CVE-2025-5519

Insertion of Sensitive Information Into Sent Data vulnerability in ArgusTech BILGER allows Choosing Message Identifier. This issue affects BILGER: before 2.4.6...

"Gunosy" App vulnerable to insertion of sensitive information into sent data

Overview "Gunosy" App provided by Gunosy Inc. contains the following vulnerability. Insertion of sensitive information into sent data CWE-201 - CVE-2025-44017 YUNAO ZHOU of LAC Co., Ltd. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early...

CVE-2025-53988

Insertion of Sensitive Information Into Sent Data vulnerability in Crocoblock JetBlocks For Elementor jet-blocks allows Retrieve Embedded Sensitive Data.This issue affects JetBlocks For Elementor: from n/a through = 1.3.18...

CVE-2025-53993

Insertion of Sensitive Information Into Sent Data vulnerability in Crocoblock JetPopup jet-popup allows Retrieve Embedded Sensitive Data.This issue affects JetPopup: from n/a through = 2.0.15...

CVE-2025-53983

Insertion of Sensitive Information Into Sent Data vulnerability in Crocoblock JetElements For Elementor jet-elements allows Retrieve Embedded Sensitive Data.This issue affects JetElements For Elementor: from n/a through = 2.7.7...

CVE-2025-53985

Insertion of Sensitive Information Into Sent Data vulnerability in Crocoblock JetTabs jet-tabs allows Retrieve Embedded Sensitive Data.This issue affects JetTabs: from n/a through = 2.2.9...

CVE-2025-53985

CVE-2025-53985 affects WordPress Crocoblock JetTabs ( 2.2.9).

CVE-2025-53988

CVE-2025-53988 affects Crocoblock JetBlocks for Elementor <=1.3.18. The issue is the insertion of sensitive information into sent data, enabling retrieval of embedded sensitive data. Affected: JetBlocks For Elementor

CVE-2025-53992

CVE-2025-53992 affects Crocoblock JetTricks WordPress plugin (versions up to and including 1.5.4.1). Description: Insertion of Sensitive Information Into Sent Data vulnerability allows retrieval of embedded sensitive data. Impact notes indicate potential exposure of confidential information; CVSS...

CVE-2025-53993

CVE-2025-53993 affects Crocoblock JetPopup (WordPress plugin) up to version 2.0.15. The issue is insertion of sensitive information into sent data, enabling retrieval of embedded sensitive data. Public details across multiple sources confirm the vulnerability, its presence in JetPopup

PT-2025-34025 · WordPress · Themeisle Otter - Gutenberg Block

Name of the Vulnerable Software and Affected Versions: Themeisle Otter - Gutenberg Block versions through 3.1.0 Description: Themeisle Otter - Gutenberg Block contains a flaw that allows the retrieval of embedded sensitive data due to insertion of sensitive information into sent data...

PT-2025-33990 · WordPress · Crocoblock Jetelements For Elementor

Name of the Vulnerable Software and Affected Versions: Crocoblock JetElements For Elementor versions n/a through 2.7.7 Description: A flaw exists in Crocoblock JetElements For Elementor that allows the retrieval of embedded sensitive data due to the insertion of sensitive information into sent...

PT-2025-33998 · Crocoblock · Jetsmartfilters

Name of the Vulnerable Software and Affected Versions: Crocoblock JetSmartFilters versions through 3.6.7 Description: An insertion of sensitive information into sent data issue exists in Crocoblock JetSmartFilters, allowing retrieval of embedded sensitive data. Recommendations: Update...

CVE-2025-55710

Insertion of Sensitive Information Into Sent Data vulnerability in Steve Burge TaxoPress simple-tags allows Retrieve Embedded Sensitive Data.This issue affects TaxoPress: from n/a through = 3.37.2...

CVE-2025-55710 WordPress TaxoPress Plugin <= 3.37.2 - Sensitive Data Exposure Vulnerability

Insertion of Sensitive Information Into Sent Data vulnerability in Steve Burge TaxoPress simple-tags allows Retrieve Embedded Sensitive Data.This issue affects TaxoPress: from n/a through = 3.37.2...

CVE-2025-54685

The CVE-2025-54685 describes a vulnerability in WordPress SureDash (Brainstorm Force) plugin versions up to 1.1.0 where insertion of sensitive information into sent data can lead to retrieval of embedded sensitive data. The issue affects SureDash dated to n/a through 1.1.0, with a CVSS v3.1 base ...

PT-2025-33398 · Steve Burge · Taxopress

Name of the Vulnerable Software and Affected Versions: TaxoPress versions through 3.37.2 Description: An insertion of sensitive information into sent data issue exists in Steve Burge TaxoPress, allowing retrieval of embedded sensitive data. Recommendations: At the moment, there is no information...

CVE-2025-47444

Missing Authorization vulnerability in Damian Góra FiboSearch ajax-search-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FiboSearch: from n/a through = 1.32.1...

CVE-2025-48749

Netwrix Directory Manager formerly Imanami GroupID v11.0.0.0 and before & after v.11.1.25134.03 inserts Sensitive Information into Sent Data...

CVE-2024-31200

A “CWE-201: Insertion of Sensitive Information Into Sent Data” affecting the administrative account allows an attacker with physical access to the machine to retrieve the password in cleartext when an administrative session is open in the browser...