Lucene search
K

7 matches found

Packet Storm
Packet Storm
added 2026/02/06 12:0 a.m.124 views

📄 WordPress TNC Toolbox 1.4.2 Information Disclosure

WordPress TNC Toolbox plugin versions 1.4.2 and below sensitive information disclosure proof of concept exploit. ============================================================================================================================================= | Title : WordPress TNC Toolbox = 1.4.2...

10CVSS5.3AI score0.00723EPSS
Exploits1
RedhatCVE
RedhatCVE
added 2025/11/12 12:6 p.m.7 views

CVE-2025-12539

The TNC Toolbox: Web Performance plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.2. This is due to the plugin storing cPanel API credentials hostname, username, and API key in files within the web-accessible wp-content directory witho...

10CVSS7AI score0.00723EPSS
Exploits1References1
OSV
OSV
added 2025/11/11 11:15 a.m.10 views

CVE-2025-12539

The TNC Toolbox: Web Performance plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.2. This is due to the plugin storing cPanel API credentials hostname, username, and API key in files within the web-accessible wp-content directory witho...

10CVSS7AI score
Exploits0References2
Cvelist
Cvelist
added 2025/11/11 11:3 a.m.13 views

CVE-2025-12539 TNC Toolbox: Web Performance <= 1.4.2 - Unauthenticated Sensitive Information Exposure to Privilege Escalation/cPanel Account Takeover

The TNC Toolbox: Web Performance plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.2. This is due to the plugin storing cPanel API credentials hostname, username, and API key in files within the web-accessible wp-content directory witho...

10CVSS0.00723EPSS
Exploits1References2
CVE
CVE
added 2025/11/11 11:3 a.m.20 views

CVE-2025-12539

The CVE-2025-12539 entry concerns the WordPress plugin TNC Toolbox: Web Performance (versions up to 1.4.2). The vulnerability, described across multiple connected sources, is a Sensitive Information Exposure flaw caused by storing cPanel credentials (hostname, username, API key) in files under th...

10CVSS6.6AI score0.00723EPSS
Exploits1References2
CNNVD
CNNVD
added 2025/11/11 12:0 a.m.10 views

WordPress plugin TNC Toolbox Web Performance 安全漏洞

WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. A security vulnerability exists in the WordPress plugin TNC Toolbox Web Performance, which stem...

10CVSS6AI score0.00723EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2025/11/11 12:0 a.m.8 views

PT-2025-46321

Name of the Vulnerable Software and Affected Versions TNC Toolbox: Web Performance plugin for WordPress versions up to and including 1.4.2 Description The TNC Toolbox: Web Performance plugin for WordPress is affected by a sensitive information exposure issue. The plugin stores cPanel API...

10CVSS6.9AI score0.00723EPSS
Exploits1References10
Rows per page
Query Builder