EUVD-2026-89904

Unauthenticated Sensitive Data Exposure in StifLi Backup Tools = 2.2.7 versions...

CVE-2026-97240 WordPress StifLi Backup Tools plugin <= 2.2.7 - Sensitive Data Exposure vulnerability

Unauthenticated Sensitive Data Exposure in StifLi Backup Tools = 2.2.7 versions...

EUVD-2026-89886

Subscriber Sensitive Data Exposure in GiveWP = 4.16.9 versions...

CVE-2026-96834

The WordPress GiveWP plugin versions

CVE-2026-96834 WordPress GiveWP plugin <= 4.16.9 - Sensitive Data Exposure vulnerability

Subscriber Sensitive Data Exposure in GiveWP = 4.16.9 versions...

CVE-2026-96834 WordPress GiveWP plugin <= 4.16.9 - Sensitive Data Exposure vulnerability

Subscriber Sensitive Data Exposure in GiveWP = 4.16.9 versions...

CVE-2026-96342

Missing Authorization vulnerability in Amauri.IO WPMobile.App wpappninja allows Retrieve Embedded Sensitive Data.This issue affects WPMobile.App: from n/a through 11.83...

WordPress MPG plugin <= 4.2.3 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin MPG versions = 4.2.3...

WordPress Notivo plugin <= 1.4.2 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Ashish Agarwal @Donrulezz in WordPress Plugin Notivo versions = 1.4.2...

EUVD-2026-89773

Missing Authorization vulnerability in Amauri.IO WPMobile.App wpappninja allows Retrieve Embedded Sensitive Data.This issue affects WPMobile.App: from n/a through 11.83...

CVE-2026-96342

The Amauri.IO WPMobile.App wpappninja WordPress plugin is susceptible to a Missing Authorization vulnerability in versions up to 11.83 . This flaw allows an attacker to Retrieve Embedded Sensitive Data . No specific root cause details, exploitation links, or remediation steps are provided in the ...

CVE-2026-96342 WordPress WPMobile.App plugin <= 11.83 - Sensitive Data Exposure vulnerability

Missing Authorization vulnerability in Amauri.IO WPMobile.App wpappninja allows Retrieve Embedded Sensitive Data.This issue affects WPMobile.App: from n/a through 11.83...

CVE-2026-10764

Information disclosure in BVMS 4.5 up to 12.3 including allows man-in-the-middle attackers to gain unauthorized access to sensitive data...

CVE-2026-10764

The BVMS software (versions 4.5 up to 12.3 ) is susceptible to an information disclosure vulnerability. This flaw allows man-in-the-middle attackers to gain unauthorized access to sensitive data . The vulnerability is characterized by a high CVSS 3.1 base score of 8.7 , reflecting significant imp...

EUVD-2026-89756

Information disclosure in BVMS 4.5 up to 12.3 including allows man-in-the-middle attackers to gain unauthorized access to sensitive data...

CVE-2026-10764 Information disclosure in BVMS 4.5 up to 12.3

Information disclosure in BVMS 4.5 up to 12.3 including allows man-in-the-middle attackers to gain unauthorized access to sensitive data...

CVE-2026-102578

A flaw was found in Moodle. An authenticated attacker with access to the question bank web service can submit unsanitized input directly into database queries, resulting in a SQL Structured Query Language injection vulnerability. This issue could allow an attacker to view, alter, or delete...

CVE-2026-102578

A SQL injection vulnerability exists in the Moodle learning management system. An authenticated attacker who has access to the question bank web service can submit unsanitized input that is directly processed into database queries. This flaw allows the attacker to view, alter, or delete sensitive...

WordPress YayReviews plugin 1.0.4-1.4.0 - Unauthenticated Sensitive Data Disclosure vulnerability

Unauthenticated Sensitive Data Disclosure vulnerability discovered by Pablo González Pérez, Francisco José Ramírez Vicente, and Iñigo Sánchez Enciso in WordPress Plugin YayReviews versions 1.0.4-1.4.0...

CVE-2026-94274 YayReviews 1.0.4 - 1.4.0 - Unauthenticated Sensitive Data Disclosure via REST API

The YayReviews WordPress plugin before 1.4.1 does not restrict access to an API route that returns individual customer review records, including reviews still pending moderation, allowing unauthenticated attackers to harvest reviewers' email addresses and other non-public review content...