WordPress Themia Lite Theme <= 1.5.0 is vulnerable to Sensitive Data Exposure

Software Themia Lite Type Theme Vulnerable versions = 1.5.0 Fixed in N/A OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2025-59003 Patch priority Low CVSS severity Low 5.8 Developer Claim ownership PSID 9716909e2868 Credits Legion Hunter Required privilege...

WordPress Poloray Theme <= 1.3.2 is vulnerable to Sensitive Data Exposure

Software Poloray Type Theme Vulnerable versions = 1.3.2 Fixed in N/A OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2025-59003 Patch priority Low CVSS severity Low 5.8 Developer Claim ownership PSID 5bedfaf94c3f Credits Legion Hunter Required privilege...

WordPress ColorWay Theme <= 4.2.3 is vulnerable to Sensitive Data Exposure

Software ColorWay Type Theme Vulnerable versions = 4.2.3 Fixed in N/A OWASP Top 10 A2: Cryptographic Failures Classification Sensitive Data Exposure CVE CVE-2025-59003 Patch priority Low CVSS severity Low 5.8 Developer Claim ownership PSID f2f3f07e918e Credits Legion Hunter Required privilege...

WordPress Compass Theme <= 1.1.4 is vulnerable to Sensitive Data Exposure

Software Compass Type Theme Vulnerable versions = 1.1.4 Fixed in N/A OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2025-59003 Patch priority Low CVSS severity Low 5.8 Developer Claim ownership PSID 702f7ac34caf Credits Legion Hunter Required privilege...

WordPress Dzonia Lite Theme <= 1.7.1 is vulnerable to Sensitive Data Exposure

Software Dzonia Lite Type Theme Vulnerable versions = 1.7.1 Fixed in N/A OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2025-59003 Patch priority Low CVSS severity Low 5.8 Developer Claim ownership PSID c04d0120d52d Credits Legion Hunter Required privilege...

WordPress Road Fighter Theme <= 1.3.5 is vulnerable to Sensitive Data Exposure

Software Road Fighter Type Theme Vulnerable versions = 1.3.5 Fixed in N/A OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2025-59003 Patch priority Low CVSS severity Low 5.8 Developer Claim ownership PSID 4a67bfb40d4f Credits Legion Hunter Required privileg...

WordPress Cloriato Lite Theme <= 1.7.2 is vulnerable to Sensitive Data Exposure

Software Cloriato Lite Type Theme Vulnerable versions = 1.7.2 Fixed in N/A OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2025-59003 Patch priority Low CVSS severity Low 5.8 Developer Claim ownership PSID 1e01903a0792 Credits Legion Hunter Required privile...

WordPress Rethink Theme <= 1.2.8 is vulnerable to Sensitive Data Exposure

Software Rethink Type Theme Vulnerable versions = 1.2.8 Fixed in N/A OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2025-59003 Patch priority Low CVSS severity Low 5.8 Developer Claim ownership PSID 9bd607567e0a Credits Legion Hunter Required privilege...

WordPress ButterBelly Theme <= 1.1.8 is vulnerable to Sensitive Data Exposure

Software ButterBelly Type Theme Vulnerable versions = 1.1.8 Fixed in N/A OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2025-59003 Patch priority Low CVSS severity Low 5.8 Developer Claim ownership PSID 425eba8f2184 Credits Legion Hunter Required privilege...

WordPress Rank Math SEO plugin <= 1.0.252.1 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Abu Hurayra in WordPress Plugin Rank Math SEO versions = 1.0.252.1...

CVE-2025-43888

Dell PowerProtect Data Manager, Hyper-V, versions 19.19 and 19.20, contains an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Unauthorized access...

CVE-2025-9979

The Maspik plugin for WordPress is vulnerable to Missing Authorization in version 2.5.6 and prior. This is due to missing capability checks on the Maspikspamlogdownloadcsv function. This makes it possible for authenticated attackers, with subscriber-level access and above, to export and download...

Linux Distros Unpatched Vulnerability : CVE-2023-36201

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in JerryscriptProject jerryscript v.3.0.0 allows an attacker to obtain sensitive information via a crafted script to the arrays. CVE-2023-36201 Note th...

PT-2025-37054

Name of the Vulnerable Software and Affected Versions: RTSPtoWeb version 2.4.3 Description: An issue exists that allows a remote attacker to obtain sensitive information and execute arbitrary code due to a lack of authentication mechanisms. Recommendations: At the moment, there is no information...

CVE-2025-56466

The CVE-2025-56466 entry concerns the Dietly Android app (version 1.25.0). The connected documents confirm a hardcoded credential issue in Dietly v1.25.0, which can lead to disclosure of sensitive information. The vulnerability arises from credentials hardcoded into the application, enabling atta...

Linux Distros Unpatched Vulnerability : CVE-2022-3501

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Article template contents with sensitive data could be accessed from agents without permissions. CVE-2022-3501 Note that Nessus relies on the presence of the...

WordPress WP Import – Ultimate CSV XML Importer plugin <= 7.27 - Missing Authorization to Authenticated (Subscriber+) FTP/SFTP Credential Exposure vulnerability

Missing Authorization to Authenticated Subscriber+ FTP/SFTP Credential Exposure vulnerability discovered by Arkadiusz Hydzik in WordPress Plugin WP Ultimate CSV Importer versions = 7.27...

CVE-2025-54083

CVE-2025-54083 affects Calix GigaCenter ONT (Quantenna SoC modules): 844E, 844G, 844GE, 854GE. The vulnerability is insecure storage of sensitive information that allows an administrator to gain access to the device’s web interface. Root cause is insecure handling/storage of credentials or sensit...

CVE-2025-55243

Exposure of sensitive information to an unauthorized actor in Microsoft Office Plus allows an unauthorized attacker to perform spoofing over a network...

CVE-2025-55243

Exposure of sensitive information to an unauthorized actor in Microsoft Office Plus allows an unauthorized attacker to perform spoofing over a network...