CVE-2026-119499

The BAKKBONE Australia FloristPress (bakkbone-florist-companion) plugin is vulnerable to an Insertion of Sensitive Information Into Sent Data (CWE-201) vulnerability. This flaw allows an attacker to Retrieve Embedded Sensitive Data from the software. The issue affects versions from n/a through 7....

EUVD-2026-117994

Insertion of Sensitive Information Into Sent Data vulnerability in BAKKBONE Australia FloristPress bakkbone-florist-companion allows Retrieve Embedded Sensitive Data.This issue affects FloristPress: from n/a through 7.8.4...

CVE-2026-56065

Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in Doofinder Doofinder for WooCommerce doofinder-for-woocommerce allows Retrieve Embedded Sensitive Data.This issue affects Doofinder for WooCommerce: from n/a through 2.17.2...

CVE-2026-56065

The Doofinder for WooCommerce WordPress plugin (versions

CVE-2026-56065 WordPress Doofinder for WooCommerce plugin <= 2.17.2 - Sensitive Data Exposure vulnerability

Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in Doofinder Doofinder for WooCommerce doofinder-for-woocommerce allows Retrieve Embedded Sensitive Data.This issue affects Doofinder for WooCommerce: from n/a through 2.17.2...

EUVD-2026-116770

Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in Doofinder Doofinder for WooCommerce doofinder-for-woocommerce allows Retrieve Embedded Sensitive Data.This issue affects Doofinder for WooCommerce: from n/a through 2.17.2...

CVE-2026-114183

Insertion of Sensitive Information Into Sent Data vulnerability in WPVibes AnyWhere Elementor anywhere-elementor allows Retrieve Embedded Sensitive Data.This issue affects AnyWhere Elementor: from n/a through 1.3.0...

CVE-2026-114183 WordPress AnyWhere Elementor plugin <= 1.3.0 - Sensitive Data Exposure vulnerability

Insertion of Sensitive Information Into Sent Data vulnerability in WPVibes AnyWhere Elementor anywhere-elementor allows Retrieve Embedded Sensitive Data.This issue affects AnyWhere Elementor: from n/a through 1.3.0...

EUVD-2026-116087

Insertion of Sensitive Information Into Sent Data vulnerability in WPVibes AnyWhere Elementor anywhere-elementor allows Retrieve Embedded Sensitive Data.This issue affects AnyWhere Elementor: from n/a through 1.3.0...

CVE-2026-114183

The AnyWhere Elementor plugin for WordPress (versions up to and including 1.3.0 ) is susceptible to a Sensitive Data Exposure vulnerability (CWE-201). This flaw in the anywhere-elementor component allows an attacker to Retrieve Embedded Sensitive Data from the sent data. The vulnerability has a C...

CVE-2026-118568

Insecure Storage of Sensitive Information vulnerability in Drupal Content Sync content-sync.io allows Retrieve Embedded Sensitive Data. This issue affects Content Sync content-sync.io versions: from 0.0.0 to 3.2.2...

CVE-2026-118551

Insecure Storage of Sensitive Information vulnerability in Drupal AI Artificial Intelligence allows Retrieve Embedded Sensitive Data. This issue affects AI Artificial Intelligence versions: from 0.0.0 to 1.4.11, from 1.5.0 to 1.5.2...

EUVD-2026-113501

Insecure Storage of Sensitive Information vulnerability in Drupal AI Artificial Intelligence allows Retrieve Embedded Sensitive Data. This issue affects AI Artificial Intelligence versions: from 0.0.0 to 1.4.11, from 1.5.0 to 1.5.2...

CVE-2026-118551 AI (Artificial Intelligence) - Less critical - Information Disclosure - SA-CONTRIB-2026-271

Insecure Storage of Sensitive Information vulnerability in Drupal AI Artificial Intelligence allows Retrieve Embedded Sensitive Data. This issue affects AI Artificial Intelligence versions: from 0.0.0 to 1.4.11, from 1.5.0 to 1.5.2...

CVE-2026-118551

The Drupal AI (Artificial Intelligence) module (versions 0.0.0 to 1.4.11 and 1.5.0 to 1.5.2 ) contains an Insecure Storage of Sensitive Information vulnerability (CWE-922 ). The root cause is that audio for every speech-to-text request is written to the same file in the temporary directory and is...

EUVD-2026-113683

Insecure Storage of Sensitive Information vulnerability in Drupal Content Sync content-sync.io allows Retrieve Embedded Sensitive Data. This issue affects Content Sync content-sync.io versions: from 0.0.0 to 3.2.2...

CVE-2026-118568 Content Sync (content-sync.io) - Moderately critical - Information disclosure - SA-CONTRIB-2026-291

Insecure Storage of Sensitive Information vulnerability in Drupal Content Sync content-sync.io allows Retrieve Embedded Sensitive Data. This issue affects Content Sync content-sync.io versions: from 0.0.0 to 3.2.2...

CVE-2026-118568

The Drupal Content Sync (content-sync.io) module (versions 0.0.0 to 3.2.2 ) contains an Insecure Storage of Sensitive Information vulnerability (CWE-922 ). The root cause is that the module fails to sufficiently encrypt the password of the system user used for content synchronization. This flaw c...

CVE-2026-118568: Drupal Content Sync (content-sync.io): Insecure Storage of Sensitive Information vulnerability in Drupal Content Sync (content-sync.io) allows Retrieve…

Insecure Storage of Sensitive Information vulnerability in Drupal Content Sync content-sync.io allows Retrieve Embedded Sensitive Data. This issue affects Content Sync content-sync.io versions: from 0.0.0 to 3.2.2...

CVE-2026-118551: Drupal AI (Artificial Intelligence): Insecure Storage of Sensitive Information vulnerability in Drupal AI (Artificial Intelligence) allows Retrieve Embedded…

Insecure Storage of Sensitive Information vulnerability in Drupal AI Artificial Intelligence allows Retrieve Embedded Sensitive Data. This issue affects AI Artificial Intelligence versions: from 0.0.0 to 1.4.11, from 1.5.0 to 1.5.2...