6962 matches found
CVE-2023-23978
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in SwitchWP WP Client Reports plugin = 1.0.16 versions...
CVE-2023-47668 WordPress Restrict Content Plugin <= 3.2.7 is vulnerable to Sensitive Data Exposure
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in StellarWP Membership Plugin – Restrict Content plugin = 3.2.7 versions...
CVE-2023-47668 WordPress Restrict Content Plugin <= 3.2.7 is vulnerable to Sensitive Data Exposure
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in StellarWP Membership Plugin – Restrict Content plugin = 3.2.7 versions...
WordPress Quttera Web Malware Scanner Plugin <= 3.4.1.48 is vulnerable to Sensitive Data Exposure
Software Quttera Web Malware Scanner Type Plugin Vulnerable versions = 3.4.1.48 Fixed in 3.4.2.1 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2023-6222 Patch priority Low CVSS severity Low 6.8 Developer Claim ownership PSID 78e03f5aa173 Credits Dmitrii...
WordPress Debug Log Manager Plugin <= 2.3.0 is vulnerable to Sensitive Data Exposure
Software Debug Log Manager Type Plugin Vulnerable versions = 2.3.0 Fixed in 2.3.1 OWASP Top 10 A9: Security Logging and Monitoring Failures Classification Sensitive Data Exposure CVE CVE-2023-6136 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 1d071b872ee6 Credits Joshua...
WordPress Quttera Web Malware Scanner Plugin <= 3.4.1.48 is vulnerable to Sensitive Data Exposure
Software Quttera Web Malware Scanner Type Plugin Vulnerable versions = 3.4.1.48 Fixed in 3.4.2.1 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2023-6065 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 6c25e4bb0dc6 Credits Dmitrii...
CVE-2023-40002 WordPress Booster for WooCommerce Plugin <= 7.1.1 is vulnerable to Sensitive Data Exposure
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Pluggabl LLC Booster for WooCommerce plugin = 7.1.1 versions...
CVE-2023-23978 WordPress WP Client Reports Plugin <= 1.0.16 is vulnerable to Sensitive Data Exposure
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in SwitchWP WP Client Reports plugin = 1.0.16 versions...
CVE-2023-23978 WordPress WP Client Reports Plugin <= 1.0.16 is vulnerable to Sensitive Data Exposure
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in SwitchWP WP Client Reports plugin = 1.0.16 versions...
WordPress Plugin WP Customer Reviews Security Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...
WordPress The Events Calendar Plugin < 6.2.8.1 is vulnerable to Sensitive Data Exposure
Software The Events Calendar Type Plugin Vulnerable versions 6.2.8.1 Fixed in 6.2.8.1 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE N/A Patch priority Low CVSS severity Low 5.3 Developer Liquid Web / StellarWP PSID fb9bc5b80294 Credits Krzysztof Zając Require...
Quttera Web Malware Scanner < 3.4.2.1 - Directory Listing to Sensitive Data Exposure
Description The plugin doesn't restrict access to detailed scan logs, which allows a malicious actor to discover local paths and portions of the site's code http://yoursite/wordpress/wp-content/plugins/quttera-web-malware-scanner/runtime.log...
WordPress Userpro Plugin <= 5.1.1 is vulnerable to Sensitive Data Exposure
Software Userpro Type Plugin Vulnerable versions = 5.1.1 Fixed in 5.1.2 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2023-2446 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 60ff01fd740b Credits István Márton Required...
CVE-2023-48134
nagayamacopabowl Line 13.6.1 is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor...
Grocy Injection Vulnerability
Grocy is a web-based self-hosted grocery and home management solution from Grocy Open Source. An injection vulnerability exists in Grocy version v.4.0.3, which originated to allow an attacker to execute arbitrary code and obtain sensitive information via the QR code function of the manageapikeys...
PT-2023-7307 · Intel · Intel Optane Ssd
Name of the Vulnerable Software and Affected Versions: IntelR OptaneTM SSD affected versions not specified Description: The issue is related to the exposure of sensitive information due to a lack of protection for service data in the firmware of some IntelR OptaneTM SSD products. This could...
WordPress Client Invoicing by Sprout Invoices Plugin <= 20.5.3 is vulnerable to Sensitive Data Exposure
Software Client Invoicing by Sprout Invoices Type Plugin Vulnerable versions = 20.5.3 Fixed in 20.5.4 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE N/A Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 18a5d45d6ab3 Credits Unknown Requir...
WordPress EWWW Image Optimizer Plugin <= 7.2.0 is vulnerable to Sensitive Data Exposure
Software EWWW Image Optimizer Type Plugin Vulnerable versions = 7.2.0 Fixed in 7.2.1 OWASP Top 10 A1: Broken Access Control Classification Sensitive Data Exposure CVE CVE-2023-40600 Patch priority Medium CVSS severity Medium 5.3 Developer Exactly WWW LLC PSID e83c448240a2 Credits Mika Required...
