7994 matches found
CVE-2026-110361
The WordPress Infinite Uploads plugin (versions
WordPress Infinite Uploads plugin <= 3.4.1 - Sensitive Data Exposure vulnerability
Sensitive Data Exposure vulnerability discovered by Peter Tang in WordPress Plugin Infinite Uploads versions = 3.4.1...
CVE-2024-55457-PoC
CVE-2024-55457-PoC MasterSAM Star Gate v11 is vulnerable to a directory traversal attack via the endpoint /adama/adama/downloadService. An attacker can exploit this vulnerability by manipulating the file parameter to access arbitrary files on the server, potentially leading to the exposure of...
CVE-2024-50961
Sensitive Data Exposure CVE-2024-50961 Description In DonWeb Ferozo Hosting v1.1, a remote attacker can exploit URL parameters to access sensitive data, including database credentials. Attack vectors include network sniffing, server logs, and browser history, potentially exposing organizations to...
CVE-2026-109695
The WPManageNinja FluentCart plugin (versions
CVE-2026-109695 WordPress FluentCart plugin <= 1.7.1 - Sensitive Data Exposure vulnerability
Insertion of Sensitive Information Into Sent Data vulnerability in WPManageNinja FluentCart fluent-cart allows Retrieve Embedded Sensitive Data.This issue affects FluentCart: from n/a through 1.7.1...
WordPress Gantry 5 Framework plugin <= 5.6.4 - Sensitive Data Exposure vulnerability
Sensitive Data Exposure vulnerability discovered by neurotx in WordPress Plugin Gantry 5 Framework versions = 5.6.4...
LLMReaper
Passive LLM Conversation Capture & Sensitive Data Exposure Research Chromium MV3 Extension • Real-Time DOM Capture • Secret Detection • FastAPI Backend !WARNING This project is provided strictly for security research, educational use, and defensive awareness purposes. Unauthorized deployment...
CVE-2026-110466
Tronclass developed by WisdomGarden has a Sensitive Data Exposure vulnerability. Authenticated remote attackers can bypass anonymous grading restrictions and obtain anonymous student information...
EUVD-2026-100872
Tronclass developed by WisdomGarden has a Sensitive Data Exposure vulnerability. Authenticated remote attackers can bypass anonymous grading restrictions and obtain anonymous student information...
CVE-2026-110466
The Tronclass software, developed by WisdomGarden , contains a Sensitive Data Exposure vulnerability (CWE-497). Authenticated remote attackers can bypass anonymous grading restrictions to obtain anonymous student information . No specific patch versions, workarounds, or evidence of in-the-wild ex...
CVE-2026-110466 WisdomGarden|Tronclass - Sensitive Data Exposure
Tronclass developed by WisdomGarden has a Sensitive Data Exposure vulnerability. Authenticated remote attackers can bypass anonymous grading restrictions and obtain anonymous student information...
CVE-2026-110466 WisdomGarden|Tronclass - Sensitive Data Exposure
Tronclass developed by WisdomGarden has a Sensitive Data Exposure vulnerability. Authenticated remote attackers can bypass anonymous grading restrictions and obtain anonymous student information...
PT-2026-113677
Tronclass developed by WisdomGarden has a Sensitive Data Exposure vulnerability. Authenticated remote attackers can bypass anonymous grading restrictions and obtain anonymous student information...
WordPress FluentCart plugin <= 1.7.1 - Sensitive Data Exposure vulnerability
Sensitive Data Exposure vulnerability discovered by AndrewN in WordPress Plugin FluentCart versions = 1.7.1...
CVE-2026-106598
The ThemeGrill User Registration WordPress plugin (versions n/a through 5.2.8 ) is vulnerable to a Missing Authorization vulnerability. This flaw allows an attacker to Retrieve Embedded Sensitive Data . No specific technical root cause, exploit details, or remediation steps are provided in the do...
WordPress User Registration plugin <= 5.2.8 - Sensitive Data Exposure vulnerability
Sensitive Data Exposure vulnerability discovered by sumayfe in WordPress Plugin User Registration versions = 5.2.8...
CVE-2026-108489
The Active Products Tables for WooCommerce plugin (by PluginUs.Net) versions up to and including 2.1.3 is vulnerable to an Insertion of Sensitive Information Into Sent Data vulnerability (CWE-201). This flaw allows for the retrieval of embedded sensitive data from the application. No specific rem...
WordPress Active Products Tables for WooCommerce plugin <= 2.1.3 - Sensitive Data Exposure vulnerability
Sensitive Data Exposure vulnerability discovered by hooman in WordPress Plugin Active Products Tables for WooCommerce versions = 2.1.3...
CVE-2026-109703
The WPGraphQL plugin for WordPress (versions up to and including 2.23.1 ) is vulnerable to a Missing Authorization (CWE-862) flaw. This vulnerability allows an unauthenticated attacker to Retrieve Embedded Sensitive Data from the wp-graphql component. The issue results in a Medium severity impact...