CVE-2026-42667: Insertion of Sensitive Information Into Sent Data

Unauthenticated Sensitive Data Exposure in Bookly = 27.4 versions...

PT-2026-49427

Unauthenticated Sensitive Data Exposure in Amelia = 2.2 versions...

PT-2026-49520

Unauthenticated Sensitive Data Exposure in ABC Crypto Checkout = 1.8.2 versions...

CVE-2026-49064: Insertion of Sensitive Information Into Sent Data

Insertion of Sensitive Information Into Sent Data vulnerability in Stiofan GetPaid allows Retrieve Embedded Sensitive Data. This issue affects GetPaid: from n/a through 2.8.49...

PT-2026-49438

Unauthenticated Sensitive Data Exposure in Simply Schedule Appointments 1.6.11.2 versions...

PT-2026-49331

Name of the Vulnerable Software and Affected Versions grocy version 4.6.0 Description SQL injection occurs at the '/stockreports/spendings' endpoint through the product-group parameter. This allows attackers to access sensitive database information by using a crafted SQL statement. SQL injection ...

CVE-2026-39480: Insertion of Sensitive Information Into Sent Data

Unauthenticated Sensitive Data Exposure in Backup Migration = 2.1.1 versions...

PT-2026-49517

Unauthenticated Sensitive Data Exposure in Affiliates Manager = 2.9.50 versions...

CVE-2026-49066: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Unauthenticated Sensitive Data Exposure in Conekta Payment Gateway = 6.0.0 versions...

CVE-2026-40790: Authentication Bypass Using an Alternate Path or Channel

Subscriber Sensitive Data Exposure in WP SMS = 7.2.1 versions...

CVE-2026-52695: Insertion of Sensitive Information Into Sent Data

Unauthenticated Sensitive Data Exposure in ABC Crypto Checkout = 1.8.2 versions...

CVE-2026-40796: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Subscriber Sensitive Data Exposure in WPPizza = 3.19.9 versions...

CVE-2026-52694: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Unauthenticated Sensitive Data Exposure in Signature Add-On for WooCommerce = 2.0 versions...

CVE-2026-48965: Insertion of Sensitive Information Into Sent Data

Subscriber Sensitive Data Exposure in XCloner = 4.8.6 versions...

PT-2026-49229

Insertion of Sensitive Information Into Sent Data vulnerability in Stiofan GetPaid allows Retrieve Embedded Sensitive Data. This issue affects GetPaid: from n/a through 2.8.49...

CVE-2026-40789: Insertion of Sensitive Information Into Sent Data

Unauthenticated Sensitive Data Exposure in Amelia = 2.2 versions...

CVE-2026-48878: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Subscriber Sensitive Data Exposure in Visual Link Preview = 2.4.1 versions...

CVE-2026-39196

Datadog, Inc Vector v0.54.0 was discovered to contain a SQL injection vulnerability in the seturiquery parameter in the KeyPartitioner::partition function. This vulnerability allows attackers to access sensitive database information via crafted SQL statements...

Shell command Disclosure

The vulnerability of the Shell command shell in Windows operating systems is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow an attacker to disclose protected information...

Shell command Disclosure

The vulnerability of the Shell command shell in Windows operating systems is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow a remote attacker to disclose protected information...