409 matches found
CVE-2025-39498
Insertion of Sensitive Information Into Sent Data vulnerability in Spotlight Spotlight - Social Media Feeds Premium allows Retrieve Embedded Sensitive Data.This issue affects Spotlight - Social Media Feeds Premium: from n/a through 1.7.1...
CVE-2025-39498 WordPress Spotlight - Social Media Feeds (Premium) plugin <= 1.7.1 - Sensitive Data Exposure vulnerability
Insertion of Sensitive Information Into Sent Data vulnerability in Spotlight Spotlight - Social Media Feeds Premium allows Retrieve Embedded Sensitive Data.This issue affects Spotlight - Social Media Feeds Premium: from n/a through 1.7.1...
CVE-2025-39498
CVE-2025-39498 concerns WordPress plugin Spotlight Social Feeds (Premium)
WordPress plugin Spotlight Social Feeds 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
PT-2025-22890 · Unknown · Spotlight - Social Media Feeds
Name of the Vulnerable Software and Affected Versions: Spotlight - Social Media Feeds Premium versions 1.7.1 and earlier Description: The issue allows the retrieval of embedded sensitive data due to the insertion of sensitive information into sent data. This affects the Spotlight - Social Media...
CVE-2024-31381
Cross-Site Request Forgery CSRF vulnerability in RebelCode Spotlight Social Media Feeds.This issue affects Spotlight Social Media Feeds: from n/a through 1.6.10...
CVE-2023-0379
The Spotlight Social Feeds WordPress plugin before 1.4.3 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...
CVE-2022-32859
A logic issue was addressed with improved state management. This issue is fixed in iOS 16. Deleted contacts may still appear in spotlight search results...
CVE-2015-6808
Cross-site scripting XSS vulnerability in the Spotlight module 7.x-1.x before 7.x-1.5 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via a node title...
CVE-2025-31225
A privacy issue was addressed by removing sensitive data. This issue is fixed in iOS 18.5 and iPadOS 18.5. Call history from deleted apps may still appear in spotlight search results...
CVE-2025-31225
A privacy issue was addressed by removing sensitive data. This issue is fixed in iOS 18.5 and iPadOS 18.5. Call history from deleted apps may still appear in spotlight search results...
CVE-2025-31225
Apple fixed CVE-2025-31225 in iOS 18.5 and iPadOS 18.5. The issue exposed privacy risk where call history from deleted apps could still appear in Spotlight search results. Affected products include iPhone XS and later and iPad models supported by iPadOS 18.5; the root cause is a privacy data hand...
CVE-2025-31225
A privacy issue was addressed by removing sensitive data. This issue is fixed in iOS 18.5 and iPadOS 18.5. Call history from deleted apps may still appear in spotlight search results...
CVE-2025-31225
A privacy issue was addressed by removing sensitive data. This issue is fixed in iOS 18.5 and iPadOS 18.5. Call history from deleted apps may still appear in spotlight search results...
Avira Prime 安全漏洞
Avira Prime is a security software from the German company Avira. A security vulnerability exists in Avira Prime version 1.1.96.2, which stems from an arbitrary file deletion issue in Avira.Spotlight.Service.exe, which could lead to elevated privileges...
CVE-2025-32261
Technical details for CVE-2025-32261 are not provided in the connected documents. Public information in this set does not specify affected versions, impact, or fixes. Monitor for updates from Patchstack/NVD or vendor advisories.
February 25, 2025—KB5052093 (OS Build 26100.3323) Preview
None None...
February 25, 2025—KB5052094 (OS Builds 22621.4974 and 22631.4974) Preview
None None...
CVE-2025-26758
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in RebelCode Spotlight Social Media Feeds spotlight-social-photo-feeds allows Retrieve Embedded Sensitive Data.This issue affects Spotlight Social Media Feeds: from n/a through = 1.7.1...
CVE-2025-26758
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in RebelCode Spotlight Social Media Feeds spotlight-social-photo-feeds allows Retrieve Embedded Sensitive Data.This issue affects Spotlight Social Media Feeds: from n/a through = 1.7.1...