CVE-2025-40698

CVE-2025-40698 concerns Prevengos, a vulnerability in Prevengos v2.44 by Nedatec Consulting. A SQL injection is triggered via a POST to the API endpoint "/servicios/autorizaciones.asmx/mfsRecuperarListado" using the parameters mpsCentroin , mpsEmpresa , mpsProyecto , and mpsContrata . The affecte...

CVE-2025-40698 SQL injection vulnerability in Prevengos

SQL injection vulnerability in Prevengos v2.44 by Nedatec Consulting. This vulnerability allows an attacker to retrieve, create, update, and delete databases by sending a POST request using the parameters “mpsCentroin”, “mpsEmpresa”, “mpsProyecto”, and “mpsContrata” in...

CVE-2025-58659

Use of Hard-coded Credentials vulnerability in Essekia Helpie FAQ helpie-faq allows Retrieve Embedded Sensitive Data.This issue affects Helpie FAQ: from n/a through = 1.45...

CVE-2025-59582

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Darren Cooney Ajax Load More ajax-load-more allows Retrieve Embedded Sensitive Data.This issue affects Ajax Load More: from n/a through = 7.6.0.2...

CVE-2025-57916

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Nurul Amin WP System Information wp-system-info allows Retrieve Embedded Sensitive Data.This issue affects WP System Information: from n/a through = 1.5...

WordPress plugin Core 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

CVE-2025-59582

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Darren Cooney Ajax Load More ajax-load-more allows Retrieve Embedded Sensitive Data.This issue affects Ajax Load More: from n/a through = 7.6.0.2...

CVE-2025-58656

Use of Hard-coded Credentials vulnerability in Risto Niinemets Estonian Shipping Methods for WooCommerce estonian-shipping-methods-for-woocommerce allows Retrieve Embedded Sensitive Data.This issue affects Estonian Shipping Methods for WooCommerce: from n/a through = 1.7.2...

CVE-2025-58007

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in NerdPress Hubbub Lite social-pug allows Retrieve Embedded Sensitive Data.This issue affects Hubbub Lite: from n/a through = 1.35.2...

CVE-2025-57923

Insertion of Sensitive Information Into Sent Data vulnerability in Ideal Postcodes UK Address Postcode Validation uk-address-postcode-validation allows Retrieve Embedded Sensitive Data.This issue affects UK Address Postcode Validation: from n/a through = 3.9.2...

CVE-2025-58249 WordPress Qubely Plugin <= 1.8.14 - Sensitive Data Exposure Vulnerability

Insertion of Sensitive Information Into Sent Data vulnerability in Themeum Qubely qubely allows Retrieve Embedded Sensitive Data.This issue affects Qubely: from n/a through = 1.8.14...

PT-2025-38865

Name of the Vulnerable Software and Affected Versions Ays Pro Quiz Maker versions through 6.7.0.61 Description A flaw exists in Ays Pro Quiz Maker that could allow unauthorized retrieval of embedded sensitive data. The issue involves exposure of sensitive system information to an unauthorized...

PT-2025-38915

Name of the Vulnerable Software and Affected Versions Getwid versions through 2.1.2 Description A flaw exists in Getwid that allows for the retrieval of embedded sensitive data due to the insertion of sensitive information into sent data. Recommendations Update Getwid to a version later than 2.1....

PT-2025-39052

Name of the Vulnerable Software and Affected Versions Darren Cooney Ajax Load More versions through 7.6.0.2 Description A flaw exists in Darren Cooney Ajax Load More that allows for the retrieval of embedded sensitive data, potentially exposing sensitive system information to an unauthorized...

PT-2025-38891

Name of the Vulnerable Software and Affected Versions iberezansky 3D FlipBook – PDF Flipbook Viewer, Flipbook Image Gallery versions through 1.16.16 Description A flaw exists in iberezansky 3D FlipBook – PDF Flipbook Viewer, Flipbook Image Gallery that allows the retrieval of embedded sensitive...

PT-2025-39189

Name of the Vulnerable Software and Affected Versions WordPress versions through 6.8.2 Description A flaw exists in WordPress that could allow retrieval of embedded sensitive data through insertion of sensitive information into sent data. The issue is considered low severity and requires...

PT-2025-38767

Name of the Vulnerable Software and Affected Versions Nurul Amin WP System Information versions through 1.5 Description A flaw exists in Nurul Amin WP System Information that allows the retrieval of embedded sensitive data, leading to exposure of sensitive system information to an unauthorized...

PT-2025-38857

Name of the Vulnerable Software and Affected Versions NerdPress Social Pug versions through 1.35.1 Description A flaw exists in NerdPress Social Pug that allows the retrieval of embedded sensitive data, potentially exposing sensitive system information to an unauthorized control sphere...

CVE-2025-58866

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Rami Yushuvaev Site Info site-info-dashboard-widget allows Retrieve Embedded Sensitive Data.This issue affects Site Info: from n/a through = 1.1...

CVE-2025-58866

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Rami Yushuvaev Site Info site-info-dashboard-widget allows Retrieve Embedded Sensitive Data.This issue affects Site Info: from n/a through = 1.1...