CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

6975 matches found

RedhatCVE•added 2026/02/20 1:27 p.m.•8 views

CVE-2026-25325

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in rtCamp rtMedia for WordPress, BuddyPress and bbPress buddypress-media allows Retrieve Embedded Sensitive Data.This issue affects rtMedia for WordPress, BuddyPress and bbPress: from n/a through = 4.7.8...

5.3CVSS5.5AI score0.00316EPSS

SaveExploits0References1

RedhatCVE•added 2026/02/20 1:27 p.m.•8 views

CVE-2026-25389

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Metagauss EventPrime eventprime-event-calendar-management allows Retrieve Embedded Sensitive Data.This issue affects EventPrime: from n/a through = 4.2.8.3...

5.3CVSS5.5AI score0.0024EPSS

SaveExploits0References1

RedhatCVE•added 2026/02/20 7:22 a.m.•12 views

CVE-2025-13113

The Web Accessibility by accessiBe plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.11. This is due to the accessiberenderjsinfooter function logging the complete plugin options array to the browser console on public pages, without...

5.3CVSS5.5AI score0.00282EPSS

SaveExploits0References1

NVD•added 2026/02/20 12:16 a.m.•11 views

CVE-2026-1292

Tanium addressed an insertion of sensitive information into log file vulnerability in Trends...

6.5CVSS0.00306EPSS

SaveExploits0References1

RedhatCVE•added 2026/02/19 1:29 p.m.•12 views

CVE-2026-1582

The WP All Export plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.14 via the export download endpoint. This is due to a PHP type juggling vulnerability in the security token comparison which uses loose comparison == instead of strict...

3.7CVSS5.6AI score0.00287EPSS

SaveExploits0References1

NVD•added 2026/02/19 9:16 a.m.•8 views

CVE-2026-25389

5.3CVSS0.0024EPSS

SaveExploits0References1

NVD•added 2026/02/19 9:16 a.m.•9 views

CVE-2026-25325

5.3CVSS0.00316EPSS

SaveExploits0References1

Vulnrichment•added 2026/02/19 8:27 a.m.•5 views

CVE-2026-25389 WordPress EventPrime plugin <= 4.2.8.3 - Sensitive Data Exposure vulnerability

5.3CVSS5.9AI score0.0024EPSS

SaveExploits0References1

ATTACKERKB•added 2026/02/19 8:27 a.m.•7 views

CVE-2026-25389

5.5AI score0.0024EPSS

SaveExploits0References2

CVE•added 2026/02/19 8:27 a.m.•22 views

CVE-2026-25389

CVE-2026-25389 affects WordPress EventPrime (EventPrime: Metagauss) and is a Sensitive Data Exposure vulnerability. The issue allows retrieval of embedded sensitive data by an unauthenticated actor and affects EventPrime versions from n/a up to and including 4.2.8.3; the entry indicates it is pat...

5.3CVSS5.5AI score0.0024EPSS

SaveExploits0References1

Cvelist•added 2026/02/19 8:27 a.m.•40 views

CVE-2026-25389 WordPress EventPrime plugin <= 4.2.8.3 - Sensitive Data Exposure vulnerability

5.3CVSS0.0024EPSS

SaveExploits0References1

ATTACKERKB•added 2026/02/19 8:26 a.m.•5 views

CVE-2026-25325

5.5AI score0.00316EPSS

SaveExploits0References2

CVE•added 2026/02/19 8:26 a.m.•18 views

CVE-2026-25325

CVE-2026-25325 affects the WordPress rtMedia ecosystem: rtMedia for WordPress, BuddyPress and bbPress (buddypress-media) plugin versions up to and including 4.7.8 expose sensitive system information to an unauthorized control sphere, enabling retrieval of embedded sensitive data. The issue is roo...

5.3CVSS5.5AI score0.00316EPSS

SaveExploits0References1

Vulnrichment•added 2026/02/19 8:26 a.m.•6 views

CVE-2026-25325 WordPress rtMedia for WordPress, BuddyPress and bbPress plugin <= 4.7.8 - Sensitive Data Exposure vulnerability

5.3CVSS5.5AI score0.00316EPSS

SaveExploits0References1

Cvelist•added 2026/02/19 8:26 a.m.•40 views

CVE-2026-25325 WordPress rtMedia for WordPress, BuddyPress and bbPress plugin <= 4.7.8 - Sensitive Data Exposure vulnerability

5.3CVSS0.00316EPSS

SaveExploits0References1

CVE•added 2026/02/19 8:26 a.m.•17 views

CVE-2026-25008

The CVE-2026-25008 entry concerns WordPress Ninja Tables (ninja-tables) versions up to and including 5.2.5. The issue is described as an Insertion of Sensitive Information Into Sent Data vulnerability that enables retrieval of embedded sensitive data from Ninja Tables. All connected sources consi...

4.3CVSS5.4AI score0.00215EPSS

SaveExploits0References1

Vulnrichment•added 2026/02/19 8:26 a.m.•5 views

CVE-2026-25008 WordPress Ninja Tables plugin <= 5.2.5 - Sensitive Data Exposure vulnerability

Insertion of Sensitive Information Into Sent Data vulnerability in Shahjahan Jewel Ninja Tables ninja-tables allows Retrieve Embedded Sensitive Data.This issue affects Ninja Tables: from n/a through = 5.2.5...

4.3CVSS5.5AI score0.00215EPSS

SaveExploits0References1

Cvelist•added 2026/02/19 8:26 a.m.•36 views

CVE-2026-25008 WordPress Ninja Tables plugin <= 5.2.5 - Sensitive Data Exposure vulnerability

4.3CVSS0.00215EPSS

SaveExploits0References1

Cvelist•added 2026/02/19 3:25 a.m.•51 views

CVE-2025-13113 Web Accessibility by accessiBe <= 2.11 - Unauthenticated Sensitive Information Exposure

5.3CVSS0.00282EPSS

SaveExploits0References2

CVE•added 2026/02/19 3:25 a.m.•52 views

CVE-2025-13113

CVE-2025-13113 concerns the WordPress plugin “Web Accessibility by accessiBe.” The issue is an unauthenticated sensitive information exposure caused by the function accessibe_render_js_in_footer() logging the full plugin options array to the browser console on public pages. This output is not res...

5.3CVSS5.5AI score0.00282EPSS

SaveExploits0References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by