Lucene search
+L

6974 matches found

Cvelist
Cvelist
added 2026/03/13 11:42 a.m.36 views

CVE-2026-32405 WordPress WoodMart theme <= 8.3.9 - Sensitive Data Exposure vulnerability

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in xtemos WoodMart woodmart allows Retrieve Embedded Sensitive Data.This issue affects WoodMart: from n/a through = 8.3.9...

5.3CVSS0.0024EPSS
SaveExploits0References1
CVE
CVE
added 2026/03/13 11:42 a.m.23 views

CVE-2026-32405

CVE-2026-32405 concerns the WordPress WoodMart theme (WoodMart) up to version 8.3.9, where an Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability allows retrieval of embedded sensitive data. The affected component is the WoodMart theme frontend/backend handlin...

5.3CVSS5.8AI score0.0024EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/03/13 11:42 a.m.11 views

CVE-2026-32405 WordPress WoodMart theme <= 8.3.9 - Sensitive Data Exposure vulnerability

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in xtemos WoodMart woodmart allows Retrieve Embedded Sensitive Data.This issue affects WoodMart: from n/a through = 8.3.9...

5.8AI score0.0024EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/03/13 11:42 a.m.3 views

CVE-2026-32372

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in RadiusTheme ShopBuilder – Elementor WooCommerce Builder Addons shopbuilder allows Retrieve Embedded Sensitive Data.This issue affects ShopBuilder – Elementor WooCommerce Builder Addons: from n/a through =...

5.8AI score0.00251EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/03/13 11:42 a.m.30 views

CVE-2026-32372 WordPress ShopBuilder – Elementor WooCommerce Builder Addons plugin <= 3.2.4 - Sensitive Data Exposure vulnerability

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in RadiusTheme ShopBuilder – Elementor WooCommerce Builder Addons shopbuilder allows Retrieve Embedded Sensitive Data.This issue affects ShopBuilder – Elementor WooCommerce Builder Addons: from n/a through =...

5.3CVSS0.00251EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/03/13 11:42 a.m.6 views

CVE-2026-32372 WordPress ShopBuilder – Elementor WooCommerce Builder Addons plugin <= 3.2.4 - Sensitive Data Exposure vulnerability

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in RadiusTheme ShopBuilder – Elementor WooCommerce Builder Addons shopbuilder allows Retrieve Embedded Sensitive Data.This issue affects ShopBuilder – Elementor WooCommerce Builder Addons: from n/a through =...

5.3CVSS5.8AI score0.00251EPSS
SaveExploits0References1
CVE
CVE
added 2026/03/13 11:42 a.m.28 views

CVE-2026-32372

CVE-2026-32372 concerns RadiusTheme ShopBuilder – Elementor WooCommerce Builder Addons (plugin) with versions up to and including 3.2.4. The issue is described as Exposure of Sensitive System Information to an Unauthorized Control Sphere, allowing retrieval of embedded sensitive data. The provide...

5.3CVSS5.8AI score0.00251EPSS
SaveExploits0References1
CVE
CVE
added 2026/03/13 11:41 a.m.17 views

CVE-2026-32354

The CVE-2026-32354 entry concerns the WordPress plugin WpEvently mage-eventpress. Affected software: mage-eventpress (WordPress plugin) with versions

5.3CVSS5.8AI score0.00251EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/03/13 11:41 a.m.32 views

CVE-2026-32354 WordPress WpEvently plugin < 5.1.9 - Sensitive Data Exposure vulnerability

Insertion of Sensitive Information Into Sent Data vulnerability in magepeopleteam WpEvently mage-eventpress allows Retrieve Embedded Sensitive Data.This issue affects WpEvently: from n/a through 5.1.9...

5.3CVSS0.00251EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/03/13 11:41 a.m.4 views

CVE-2026-32354 WordPress WpEvently plugin < 5.1.9 - Sensitive Data Exposure vulnerability

Insertion of Sensitive Information Into Sent Data vulnerability in magepeopleteam WpEvently mage-eventpress allows Retrieve Embedded Sensitive Data.This issue affects WpEvently: from n/a through 5.1.9...

