Lucene search
+L

29222 matches found

Cvelist
Cvelist
added 2026/01/05 10:39 a.m.38 views

CVE-2025-68033 WordPress Custom Related Posts plugin <= 1.8.0 - Sensitive Data Exposure vulnerability

Insertion of Sensitive Information Into Sent Data vulnerability in Brecht Custom Related Posts custom-related-posts allows Retrieve Embedded Sensitive Data.This issue affects Custom Related Posts: from n/a through = 1.8.0...

7.5CVSS0.00254EPSS
SaveExploits0References1
CVE
CVE
added 2026/01/05 10:39 a.m.27 views

CVE-2025-68033

The CVE-2025-68033 entry concerns Custom Related Posts (Brecht) for WordPress, affecting versions up to 1.8.0. It is an Unauthenticated Information Exposure vulnerability described as Insertion of Sensitive Information Into Sent Data, enabling retrieval of embedded sensitive data. Wordfence detai...

7.5CVSS5.9AI score0.00254EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/01/05 10:39 a.m.5 views

CVE-2025-68033 WordPress Custom Related Posts plugin <= 1.8.0 - Sensitive Data Exposure vulnerability

Insertion of Sensitive Information Into Sent Data vulnerability in Brecht Custom Related Posts allows Retrieve Embedded Sensitive Data.This issue affects Custom Related Posts: from n/a through 1.8.0...

7.5CVSS6.5AI score0.00254EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/01/05 10:37 a.m.32 views

CVE-2025-68029 WordPress Wallet System for WooCommerce plugin <= 2.7.3 - Sensitive Data Exposure vulnerability

Insertion of Sensitive Information Into Sent Data vulnerability in WP Swings Wallet System for WooCommerce wallet-system-for-woocommerce allows Retrieve Embedded Sensitive Data.This issue affects Wallet System for WooCommerce: from n/a through = 2.7.3...

6.3CVSS0.00175EPSS
SaveExploits0References1
CVE
CVE
added 2026/01/05 10:37 a.m.21 views

CVE-2025-68029

CVE-2025-68029 involves an Insertion of Sensitive Information Into Sent Data vulnerability in the Wallet System for WooCommerce. Affects Wallet System for WooCommerce – from unknown/no details to 2.7.2. The provided data indicates potential exposure of embedded sensitive data via the wallet featu...

6.3CVSS5.9AI score0.00175EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/01/05 10:37 a.m.3 views

CVE-2025-68029 WordPress Wallet System for WooCommerce plugin <= 2.7.2 - Sensitive Data Exposure vulnerability

Insertion of Sensitive Information Into Sent Data vulnerability in WP Swings Wallet System for WooCommerce allows Retrieve Embedded Sensitive Data.This issue affects Wallet System for WooCommerce: from n/a through 2.7.2...

6.3CVSS6.5AI score0.00175EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/01/05 10:36 a.m.3 views

CVE-2025-68014 WordPress AweBooking plugin <= 3.2.26 - Sensitive Data Exposure vulnerability

Insertion of Sensitive Information Into Sent Data vulnerability in Awethemes AweBooking allows Retrieve Embedded Sensitive Data.This issue affects AweBooking: from n/a through 3.2.26...

6.5CVSS6.5AI score0.00227EPSS
SaveExploits0References1
CVE
CVE
added 2026/01/05 10:36 a.m.26 views

CVE-2025-68014

Technical details about CVE-2025-68014 are not provided in the supplied documents. No affected versions, exploitation details, or mitigations are present here. Monitor for updates from the vendor or CVE repositories.

6.5CVSS5.9AI score0.00227EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/01/05 10:36 a.m.37 views

CVE-2025-68014 WordPress AweBooking plugin <= 3.2.26 - Sensitive Data Exposure vulnerability

Insertion of Sensitive Information Into Sent Data vulnerability in awethemes AweBooking awebooking allows Retrieve Embedded Sensitive Data.This issue affects AweBooking: from n/a through = 3.2.26...

6.5CVSS0.00227EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/01/05 12:0 a.m.7 views

WordPress plugin Wallet System for WooCommerce 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

6.3CVSS6.4AI score0.00175EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/01/05 12:0 a.m.17 views

WordPress plugin Custom Related Posts 安全漏洞

...

7.5CVSS6.8AI score0.00254EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/01/05 12:0 a.m.23 views

PT-2026-1266

Name of the Vulnerable Software and Affected Versions Awethemes AweBooking versions through 3.2.26 Description A flaw exists in Awethemes AweBooking that allows for the retrieval of embedded sensitive data due to the insertion of sensitive information into sent data. Recommendations Update...

6.5CVSS6.3AI score0.00227EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/01/05 12:0 a.m.12 views

PT-2026-1267

Name of the Vulnerable Software and Affected Versions WP Swings Wallet System for WooCommerce versions through 2.7.2 Description A flaw exists in WP Swings Wallet System for WooCommerce that allows the retrieval of embedded sensitive data due to the insertion of sensitive information into sent...

6.3CVSS6.3AI score0.00175EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2026/01/05 12:0 a.m.6 views

Behat Configuration File Detected

Behat is a Behavior Driven Development BDD framework for PHP. It allows the execution of feature documentation written in business-facing text. Behat uses a configuration file named behat.yml to set up various options and parameters for running tests. The presence of the behat.yml configuration...

6.9AI score
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/01/05 12:0 a.m.13 views

JFrog Artifactory Artifacts Repository Detected

JFrog Artifactory is a popular repository management tool used to store and manage software artifacts. If the Artifacts repository is detected and accessible, it may expose sensitive information or allow unauthorized access to stored artifacts. No source data...

6.5AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/01/05 12:0 a.m.24 views

PT-2026-1268

Name of the Vulnerable Software and Affected Versions Brecht Custom Related Posts versions through 1.8.0 Description A flaw exists in Brecht Custom Related Posts that allows the retrieval of embedded sensitive data due to the insertion of sensitive information into sent data. Recommendations Upda...

7.5CVSS6.3AI score0.00254EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/01/03 3:54 p.m.14 views

CVE-2025-9110

An exposure of sensitive system information to an unauthorized control sphere vulnerability has been reported to affect several QNAP operating system versions. The remote attackers can then exploit the vulnerability to read application data. We have already fixed the vulnerability in the followin...

7.5CVSS6.4AI score0.00424EPSS
SaveExploits0References1
NVD
NVD
added 2026/01/02 9:15 p.m.15 views

CVE-2026-21447

Bagisto is an open source laravel eCommerce platform. Prior to version 2.3.10, an Insecure Direct Object Reference vulnerability in the customer order reorder function allows any authenticated customer to add items from another customer's order to their own shopping cart by manipulating the order...

7.1CVSS0.00285EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2026/01/02 7:11 p.m.2 views

CVE-2026-21445 Langflow Missing Authentication on Critical API Endpoints

Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to version 1.7.0.dev45, multiple critical API endpoints in Langflow are missing authentication controls. The issue allows any unauthenticated user to access sensitive user conversation data, transaction histories...

9.3CVSS6.6AI score0.34071EPSS
SaveExploits1References2
OSV
OSV
added 2026/01/02 7:11 p.m.7 views

CVE-2026-21445 Langflow Missing Authentication on Critical API Endpoints

Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to version 1.7.0.dev45, multiple critical API endpoints in Langflow are missing authentication controls. The issue allows any unauthenticated user to access sensitive user conversation data, transaction histories...

9.3CVSS6.8AI score
SaveExploits0References4
Rows per page
Query Builder