PT-2026-49428

Subscriber Sensitive Data Exposure in WP SMS = 7.2.1 versions...

PT-2026-49298

Name of the Vulnerable Software and Affected Versions RuoYi version 4.8.2 Description An issue in the code generation module allows an authenticated attacker with administrative privileges to access sensitive database information. This is possible through a SQL Injection in the...

CVE-2026-42384: Insertion of Sensitive Information Into Sent Data

Unauthenticated Sensitive Data Exposure in Simply Schedule Appointments 1.6.11.2 versions...

CVE-2026-40796: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Subscriber Sensitive Data Exposure in WPPizza = 3.19.9 versions...

PT-2026-49363

Unauthenticated Sensitive Data Exposure in IDPay Payment Gateway for Woocommerce = 2.2.5 versions...

PT-2026-49520

Unauthenticated Sensitive Data Exposure in ABC Crypto Checkout = 1.8.2 versions...

PT-2026-49438

Unauthenticated Sensitive Data Exposure in Simply Schedule Appointments 1.6.11.2 versions...

PT-2026-49480

Unauthenticated Sensitive Data Exposure in EmbedPress = 4.5.2 versions...

CVE-2026-38812

RuoYi version v4.8.2 is vulnerable to SQL Injection within its code generation module . The flaw is reachable via the /tool/gen/createTable endpoint, which may allow an authenticated attacker with administrative privileges to access sensitive database information. There is currently no informatio...

CVE-2026-40790: Authentication Bypass Using an Alternate Path or Channel

Subscriber Sensitive Data Exposure in WP SMS = 7.2.1 versions...

CVE-2026-48965: Insertion of Sensitive Information Into Sent Data

Subscriber Sensitive Data Exposure in XCloner = 4.8.6 versions...

CVE-2026-42667: Insertion of Sensitive Information Into Sent Data

Unauthenticated Sensitive Data Exposure in Bookly = 27.4 versions...

CVE-2026-39480: Insertion of Sensitive Information Into Sent Data

Unauthenticated Sensitive Data Exposure in Backup Migration = 2.1.1 versions...

CVE-2026-52695: Insertion of Sensitive Information Into Sent Data

Unauthenticated Sensitive Data Exposure in ABC Crypto Checkout = 1.8.2 versions...

Insertion of Sensitive Information Into Sent Data

Overview ironic is an OpenStack Bare Metal Provisioning Affected versions of this package are vulnerable to Insertion of Sensitive Information Into Sent Data via the PATCH process on volume properties. An attacker can obtain sensitive information by sending a PATCH request to update volume...

EUVD-2026-36652

SQL Injection in reports/catalogueout.pl in Koha Community Koha through 22.11.37, 23.x, 24.x before 24.11.16, 25.05.x before 25.05.11, 25.11.x before 25.11.05, 26.05.x before 26.05.01, and 26.11.x before 26.11.00 allows an authenticated staff user with the Reports module flag to read arbitrary da...

Time-of-check Time-of-use (TOCTOU) Race Condition

Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Time-of-check Time-of-use TOCTOU Race Condition via the system.run safe-bin allowlist validation. An attacker can access arbitrary files and expose sensitive configuration data by injecti...

CVE-2026-53839

OpenClaw before 2026.5.7 contains a hostname validation vulnerability in retry endpoint checks that allows matching hostname prefixes instead of exact hostnames. Attackers can exploit this by crafting a hostname prefix resembling a trusted host to send authentication material to untrusted endpoin...

CVE-2026-53831

OpenClaw before 2026.5.18 contains a policy enforcement vulnerability in system.run safe-bin allowlist validation that allows shell expansion to modify command interpretation on POSIX nodes. Authenticated operators can exploit shell metacharacters in approved commands to read unintended node-loca...

CVE-2026-24618 WordPress Hash Elements plugin <= 1.5.4 - Sensitive Data Exposure vulnerability

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in HashThemes Hash Elements allows Retrieve Embedded Sensitive Data. This issue affects Hash Elements: from n/a through 1.5.4...