Lucene search
+L

8225 matches found

Vulnrichment
Vulnrichment
added 2025/09/22 6:23 p.m.2 views

CVE-2025-58269 WordPress WP Project Manager Plugin <= 2.6.25 - Sensitive Data Exposure Vulnerability

Use of Hard-coded Credentials vulnerability in weDevs WP Project Manager wedevs-project-manager allows Retrieve Embedded Sensitive Data.This issue affects WP Project Manager: from n/a through = 2.6.25...

5.3CVSS5.9AI score0.0027EPSS
SaveExploits0References1
CVE
CVE
added 2025/09/22 6:23 p.m.11 views

CVE-2025-58656

CVE-2025-58656 concerns the Estonian Shipping Methods for WooCommerce plugin. The CVE description notes a vulnerability involving hard-coded credentials that could lead to the retrieval of embedded sensitive data, affecting versions from unknown starting point up to and including 1.7.2. The conne...

5.3CVSS5.9AI score0.0027EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/09/22 6:23 p.m.17 views

CVE-2025-58656 WordPress Estonian Shipping Methods for WooCommerce Plugin <= 1.7.2 - Sensitive Data Exposure Vulnerability

Use of Hard-coded Credentials vulnerability in Risto Niinemets Estonian Shipping Methods for WooCommerce estonian-shipping-methods-for-woocommerce allows Retrieve Embedded Sensitive Data.This issue affects Estonian Shipping Methods for WooCommerce: from n/a through = 1.7.2...

5.3CVSS0.0027EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/09/22 6:23 p.m.1 views

CVE-2025-58656 WordPress Estonian Shipping Methods for WooCommerce Plugin <= 1.7.2 - Sensitive Data Exposure Vulnerability

Use of Hard-coded Credentials vulnerability in Risto Niinemets Estonian Shipping Methods for WooCommerce estonian-shipping-methods-for-woocommerce allows Retrieve Embedded Sensitive Data.This issue affects Estonian Shipping Methods for WooCommerce: from n/a through = 1.7.2...

5.3CVSS5.9AI score0.0027EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/09/22 6:23 p.m.16 views

CVE-2025-58659 WordPress Helpie FAQ plugin <= 1.45 - Sensitive Data Exposure vulnerability

Use of Hard-coded Credentials vulnerability in Essekia Helpie FAQ helpie-faq allows Retrieve Embedded Sensitive Data.This issue affects Helpie FAQ: from n/a through = 1.45...

5.3CVSS0.0027EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/09/22 6:23 p.m.1 views

CVE-2025-58659 WordPress Helpie FAQ plugin <= 1.45 - Sensitive Data Exposure vulnerability

Use of Hard-coded Credentials vulnerability in Essekia Helpie FAQ helpie-faq allows Retrieve Embedded Sensitive Data.This issue affects Helpie FAQ: from n/a through = 1.45...

5.3CVSS5.9AI score0.0027EPSS
SaveExploits0References1
CVE
CVE
added 2025/09/22 6:23 p.m.13 views

CVE-2025-58659

CVE-2025-58659 affects the WordPress plugin Helpie FAQ (FAQ/Docs/KB – Helpie) with an unauthenticated sensitive information exposure. Public details in connected data identify Helpie FAQ as the affected software, up to version 1.39, and indicate the issue is an unauthenticated exposure of embedde...

5.3CVSS5.9AI score0.0027EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/09/22 12:0 a.m.10 views

PT-2025-38931

Name of the Vulnerable Software and Affected Versions weDevs WP Project Manager versions through 2.6.25 Description The software contains hard-coded credentials, potentially allowing retrieval of embedded sensitive data. Recommendations Update weDevs WP Project Manager to a version later than...

5.3CVSS6.6AI score0.0027EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/09/22 12:0 a.m.8 views

AiKaan Cloud Controller 安全漏洞

AiKaan Cloud Controller is a monitoring platform for Internet edge devices from AiKaan India. AiKaan Cloud Controller has a security vulnerability that stems from remote endpoint access using a hard-coded SSH private key and username proxyuser, which could allow an attacker to impersonate a manag...