5.3CVSS5.8AI score0.00251EPSS
SaveExploits0References1
GithubExploit
GithubExploit
added 2026/03/13 8:38 a.m.154 views

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Microsoft

CVE-2025-59284-PoC Proof of con...

5.5CVSS7.4AI score0.00965EPSS
SaveExploits1
CVE
CVE
added 2026/03/13 7:23 a.m.30 views

CVE-2026-3045

CVE-2026-3045 affects the WordPress plugin “Appointment Booking Calendar — Simply Schedule Appointments” (versions up to 1.6.9.29). The vulnerability stems from two weaknesses: (1) a non-user-bound public_nonce is exposed to unauthenticated users via the REST endpoint /wp-json/ssa/v1/embed-inner,...

7.5CVSS5.8AI score0.0029EPSS
SaveExploits0References5
CVE
CVE
added 2026/03/13 7:23 a.m.19 views

CVE-2026-1704

CVE-2026-1704 affects the WordPress plugin Appointment Booking Calendar — Simply Schedule Appointments (all versions up to and including 1.6.9.29). The root cause is Insecure Direct Object Reference via get_item_permissions_check, which grants access to the ssa_manage_appointments capability with...

4.3CVSS5.8AI score0.00212EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2026/03/13 12:00 a.m.14 views

IBM Sterling B2B Integrator和IBM Sterling File Gateway 安全漏洞

IBM Sterling B2B Integrator and IBM Sterling File Gateway are both products of International Business Machines IBM. IBM Sterling B2B Integrator is a software suite that integrates important B2B processes, transactions, and relationships. This software supports secure integration of complex B2B...

6.5CVSS5.8AI score0.00241EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/03/13 12:00 a.m.14 views

WordPress plugin ShopBuilder – Elementor WooCommerce Builder Addons 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application add-on. There is a...

5.3CVSS5.8AI score0.00251EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/03/13 12:00 a.m.14 views

PT-2026-25251

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in xtemos WoodMart woodmart allows Retrieve Embedded Sensitive Data.This issue affects WoodMart: from n/a through = 8.3.9...

5.8AI score0.0024EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/03/12 3:36 p.m.3 views

CVE-2019-25481

iScripts ReserveLogic contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the jqSearchDestination parameter. Attackers can send POST requests to the search endpoint with crafted SQL payloads to extract sensitiv...

8.8CVSS5.9AI score0.00318EPSS
SaveExploits0References2
CVE
CVE
added 2026/03/11 10:04 p.m.19 views

CVE-2025-62328

CVE-2025-62328 affects HCL Nomad server on Domino where the Content-Security-Policy header does not set the frame-ancestors directive by default. This may allow an attacker to obtain sensitive information via unspecified vectors. The CVSS v3.1 base score is 3.7 (LOW) with NETWORK attack vector, H...

3.7CVSS5.8AI score0.00244EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/03/11 10:04 p.m.4 views

CVE-2025-62328

HCL Nomad server on Domino did not configure the frame-ancestors directive in the Content-Security-Policy header by default which could allow an attacker to obtain sensitive information via unspecified vectors...

3.7CVSS5.8AI score0.00244EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2026/03/11 4:17 p.m.39 views

CVE-2026-20165 Sensitive Information Disclosure in MongoClient logging channel in Splunk Enterprise

In Splunk Enterprise versions below 10.2.1, 10.0.4, 9.4.9, and 9.3.10, and Splunk Cloud Platform versions below 10.2.2510.7, 10.1.2507.17, 10.0.2503.12, and 9.3.2411.124, a low-privileged user that does not hold the "admin" or "power" Splunk roles could retrieve sensitive information by inspectin...

6.3CVSS0.00166EPSS
SaveExploits0References1
Rows per page
Query Builder