CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

29388 matches found

OSV•added 2026/02/19 11:15 a.m.•15 views

CVE-2025-15560

An authenticated attacker with minimal permissions can exploit a SQL injection in the WorkTime server "widget" API endpoint to inject SQL queries. If the Firebird backend is used, attackers are able to retrieve all data from the database backend. If the MSSQL backend is used the attacker can...

8.8CVSS6AI score0.00251EPSS

SaveExploits0References1

NVD•added 2026/02/19 9:16 a.m.•8 views

CVE-2026-25389

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Metagauss EventPrime eventprime-event-calendar-management allows Retrieve Embedded Sensitive Data.This issue affects EventPrime: from n/a through = 4.2.8.3...

5.3CVSS0.0024EPSS

SaveExploits0References1

NVD•added 2026/02/19 9:16 a.m.•9 views

CVE-2026-25325

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in rtCamp rtMedia for WordPress, BuddyPress and bbPress buddypress-media allows Retrieve Embedded Sensitive Data.This issue affects rtMedia for WordPress, BuddyPress and bbPress: from n/a through = 4.7.8...

5.3CVSS0.00316EPSS

SaveExploits0References1

NVD•added 2026/02/19 9:16 a.m.•8 views

CVE-2026-25008

Insertion of Sensitive Information Into Sent Data vulnerability in Shahjahan Jewel Ninja Tables ninja-tables allows Retrieve Embedded Sensitive Data.This issue affects Ninja Tables: from n/a through = 5.2.5...

4.3CVSS0.00215EPSS

SaveExploits0References1

Vulnrichment•added 2026/02/19 8:27 a.m.•5 views

CVE-2026-25389 WordPress EventPrime plugin <= 4.2.8.3 - Sensitive Data Exposure vulnerability

5.3CVSS5.9AI score0.0024EPSS

SaveExploits0References1

CVE•added 2026/02/19 8:27 a.m.•22 views

CVE-2026-25389

CVE-2026-25389 affects WordPress EventPrime (EventPrime: Metagauss) and is a Sensitive Data Exposure vulnerability. The issue allows retrieval of embedded sensitive data by an unauthenticated actor and affects EventPrime versions from n/a up to and including 4.2.8.3; the entry indicates it is pat...

5.3CVSS5.5AI score0.0024EPSS

SaveExploits0References1

ATTACKERKB•added 2026/02/19 8:27 a.m.•6 views

CVE-2026-25389

5.5AI score0.0024EPSS

SaveExploits0References2

Cvelist•added 2026/02/19 8:27 a.m.•40 views

CVE-2026-25389 WordPress EventPrime plugin <= 4.2.8.3 - Sensitive Data Exposure vulnerability

5.3CVSS0.0024EPSS

SaveExploits0References1

ATTACKERKB•added 2026/02/19 8:26 a.m.•5 views

CVE-2026-25325

5.5AI score0.00316EPSS

SaveExploits0References2

CVE•added 2026/02/19 8:26 a.m.•18 views

CVE-2026-25325

CVE-2026-25325 affects the WordPress rtMedia ecosystem: rtMedia for WordPress, BuddyPress and bbPress (buddypress-media) plugin versions up to and including 4.7.8 expose sensitive system information to an unauthorized control sphere, enabling retrieval of embedded sensitive data. The issue is roo...

5.3CVSS5.5AI score0.00316EPSS

SaveExploits0References1

Vulnrichment•added 2026/02/19 8:26 a.m.•6 views

CVE-2026-25325 WordPress rtMedia for WordPress, BuddyPress and bbPress plugin <= 4.7.8 - Sensitive Data Exposure vulnerability

5.3CVSS5.5AI score0.00316EPSS

SaveExploits0References1

Cvelist•added 2026/02/19 8:26 a.m.•40 views

CVE-2026-25325 WordPress rtMedia for WordPress, BuddyPress and bbPress plugin <= 4.7.8 - Sensitive Data Exposure vulnerability

5.3CVSS0.00316EPSS

SaveExploits0References1

ATTACKERKB•added 2026/02/19 8:26 a.m.•5 views

CVE-2026-25008

5.5AI score0.00215EPSS

SaveExploits0References2

CVE•added 2026/02/19 8:26 a.m.•16 views

CVE-2026-25008

The CVE-2026-25008 entry concerns WordPress Ninja Tables (ninja-tables) versions up to and including 5.2.5. The issue is described as an Insertion of Sensitive Information Into Sent Data vulnerability that enables retrieval of embedded sensitive data from Ninja Tables. All connected sources consi...

4.3CVSS5.4AI score0.00215EPSS

SaveExploits0References1

Vulnrichment•added 2026/02/19 8:26 a.m.•5 views

CVE-2026-25008 WordPress Ninja Tables plugin <= 5.2.5 - Sensitive Data Exposure vulnerability

4.3CVSS5.5AI score0.00215EPSS

SaveExploits0References1

Cvelist•added 2026/02/19 8:26 a.m.•36 views

CVE-2026-25008 WordPress Ninja Tables plugin <= 5.2.5 - Sensitive Data Exposure vulnerability

4.3CVSS0.00215EPSS

SaveExploits0References1

Cvelist•added 2026/02/19 3:25 a.m.•51 views

CVE-2025-13113 Web Accessibility by accessiBe <= 2.11 - Unauthenticated Sensitive Information Exposure

The Web Accessibility by accessiBe plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.11. This is due to the accessiberenderjsinfooter function logging the complete plugin options array to the browser console on public pages, without...

5.3CVSS0.00282EPSS

SaveExploits0References2

CVE•added 2026/02/19 3:25 a.m.•52 views

CVE-2025-13113

CVE-2025-13113 concerns the WordPress plugin “Web Accessibility by accessiBe.” The issue is an unauthenticated sensitive information exposure caused by the function accessibe_render_js_in_footer() logging the full plugin options array to the browser console on public pages. This output is not res...

5.3CVSS5.5AI score0.00282EPSS

SaveExploits0References2

Vulnrichment•added 2026/02/19 3:25 a.m.•10 views

CVE-2025-13113 Web Accessibility by accessiBe <= 2.11 - Unauthenticated Sensitive Information Exposure

5.3CVSS5.5AI score0.00282EPSS

SaveExploits0References2

RedhatCVE•added 2026/02/19 1:28 a.m.•14 views

CVE-2025-27900

IBM DB2 Recovery Expert for LUW 5.5 Interim Fix 002 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a...

6.8CVSS5.5AI score0.00137EPSS

SaveExploits0References1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by