161 matches found
CVE-2026-80433
Subscriber Sensitive Data Exposure in SureFeedback Client Site = 1.2.12 versions...
WordPress Simple Newsletter Plugin plugin < 4.3.3 - Unauthenticated Subscriber PII and confirm_key Disclosure vulnerability
Unauthenticated Subscriber PII and confirmkey Disclosure vulnerability discovered by Shivamani Vastrala in WordPress Plugin Noptin versions 4.3.3...
CVE-2026-78146
The Simple Newsletter Plugin WordPress plugin before 4.3.3 does not verify that the requester is the subscriber named in a public request before rendering that subscriber's stored details, allowing unauthenticated users to disclose a subscriber's personal data along with the key that authorises...
EUVD-2026-66291
The Simple Newsletter Plugin WordPress plugin before 4.3.3 does not verify that the requester is the subscriber named in a public request before rendering that subscriber's stored details, allowing unauthenticated users to disclose a subscriber's personal data along with the key that authorises...
CVE-2026-66444
Subscriber Sensitive Data Exposure in Payment Forms for Paystack = 4.0.5 versions...
EUVD-2026-57869
Subscriber Sensitive Data Exposure in Payment Forms for Paystack = 4.0.5 versions...
CVE-2026-65543
Subscriber Sensitive Data Exposure in Vimeo = 1.2.2 versions...
CVE-2026-65543
CVE-2026-65543 affects the WordPress Vimeo plugin (versions ≤ 1.2.2). The vulnerability is described as Subscriber Sensitive Data Exposure, with CVSS v3.1 Base Score 7.5 (HIGH) and an attack vector of NETWORK, requiring no privileges and no user interaction. The root cause and affected components...
CVE-2026-65543
Subscriber Sensitive Data Exposure in Vimeo = 1.2.2 versions...
CVE-2026-65543 WordPress Vimeo plugin <= 1.2.2 - Sensitive Data Exposure vulnerability
Subscriber Sensitive Data Exposure in Vimeo = 1.2.2 versions...
EUVD-2026-53973
Subscriber Sensitive Data Exposure in Vimeo = 1.2.2 versions...
CVE-2026-7520
The MailChimp Forms by MailMunch plugin for WordPress (affected versions up to 3.2.7) is vulnerable to unauthorized data modification due to a missing capability check on the sign_in() and sign_up() AJAX handlers. This allows an attacker with Subscriber-level access (or higher) to relink the site...
CVE-2026-65434
Subscriber Sensitive Data Exposure in ЮKassa для WooCommerce = 2.16.1 versions...
CVE-2026-59528
Subscriber Sensitive Data Exposure in ShipTime: Discounted Shipping Rates = 1.1.1 versions...
CVE-2026-65434
The CVE-2026-65434 entry concerns the WordPress plugin ЮKassa для WooCommerce (YuKassa for WooCommerce)
EUVD-2026-49229
Subscriber Sensitive Data Exposure in ЮKassa для WooCommerce = 2.16.1 versions...
CVE-2026-65434 WordPress ЮKassa для WooCommerce plugin <= 2.16.1 - Sensitive Data Exposure vulnerability
Subscriber Sensitive Data Exposure in ЮKassa для WooCommerce = 2.16.1 versions...
CVE-2026-65434
Subscriber Sensitive Data Exposure in ЮKassa для WooCommerce = 2.16.1 versions...