CVE-2025-58656 WordPress Estonian Shipping Methods for WooCommerce Plugin <= 1.7.2 - Sensitive Data Exposure Vulnerability

Use of Hard-coded Credentials vulnerability in Risto Niinemets Estonian Shipping Methods for WooCommerce estonian-shipping-methods-for-woocommerce allows Retrieve Embedded Sensitive Data.This issue affects Estonian Shipping Methods for WooCommerce: from n/a through = 1.7.2...

CVE-2025-58656 WordPress Estonian Shipping Methods for WooCommerce Plugin <= 1.7.2 - Sensitive Data Exposure Vulnerability

Use of Hard-coded Credentials vulnerability in Risto Niinemets Estonian Shipping Methods for WooCommerce estonian-shipping-methods-for-woocommerce allows Retrieve Embedded Sensitive Data.This issue affects Estonian Shipping Methods for WooCommerce: from n/a through = 1.7.2...

CVE-2025-58656

CVE-2025-58656 concerns the Estonian Shipping Methods for WooCommerce plugin. The CVE description notes a vulnerability involving hard-coded credentials that could lead to the retrieval of embedded sensitive data, affecting versions from unknown starting point up to and including 1.7.2. The conne...

CVE-2025-58659 WordPress Helpie FAQ plugin <= 1.45 - Sensitive Data Exposure vulnerability

Use of Hard-coded Credentials vulnerability in Essekia Helpie FAQ helpie-faq allows Retrieve Embedded Sensitive Data.This issue affects Helpie FAQ: from n/a through = 1.45...

CVE-2025-58659 WordPress Helpie FAQ plugin <= 1.45 - Sensitive Data Exposure vulnerability

Use of Hard-coded Credentials vulnerability in Essekia Helpie FAQ helpie-faq allows Retrieve Embedded Sensitive Data.This issue affects Helpie FAQ: from n/a through = 1.45...

CVE-2025-10776

CVE-2025-10776 affects LionCoders SalePro POS up to version 5.5.0 (and prior) with a vulnerability in the Login component that leads to cleartext transmission of sensitive information. The issue can be exploited remotely and is described as high complexity with difficult exploitability. Public ex...

WordPress plugin Helpie FAQ 信任管理问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A vulnerability in...

PT-2025-38787

Name of the Vulnerable Software and Affected Versions WPeMatico RSS Feed Fetcher versions through 2.8.10 Description A flaw exists in etruel WPeMatico RSS Feed Fetcher that could allow unauthorized retrieval of embedded sensitive data. The issue involves the exposure of sensitive system informati...

PT-2025-38857

Name of the Vulnerable Software and Affected Versions NerdPress Social Pug versions through 1.35.1 Description A flaw exists in NerdPress Social Pug that allows the retrieval of embedded sensitive data, potentially exposing sensitive system information to an unauthorized control sphere...

CVE-2025-59434: Exposure of Sensitive Information to an Unauthorized Actor

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to August 2025 Cloud-Hosted Flowise, an authenticated vulnerability in Flowise Cloud allows any user on the free tier to access sensitive environment variables from other tenants via the Custom JavaScri...

WordPress plugin Envíos Coordinadora Woocommerce 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerability...

PT-2025-38865

Name of the Vulnerable Software and Affected Versions Ays Pro Quiz Maker versions through 6.7.0.61 Description A flaw exists in Ays Pro Quiz Maker that could allow unauthorized retrieval of embedded sensitive data. The issue involves exposure of sensitive system information to an unauthorized...

Blackmagic Design ATEM Mini Pro 安全漏洞

Blackmagic Design ATEM Mini Pro is a live video streaming device from Blackmagic Design, Inc. A security vulnerability exists in the Blackmagic Design ATEM Mini Pro version 2.7 that originates from an unauthenticated Telnet service exposing sensitive device information, which could lead to...

ROS-20250922-07

The vulnerability in Mozilla Firefox, Firefox ESR and Thunderbird email client is related to an operation exceeding the memory buffer boundaries as a result of an integer overflow. operation out of buffer boundaries in memory as a result of integer overflow. Exploitation of the vulnerability coul...

WordPress plugin 3D FlipBook – PDF Flipbook Viewer和Flipbook Image Gallery 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. A security...

WordPress plugin All In One SEO Pack 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin... A security...

PT-2025-38767

Name of the Vulnerable Software and Affected Versions Nurul Amin WP System Information versions through 1.5 Description A flaw exists in Nurul Amin WP System Information that allows the retrieval of embedded sensitive data, leading to exposure of sensitive system information to an unauthorized...

WordPress Core <= 6.8.2 is vulnerable to Sensitive Data Exposure

Software WordPress Type WordPress Core Vulnerable versions = 6.8.2 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Sensitive Data Exposure CVE CVE-2025-58246 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 1cbfa3e3eda1 Credits Abu Hurayra Required...

The vulnerability of the data management component of virtual machines in Hyper-V software for centralized backup and recovery management systems like PowerProtect Data Manager allows attackers to expose confidential information.

The vulnerability of the data management component in virtual machines in Hyper-V software for centralized backup and recovery management systems like PowerProtect Data Manager is related to the disclosure of information through log files. Exploiting this vulnerability can allow an attacker to...

SUSE CVE-2025-54376

Hoverfly is an open source API simulation tool. In versions 1.11.3 and prior, Hoverfly's admin WebSocket endpoint /api/v2/ws/logs is not protected by the same authentication middleware that guards the REST admin API. Consequently, an unauthenticated remote attacker can stream real-time applicatio...