WordPress Srbtranslatin plugin <= 3.2.0 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Anhchangmutrang Patchstack Alliance in WordPress Plugin Srbtranslatin versions = 3.2.0...

WordPress WP-LESS plugin <= 1.9.6 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Anhchangmutrang in WordPress Plugin WP-LESS versions = 1.9.6...

CVE-2024-13567

The Awesome Support – WordPress HelpDesk & Support Plugin plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 6.3.1 via the 'awesome-support' directory. This makes it possible for unauthenticated attackers to extract sensitive data stored...

CVE-2025-31001 WordPress GTM Kit plugin <= 2.4.0 - Sensitive Data Exposure vulnerability

Debug Messages Revealing Unnecessary Information vulnerability in TLA Media GTM Kit gtm-kit allows Retrieve Embedded Sensitive Data.This issue affects GTM Kit: from n/a through = 2.4.0...

CVE-2025-31001 WordPress GTM Kit plugin <= 2.4.0 - Sensitive Data Exposure vulnerability

Debug Messages Revealing Unnecessary Information vulnerability in TLA Media GTM Kit gtm-kit allows Retrieve Embedded Sensitive Data.This issue affects GTM Kit: from n/a through = 2.4.0...

CVE-2025-30802 WordPress Our Team Members plugin <= 2.2 - Sensitive Data Exposure vulnerability

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WPBean Our Team Members our-team-members.This issue affects Our Team Members: from n/a through = 2.2...

CVE-2025-30802

CVE-2025-30802 relates to the WordPress plugin “Our Team Members.” The vulnerability arises from Missing Authorization, allowing an unauthenticated/subscriber-level actor to disclose sensitive information in the Our Team Members data. Public sources in the connected documents indicate the issue a...

CVE-2025-30802 WordPress Our Team Members plugin <= 2.2 - Sensitive Data Exposure vulnerability

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WPBean Our Team Members our-team-members.This issue affects Our Team Members: from n/a through = 2.2...

PT-2025-14100 · Autodesk · Autodesk Navisworks

Name of the Vulnerable Software and Affected Versions: Autodesk Navisworks affected versions not specified Description: The issue arises when a maliciously crafted DWFX file is parsed through Autodesk Navisworks, leading to an Out-of-Bounds Read. This can be exploited by a malicious actor to caus...

PT-2025-14211 · Unknown · Beee Acf City Selector

Name of the Vulnerable Software and Affected Versions: Beee ACF City Selector versions 1.16.0 and earlier Description: The issue allows exposure of sensitive system information to an unauthorized control sphere, enabling the retrieval of embedded sensitive data. Recommendations: For Beee ACF City...

WordPress plugin WP-LESS 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

PT-2025-14174 · Unknown · Smackcoders Aio Performance Profiler

Name of the Vulnerable Software and Affected Versions: smackcoders AIO Performance Profiler, Monitor, Optimize, Compress & Debug versions 1.2 and earlier Description: The issue allows the retrieval of embedded sensitive data due to the insertion of sensitive information into log files...

WordPress Awesome Support plugin <= 6.3.1 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory vulnerability

Unauthenticated Sensitive Information Exposure Through Unprotected Directory vulnerability discovered by Tim Coen in WordPress Plugin Awesome Support versions = 6.3.1...

WordPress GTM Kit plugin <= 2.4.0 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Psai in WordPress Plugin GTM Kit versions = 2.4.0...

PT-2025-13941 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15.4 Description: A privacy issue was addressed with improved private data redaction for log entries. A sandboxed app may be able to access sensitive user data in system logs. Recommendations: For versions prior to 15....

VulnCheck KEV: CVE-2023-31478

An issue was discovered on GL.iNet devices before 3.216. An API endpoint reveals information about the Wi-Fi configuration, including the SSID and key...

CVE-2024-56469

IBM UrbanCode Deploy UCD 7.1 through 7.1.2.22, 7.2 through 7.2.3.15, and 7.3 through 7.3.2.10 / IBM DevOps Deploy 8.0 through 8.0.1.5 and 8.1 through 8.1.0.1 could allow unauthorized access to other services or potential exposure of sensitive data due to missing authentication in its Agent Relay...

CVE-2025-2867

An issue has been discovered in the GitLab Duo with Amazon Q affecting all versions from 17.8 before 17.8.6, 17.9 before 17.9.3, and 17.10 before 17.10.1. A specifically crafted issue could manipulate AI-assisted development features to potentially expose sensitive project data to unauthorized...

CVE-2025-2228

The Responsive Addons for Elementor – Free Elementor Addons Plugin and Elementor Templates plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.6.8 the 'registeruser' function. This makes it possible for authenticated attackers, with...

CVE-2025-2861

SaTECH BCU in its firmware version 2.1.3 uses the HTTP protocol. The use of the HTTP protocol for web browsing has the problem that information is exchanged in unencrypted text. Since sensitive data such as credentials are exchanged, an attacker could obtain them and log in legitimately...