an out-of-bound...
ROOT-APP-NPM-CVE-2023-37466 CVE-2023-37466 in vm2 - Patched by Root
Root has patched CVE-2023-37466 in the vm2 package for Root:npm. Multiple fixed versions available...
CVE-2026-88797 Vayu X < 1.0.6 - Subscriber+ Arbitrary WordPress.org Plugin Installation and Activation
The Vayu X WordPress theme before 1.0.6 does not perform any capability check on one of its AJAX actions and exposes the nonce guarding it to every logged-in user, allowing any authenticated user, such as a subscriber, to install and activate any hosted on the WordPress.org repository...
EUVD-2026-89614
The Vayu X WordPress theme before 1.0.6 does not perform any capability check on one of its AJAX actions and exposes the nonce guarding it to every logged-in user, allowing any authenticated user, such as a subscriber, to install and activate any hosted on the WordPress.org repository...
ZK Framework - Information Disclosure
ZK Framework 9.6.1, 9.6.0.1, 9.5.1.3, 9.0.1.2 and 8.6.4.1 is susceptible to information disclosure. An attacker can access sensitive information via a crafted POST request to the component AuUploader and thereby possibly obtain additional sensitive information, modify data, and/or execute...
cve-replay
CVE Replay: el límite del encabezado de redirección CVE-2026-44431 · urllib3 2.6.3 → 2.7.0 · reproducido el 27 de septiembre de 2026 Una solicitud lleva tres encabezados sensibles a un origen. Una redirección cambia el destino. ¿La siguiente solicitud todavía los lleva? Esta regresión independien...
PT-2026-103268
Unauthenticated Sensitive Data Exposure in MPG = 4.2.3 versions...
PT-2026-103255
Name of the Vulnerable Software and Affected Versions OAuth Single Sign On – SSO OAuth Client versions prior to 7.1.3 Description An authentication bypass exists in the OAuth Single Sign On – SSO OAuth Client plugin that is reachable pre-login. This allows unauthenticated attackers to forge a...
PT-2026-103248
Unauthenticated Sensitive Data Exposure in Notivo = 1.4.2 versions...
PT-2026-103218
Subscriber Sensitive Data Exposure in GiveWP = 4.16.9 versions...
PT-2026-103237
Unauthenticated Sensitive Data Exposure in BackupEase = 2.2.2 versions...
CVE-2026-97302: Insertion of Sensitive Information Into Sent Data
Unauthenticated Sensitive Data Exposure in MPG = 4.2.3 versions...
CVE-2026-90953: Exposure of Sensitive Information to an Unauthorized Actor
The Image Optimizer WordPress plugin before 1.7.7 does not enforce its intended capability check on several of its read REST routes, allowing any authenticated user to read attachment metadata and site-wide statistics that should be restricted to administrators...
CVE-2026-97241: Insertion of Sensitive Information Into Sent Data
Unauthenticated Sensitive Data Exposure in BackupEase = 2.2.2 versions...
CVE-2026-96834: Missing Authorization
Subscriber Sensitive Data Exposure in GiveWP = 4.16.9 versions...