CVE-2026-0637 Sensitive Information Disclosure via Event Publisher Logging in Multiple WSO2 Products

When an Event Publisher output adapter is configured with irrelevant properties, the affected products log these properties. This logging occurs without sufficient validation or sanitization of the property values. A malicious actor with access to the 'wso2carbon' log files could retrieve sensiti...

CVE-2026-0637 Sensitive Information Disclosure via Event Publisher Logging in Multiple WSO2 Products

When an Event Publisher output adapter is configured with irrelevant properties, the affected products log these properties. This logging occurs without sufficient validation or sanitization of the property values. A malicious actor with access to the 'wso2carbon' log files could retrieve sensiti...

CVE-2026-0637

When an Event Publisher output adapter is configured with irrelevant properties, the affected products log these properties. This logging occurs without sufficient validation or sanitization of the property values. A malicious actor with access to the 'wso2carbon' log files could retrieve sensiti...

EUVD-2026-53820

When an Event Publisher output adapter is configured with irrelevant properties, the affected products log these properties. This logging occurs without sufficient validation or sanitization of the property values. A malicious actor with access to the 'wso2carbon' log files could retrieve sensiti...

EUVD-2026-53819

Invocation of process using visible sensitive information vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute eta-otp-lock allows System Footprinting. This issue affects eta-otp-lock: before 1.0.4...

CVE-2026-18915

CVE-2026-18915 affects eta-otp-lock (TÜBİTAK BİLGEM) prior to 1.0.4. The vulnerability is described as a vulnerability where a process can expose visible sensitive information, enabling system footprinting via command-line access. The CVSS 3.1 score is 5.0 (Medium), with local attack vector (AV:L...

WordPress Polylang Pro plugin <= 3.8.5 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Polylang Pro versions = 3.8.5...

ROS-20260806-73-0026

The vulnerability of the Linux operating system’s kernel Wi-Fi module is related to the exposure of sensitive information. Exploiting this vulnerability allows an attacker to gain access to confidential data...

CVE-2026-66684: Insertion of Sensitive Information Into Sent Data

Unauthenticated Sensitive Data Exposure in Export Import Menus = 1.9.2 versions...

PT-2026-68569

Name of the Vulnerable Software and Affected Versions AI ANN versions prior to 1.29.1 Description The AI ANN - AI Generator & AI Agency WordPress Theme is subject to PHP Object Injection due to the deserialization of untrusted input. This allows unauthenticated attackers to inject a PHP Object...

PT-2026-68593

Name of the Vulnerable Software and Affected Versions Gutenberg Blocks by Kadence Blocks versions prior to 3.7.9 Description An issue exists that allows for the exposure of sensitive data to users with contributor-level permissions. Recommendations Update Gutenberg Blocks by Kadence Blocks to...

PT-2026-68568

Name of the Vulnerable Software and Affected Versions Agricola versions prior to 1.22.0 Description The Agricola - Agriculture & Organic Farm Theme for WordPress allows unauthenticated attackers to perform PHP Object Injection through the deserialization of untrusted input. PHP Object Injection...

PT-2026-68560

Name of the Vulnerable Software and Affected Versions 69 Clothing versions prior to 1.2.11.2 Description The 69 Clothing | Brand Store & Fashion Boutique WordPress Theme is susceptible to PHP Object Injection, a condition where an application deserializes untrusted input, allowing an attacker to...

CVE-2026-66696: Insertion of Sensitive Information Into Sent Data

Contributor Sensitive Data Exposure in Gutenberg Blocks by Kadence Blocks = 3.7.8 versions...

CVE-2026-66683: Insertion of Sensitive Information Into Sent Data

Unauthenticated Sensitive Data Exposure in Custom CSS and JavaScript = 2.0.16 versions...

CVE-2026-65543: Insertion of Sensitive Information Into Sent Data

Subscriber Sensitive Data Exposure in Vimeo = 1.2.2 versions...

CVE-2026-28169: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Unauthenticated Sensitive Data Exposure in YITH WooCommerce Zoom Magnifier = 2.52.0 versions...

CVE-2026-66685: Insertion of Sensitive Information Into Sent Data

Unauthenticated Sensitive Data Exposure in Featured Video Plus = 2.3.3 versions...

PT-2026-68585

Name of the Vulnerable Software and Affected Versions Export Import Menus versions prior to 1.9.3 Description An issue exists that allows unauthenticated users to access sensitive data through the software. Recommendations Update to a version newer than 1.9.2...

PT-2026-68586

Name of the Vulnerable Software and Affected Versions Featured Video Plus versions prior to 2.3.4 Description An unauthenticated sensitive data exposure issue exists in the Featured Video Plus plugin, allowing unauthorized users to access confidential information. Recommendations Update to a...