CVE-2026-106099 WP Data Access < 5.5.84 - Unauthenticated Sensitive Data Disclosure via Table Export

The WP Data Access WordPress plugin before 5.5.84 does not restrict its database table export action to authorized users, gating it only with a token that the WP Data Access WordPress plugin before 5.5.84 itself prints into the public pages on which it displays a table, allowing unauthenticated...

CVE-2026-106099

The WP Data Access WordPress plugin (versions before 5.5.84 ) is vulnerable to unauthenticated sensitive data disclosure . The plugin fails to restrict its database table export action to authorized users, instead relying on a token that is publicly printed on the pages where tables are displayed...

WordPress WP Data Access plugin < 5.5.84 - Unauthenticated Sensitive Data Disclosure vulnerability

Unauthenticated Sensitive Data Disclosure vulnerability discovered by Raphael P. Cigana in WordPress Plugin WP Data Access versions 5.5.84...

PT-2026-113677

Tronclass developed by WisdomGarden has a Sensitive Data Exposure vulnerability. Authenticated remote attackers can bypass anonymous grading restrictions and obtain anonymous student information...

Vulnerabilities in Microsoft System Center

Microsoft has identified vulnerabilities in Configuration Manager and Defender. A local malicious individual could exploit these vulnerabilities to gain elevated privileges and potentially access sensitive data. Microsoft Configuration Manager:...

CVE-2026-27886

CVE-2026-27886 Strapi PoC For authorized security testing only. Strapi leaking sensitive data via relational filtering due to lack of query sanitization. Includes: CVE-2026-27886.py - Python PoC CVE-2026-27886.yaml - Nuclei template for detection What it checks The checker sends two requests to a...

WordPress FluentCart plugin <= 1.7.1 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by AndrewN in WordPress Plugin FluentCart versions = 1.7.1...

CVE-2026-106598

The ThemeGrill User Registration WordPress plugin (versions n/a through 5.2.8 ) is vulnerable to a Missing Authorization vulnerability. This flaw allows an attacker to Retrieve Embedded Sensitive Data . No specific technical root cause, exploit details, or remediation steps are provided in the do...

WordPress User Registration plugin <= 5.2.8 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by sumayfe in WordPress Plugin User Registration versions = 5.2.8...

CVE-2026-108489

The Active Products Tables for WooCommerce plugin (by PluginUs.Net) versions up to and including 2.1.3 is vulnerable to an Insertion of Sensitive Information Into Sent Data vulnerability (CWE-201). This flaw allows for the retrieval of embedded sensitive data from the application. No specific rem...

WordPress Active Products Tables for WooCommerce plugin <= 2.1.3 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by hooman in WordPress Plugin Active Products Tables for WooCommerce versions = 2.1.3...

CVE-2026-109703

Missing Authorization vulnerability in WPGraphQL WPGraphQL wp-graphql allows Retrieve Embedded Sensitive Data.This issue affects WPGraphQL: from n/a through 2.23.1...

CVE-2026-109703

The WPGraphQL plugin for WordPress (versions up to and including 2.23.1 ) is vulnerable to a Missing Authorization (CWE-862) flaw. This vulnerability allows an unauthenticated attacker to Retrieve Embedded Sensitive Data from the wp-graphql component. The issue results in a Medium severity impact...

CVE-2026-109703 WordPress WPGraphQL plugin <= 2.23.1 - Sensitive Data Exposure vulnerability

Missing Authorization vulnerability in WPGraphQL WPGraphQL wp-graphql allows Retrieve Embedded Sensitive Data.This issue affects WPGraphQL: from n/a through 2.23.1...

WordPress WPGraphQL plugin <= 2.23.1 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Heinrihs Skrodelis in WordPress Plugin WPGraphQL versions = 2.24.2...

Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : Pillow vulnerability (USN-8690-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-8690-1 advisory. It was discovered that Pillow did not properly manage memory when processing certain image files. An attacker could possibly u...

VulnCheck KEV: CVE-2026-3045

The Appointment Booking Calendar — Simply Schedule Appointments plugin for WordPress is vulnerable to unauthorized access of sensitive data in all versions up to and including 1.6.9.29. This is due to two compounding weaknesses: 1 a non-user-bound publicnonce is exposed to unauthenticated users...

CVE-2026-109703: Missing Authorization

Missing Authorization vulnerability in WPGraphQL WPGraphQL wp-graphql allows Retrieve Embedded Sensitive Data.This issue affects WPGraphQL: from n/a through 2.23.1...

CVE-2026-106598: Missing Authorization

Missing Authorization vulnerability in ThemeGrill User Registration user-registration allows Retrieve Embedded Sensitive Data.This issue affects User Registration: from n/a through 5.2.8...

CVE-2026-108489: Insertion of Sensitive Information Into Sent Data

Insertion of Sensitive Information Into Sent Data vulnerability in PluginUs.Net Active Products Tables for WooCommerce profit-products-tables-for-woocommerce allows Retrieve Embedded Sensitive Data.This issue affects Active Products Tables for WooCommerce: from n/a through 2.1.3...