6928 matches found
CVE-2025-60095
Insertion of Sensitive Information Into Sent Data vulnerability in Benjamin Intal Stackable stackable-ultimate-gutenberg-blocks allows Retrieve Embedded Sensitive Data.This issue affects Stackable: from n/a through = 3.18.1...
CVE-2025-60092
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Shahjada Download Manager download-manager allows Retrieve Embedded Sensitive Data.This issue affects Download Manager: from n/a through = 3.3.25...
CVE-2025-60167 WordPress Page Manager for Elementor Plugin <= 2.0.5 - Sensitive Data Exposure Vulnerability
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in honzat Page Manager for Elementor page-manager-for-elementor allows Retrieve Embedded Sensitive Data.This issue affects Page Manager for Elementor: from n/a through = 2.0.5...
CVE-2025-60167
CVE-2025-60167 affects Page Manager for Elementor (WordPress plugin) up to version 2.0.5. The issue is Exposure of Sensitive System Information to an Unauthorized Control Sphere, enabling retrieval of embedded sensitive data. CVSS v3.1 base score 4.3 (Medium) with Network attack vector, Low compl...
CVE-2025-60167 WordPress Page Manager for Elementor Plugin <= 2.0.5 - Sensitive Data Exposure Vulnerability
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in honzat Page Manager for Elementor page-manager-for-elementor allows Retrieve Embedded Sensitive Data.This issue affects Page Manager for Elementor: from n/a through = 2.0.5...
CVE-2025-60140 WordPress The Tribal Plugin <= 1.3.3 - Sensitive Data Exposure Vulnerability
Insertion of Sensitive Information Into Sent Data vulnerability in thetechtribe The Tribal the-tech-tribe allows Retrieve Embedded Sensitive Data.This issue affects The Tribal: from n/a through = 1.3.3...
CVE-2025-60140 WordPress The Tribal Plugin <= 1.3.3 - Sensitive Data Exposure Vulnerability
Insertion of Sensitive Information Into Sent Data vulnerability in thetechtribe The Tribal the-tech-tribe allows Retrieve Embedded Sensitive Data.This issue affects The Tribal: from n/a through = 1.3.3...
CVE-2025-60140
CVE-2025-60140 describes an unauthenticated sensitive information exposure in the WordPress plugin The Tribal (The Tribal). Affected versions are listed as up to 1.3.3; the issue arises from insertion of sensitive data into sent data, allowing retrieval of embedded data. The vulnerability entry i...
CVE-2025-60125 WordPress FoodBook Plugin <= 4.7.6 - Sensitive Data Exposure Vulnerability
Insertion of Sensitive Information Into Sent Data vulnerability in themelooks FoodBook foodbook allows Retrieve Embedded Sensitive Data.This issue affects FoodBook: from n/a through = 4.7.6...
CVE-2025-60125 WordPress FoodBook Plugin <= 4.7.6 - Sensitive Data Exposure Vulnerability
Insertion of Sensitive Information Into Sent Data vulnerability in themelooks FoodBook foodbook allows Retrieve Embedded Sensitive Data.This issue affects FoodBook: from n/a through = 4.7.6...
CVE-2025-60125
CVE-2025-60125 affects the WordPress plugin FoodBook. The issue is an Insertion of Sensitive Information Into Sent Data vulnerability that enables exposure of embedded sensitive data. Affected software is listed as FoodBook from n/a through 4.7.1. The Wordfence entry shows this CVE with a CVSS v3...
CVE-2025-60119 WordPress CoSchedule Plugin <= 3.3.11 - Sensitive Data Exposure Vulnerability
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in CoSchedule CoSchedule coschedule-by-todaymade allows Retrieve Embedded Sensitive Data.This issue affects CoSchedule: from n/a through = 3.3.11...
CVE-2025-60119 WordPress CoSchedule Plugin <= 3.3.11 - Sensitive Data Exposure Vulnerability
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in CoSchedule CoSchedule coschedule-by-todaymade allows Retrieve Embedded Sensitive Data.This issue affects CoSchedule: from n/a through = 3.3.11...
CVE-2025-60119
CVE-2025-60119 : In CoSchedule for WordPress, an Unauthenticated Sensitive Information Exposure vulnerability affects CoSchedule up to version 3.3.11 (per Wordfence). The issue leaks sensitive data to unauthorized actors due to insufficient access control. Wordfence indicates a patch is available...
CVE-2025-60095 WordPress Stackable Plugin <= 3.18.1 - Sensitive Data Exposure Vulnerability
Insertion of Sensitive Information Into Sent Data vulnerability in Benjamin Intal Stackable stackable-ultimate-gutenberg-blocks allows Retrieve Embedded Sensitive Data.This issue affects Stackable: from n/a through = 3.18.1...
CVE-2025-60092 WordPress Download Manager Plugin <= 3.3.25 - Sensitive Data Exposure Vulnerability
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Shahjada Download Manager download-manager allows Retrieve Embedded Sensitive Data.This issue affects Download Manager: from n/a through = 3.3.25...
CVE-2025-60092
CVE-2025-60092 affects the Download Manager WordPress plugin (versions up to 3.3.24/3.3.25 per sources) and is an unauthenticated exposure of sensitive information. Exploitation details are not provided in the documents, but WordFence notes the vulnerability as a sensitive information exposure an...
CVE-2025-60092 WordPress Download Manager Plugin <= 3.3.25 - Sensitive Data Exposure Vulnerability
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Shahjada Download Manager download-manager allows Retrieve Embedded Sensitive Data.This issue affects Download Manager: from n/a through = 3.3.25...
CVE-2025-59010 WordPress Permalink Manager Lite Plugin <= 2.5.1.3 - Sensitive Data Exposure Vulnerability
Insertion of Sensitive Information Into Sent Data vulnerability in Maciej Bis Permalink Manager Lite permalink-manager allows Retrieve Embedded Sensitive Data.This issue affects Permalink Manager Lite: from n/a through = 2.5.1.3...
CVE-2025-59010
CVE-2025-59010 affects the WordPress Permalink Manager Lite plugin (versions up to 2.5.1.3). The vulnerability is described as insertion of sensitive information into sent data, allowing retrieval of embedded sensitive data. Affected component is the Permalink Manager Lite plugin; root cause deta...