32306 matches found
CVE-2026-66666
Insertion of Sensitive Information Into Sent Data vulnerability in Automattic WordPress allows Retrieve Embedded Sensitive Data. This issue affects WordPress: from 7.1 through 7.1.2, from 7.0 through 7.0.6, from 6.9 through 6.9.9, from 6.8 through 6.8.10, from 6.7 through 6.7.9, and from 6.6...
Security Bulletin:Sensitive Data Exposure in Erlang OTP inets (httpc_response module)
Summary Sensitive Data Exposure vulnerability in Erlang OTP inets httpcresponse module allows Retrieve Embedded Sensitive Data. The httpc client forwards the Authorization and Proxy-Authorization request headers to redirect targets without checking whether the redirect crosses an origin boundary...
CVE-2026-66666 WordPress Core <= 7.1.2 - Unauthenticated Sensitive Data Exposure of Comments on Private and Unpublished Posts via Comment Feed vulnerability
Insertion of Sensitive Information Into Sent Data vulnerability in Automattic WordPress allows Retrieve Embedded Sensitive Data. This issue affects WordPress: from 7.1 through 7.1.2, from 7.0 through 7.0.6, from 6.9 through 6.9.9, from 6.8 through 6.8.10, from 6.7 through 6.7.9, and from 6.6...
CVE-2026-66666
This vulnerability in WordPress Core (versions through 7.1.2 ) allows for the unauthenticated exposure of sensitive data , specifically comments on private and unpublished posts . The flaw is categorized as an Insertion of Sensitive Information Into Sent Data (CWE-201) via the Comment Feed functi...
EUVD-2026-93555
Insertion of Sensitive Information Into Sent Data vulnerability in Automattic WordPress allows Retrieve Embedded Sensitive Data. This issue affects WordPress: from 7.1 through 7.1.2, from 7.0 through 7.0.6, from 6.9 through 6.9.9, from 6.8 through 6.8.10, from 6.7 through 6.7.9, and from 6.6...
CVE-2026-66666 WordPress Core <= 7.1.2 - Unauthenticated Sensitive Data Exposure of Comments on Private and Unpublished Posts via Comment Feed vulnerability
Insertion of Sensitive Information Into Sent Data vulnerability in Automattic WordPress allows Retrieve Embedded Sensitive Data. This issue affects WordPress: from 7.1 through 7.1.2, from 7.0 through 7.0.6, from 6.9 through 6.9.9, from 6.8 through 6.8.10, from 6.7 through 6.7.9, and from 6.6...
WordPress Core <= 7.1.2 - Unauthenticated Sensitive Data Exposure of Comments on Private and Unpublished Posts via Comment Feed vulnerability
Unauthenticated Sensitive Data Exposure of Comments on Private and Unpublished Posts via Comment Feed vulnerability discovered by Ananda Dhakal Patchstack in WordPress core versions = 7.1.2...
CVE-2026-27886
CVE-2026-27886 Strapi PoC 許可されたセキュリティテスト専用。 クエリサニタイズ不足によりリレーショナルフィルタリングを介して機密データを漏洩するStrapi. 含まれるもの: CVE-2026-27886.py - Python PoC CVE-2026-27886.yaml - Nuclei 検出テンプレート チェック内容 チェッカーは公開されたStrapi Content APIのコレクションエンドポイントに2つのリクエストを送信します: GET /api/ GET /api/?whereid$lt=-1...
WordPress Web Plura Backup & Restore Manager plugin <= 0.2.25 - Sensitive Data Exposure vulnerability
Sensitive Data Exposure vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Web Plura Backup & Restore Manager versions = 0.2.25...
CVE-2026-41562
Unauthenticated Sensitive Data Exposure in Norvis Backup = 1.1.0 versions...
CVE-2026-42413
Unauthenticated Sensitive Data Exposure in Snapshotify All-in-One Backup & Restore & Migrate = 1.3.2 versions...
CVE-2026-41559
Unauthenticated Sensitive Data Exposure in SafeSnap – Verified WordPress Backup & Restore = 2.1.2 versions...
CVE-2026-41561
Unauthenticated Sensitive Data Exposure in Museder RestoreOne = 2.7.276 versions...
CVE-2026-39791
Unauthenticated Sensitive Data Exposure in Mailjet Email Marketing = 6.2.3 versions...
CVE-2026-39729
Unauthenticated Sensitive Data Exposure in Edwiser Bridge = 4.3.4 versions...
CVE-2026-105071
Unauthenticated Sensitive Data Exposure in SiteVault – Backup, Restore, Migration & Cloning = 1.5.17 versions...
CVE-2026-104399
Insertion of Sensitive Information Into Sent Data vulnerability in StylemixThemes Motors allows Retrieve Embedded Sensitive Data. This issue affects Motors: from n/a through 1.4.124...
CVE-2026-104385
Unauthenticated Sensitive Data Exposure in Groundhogg = 4.8.3 versions...