WordPress WordPress Simple PayPal Shopping Cart plugin <= 5.1.2 - Unauthenticated Information Exposure via file_url Parameter vulnerability

Unauthenticated Information Exposure via fileurl Parameter vulnerability discovered by Jack Taylor in WordPress Plugin Simple Shopping Cart versions = 5.1.2...

PT-2025-17675 · Ibm · Ibm Infosphere Information Server

Name of the Vulnerable Software and Affected Versions: IBM InfoSphere Information Server version 11.7 Description: The issue concerns the transmission of sensitive information via URL or query parameters, which could be exposed to an unauthorized actor using man-in-the-middle techniques...

WordPress Memberpress plugin <= 1.11.37 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure vulnerability

Unauthenticated Content Restriction Bypass to Sensitive Information Exposure vulnerability discovered by Francesco Carlucci in WordPress Plugin MemberPress versions = 1.11.37...

Men Salon Management System /admin/edit-services.php File SQL Injection Vulnerability

Men Salon Management System a men's salon management system. The Men Salon Management System suffers from an SQL injection vulnerability that stems from a lack of proper validation and cleanup of inputs to the cost parameter in the /admin/edit-services.php file. An attacker could exploit this...

CVE-2025-0632 Local File Inclusion (LFI) leading to sensitive data exposure

Local File Inclusion LFI vulnerability in a Render function of Formulatrix Rock Maker Web RMW allows a remote attacker to obtain sensitive data via arbitrary code execution. A malicious actor could execute malicious scripts to automatically download configuration files in known locations to...

CVE-2025-0632 Local File Inclusion (LFI) leading to sensitive data exposure

Local File Inclusion LFI vulnerability in a Render function of Formulatrix Rock Maker Web RMW allows a remote attacker to obtain sensitive data via arbitrary code execution. A malicious actor could execute malicious scripts to automatically download configuration files in known locations to...

CVE-2025-0632

Formulatrix Rock Maker Web is affected by a Local File Inclusion (LFI) in the Render function that can lead to arbitrary code execution and data exfiltration. The issue affects Rock Maker Web versions 3.2.1.1 and later. An attacker could download configuration files from known locations, exfiltra...

PT-2025-17428 · Formulatrix · Formulatrix Rock Maker Web

Name of the Vulnerable Software and Affected Versions: Formulatrix Rock Maker Web versions 3.2.1.1 and later Description: A Local File Inclusion LFI vulnerability in the Render function of Formulatrix Rock Maker Web allows a remote attacker to obtain sensitive data via arbitrary code execution...

WordPress AnalyticsWP plugin <= 2.1.2 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin AnalyticsWP versions = 2.1.2...

[Webinar] AI Is Already Inside Your SaaS Stack — Learn How to Prevent the Next Silent Breach

Your employees didn't mean to expose sensitive data. They just wanted to move faster. So they used ChatGPT to summarize a deal. Uploaded a spreadsheet to an AI-enhanced tool. Integrated a chatbot into Salesforce. No big deal—until it is. If this sounds familiar, you're not alone. Most security...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from not freeing memory using aeadrequestfree, which could lead to the disclosure of sensitive data...

CVE-2025-29461

An issue in a-blogcms 3.1.15 allows a remote attacker to obtain sensitive information via the /bid/1/admin/entry-edit/ path...

CVE-2025-39439

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Markus Drubba wpLike2Get wplike2get allows Retrieve Embedded Sensitive Data.This issue affects wpLike2Get: from n/a through = 1.2.9...

CVE-2025-24651 WordPress WebToffee WP Backup and Migration plugin <= 1.5.3 - Sensitive Data Exposure vulnerability

Insertion of Sensitive Information into Log File vulnerability in WebToffee WordPress Backup & Migration wp-migration-duplicator allows Retrieve Embedded Sensitive Data.This issue affects WordPress Backup & Migration: from n/a through = 1.5.3...

CVE-2025-24651

CVE-2025-24651 affects the WordPress plugin “WP Backup & Migration (WebToffee)” for WordPress, specifically versions 1.5.3 and earlier. The issue is an insertion of sensitive information into log files, which can allow retrieval of embedded sensitive data. The available connected documents confir...

CVE-2025-24651 WordPress WebToffee WP Backup and Migration plugin <= 1.5.3 - Sensitive Data Exposure vulnerability

Insertion of Sensitive Information into Log File vulnerability in WebToffee WordPress Backup & Migration wp-migration-duplicator allows Retrieve Embedded Sensitive Data.This issue affects WordPress Backup & Migration: from n/a through = 1.5.3...

CVE-2025-32594 WordPress Simple WP Events plugin <= 1.8.17 - Sensitive Data Exposure vulnerability

Insertion of Sensitive Information Into Sent Data vulnerability in WPMinds Simple WP Events simple-wp-events allows Retrieve Embedded Sensitive Data.This issue affects Simple WP Events: from n/a through = 1.8.17...

CVE-2025-32594

CVE-2025-32594 – Publicly disclosed vulnerability in WordPress plugin Simple WP Events (

CVE-2025-32594 WordPress Simple WP Events plugin <= 1.8.17 - Sensitive Data Exposure vulnerability

Insertion of Sensitive Information Into Sent Data vulnerability in WPMinds Simple WP Events allows Retrieve Embedded Sensitive Data. This issue affects Simple WP Events: from n/a through 1.8.17...

CVE-2025-32635

CVE-2025-32635 affects the WordPress Hive Support plugin (versions up to 1.2.2). Affected component is the plugin’s data handling, described as Insertion of Sensitive Information Into Sent Data, enabling retrieval of embedded sensitive data. Public sources (Red Hat advisory, CVE listings, Patchst...