9.8CVSS6.8AI score0.00397EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/09/22 12:0 a.m.5 views

WordPress plugin Helpie FAQ 信任管理问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A vulnerability in...

5.3CVSS6.4AI score0.0027EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/09/22 12:0 a.m.10 views

AiKaan IoT management platform 安全漏洞

Aikaan IoT management platform is a management platform from Aikaan India. AiKaan IoT management platform suffers from a security vulnerability that stems from insufficiently hardened proxyuser accounts and the use of a shared hard-coded SSH private key, which could lead to remote code execution,...

9.8CVSS7.2AI score0.00494EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/09/22 12:0 a.m.4 views

WordPress plugin WP Project Manager 信任管理问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A vulnerabilit...

5.3CVSS6.6AI score0.0027EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/09/22 12:0 a.m.6 views

PT-2025-38948

Name of the Vulnerable Software and Affected Versions Essekia Helpie FAQ versions through 1.39 Description A hard-coded credentials issue exists in Essekia Helpie FAQ, potentially allowing retrieval of embedded sensitive data. The issue affects the application's functionality related to...

5.3CVSS6.6AI score0.0027EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/09/22 12:0 a.m.7 views

PT-2025-38945

Name of the Vulnerable Software and Affected Versions Estonian Shipping Methods for WooCommerce versions through 1.7.2 Description The Estonian Shipping Methods for WooCommerce software contains hard-coded credentials, potentially allowing retrieval of embedded sensitive data. Recommendations...

5.3CVSS6.6AI score0.0027EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/09/21 12:0 a.m.14 views

PPress 安全漏洞

PPress is a Python-based blogging CMS system by the individual developer yandaozi. A security vulnerability exists in PPress version 0.0.9, which stems from hard-coded credentials included in the default configuration...

8.8CVSS6.6AI score0.00384EPSS
SaveExploits3References1
RedhatCVE
RedhatCVE
added 2025/09/19 3:28 p.m.7 views

CVE-2024-48842

Use of Hard-coded Credentials vulnerability in ABB FLXEON.This issue affects FLXEON: through 9.3.5 and newer versions...

7.3CVSS7AI score0.00164EPSS
SaveExploits0References1
NVD
NVD
added 2025/09/18 9:15 p.m.6 views

CVE-2025-54754

An attacker with adjacent access, without authentication, can exploit this vulnerability to retrieve a hard-coded password embedded in publicly available software. This password can then be used to decrypt sensitive network traffic, affecting the Cognex device...

8.6CVSS0.00228EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/09/18 9:6 p.m.5 views

CVE-2025-54754 Cognex In-Sight Explorer and In-Sight Camera Firmware Use of Hard-coded Password

An attacker with adjacent access, without authentication, can exploit this vulnerability to retrieve a hard-coded password embedded in publicly available software. This password can then be used to decrypt sensitive network traffic, affecting the Cognex device...

8.6CVSS6.6AI score0.00228EPSS
SaveExploits0References1
CVE
CVE
added 2025/09/18 9:6 p.m.19 views

CVE-2025-54754

CVE-2025-54754 affects Cognex In-Sight Explorer and In-Sight Camera firmware. The vulnerability arises from a hard-coded password embedded in publicly available software, which an adjacent attacker with no authentication can retrieve to decrypt sensitive network traffic on Cognex devices. Documen...

8.6CVSS6.6AI score0.00228EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/09/18 9:6 p.m.16 views

CVE-2025-54754 Cognex In-Sight Explorer and In-Sight Camera Firmware Use of Hard-coded Password

An attacker with adjacent access, without authentication, can exploit this vulnerability to retrieve a hard-coded password embedded in publicly available software. This password can then be used to decrypt sensitive network traffic, affecting the Cognex device...

8.6CVSS0.00228EPSS
SaveExploits0References1
Rows per page
Query Builder