29782 matches found
CVE-2025-59575 WordPress MasterStudy LMS plugin <= 3.6.20 - Sensitive Data Exposure vulnerability
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Stylemix MasterStudy LMS masterstudy-lms-learning-management-system allows Retrieve Embedded Sensitive Data.This issue affects MasterStudy LMS: from n/a through = 3.6.20...
CVE-2025-59575
CVE-2025-59575 affects the MasterStudy LMS WordPress plugin (
CVE-2025-53232
CVE-2025-53232 is a WP Gmail SMTP plugin vulnerability (wp-gmail-smtp) affecting versions up to 1.0.7. The issue is described as an insertion of sensitive information into sent data, enabling retrieval of embedded sensitive data. The Red Hat and NVD entries corroborate this, noting WP Gmail SMTP
CVE-2025-53232 WordPress WP Gmail SMTP plugin <= 1.0.7 - Sensitive Data Exposure vulnerability
Insertion of Sensitive Information Into Sent Data vulnerability in inkthemes WP Gmail SMTP wp-gmail-smtp allows Retrieve Embedded Sensitive Data.This issue affects WP Gmail SMTP: from n/a through = 1.0.7...
CVE-2025-53232 WordPress WP Gmail SMTP plugin <= 1.0.7 - Sensitive Data Exposure vulnerability
Insertion of Sensitive Information Into Sent Data vulnerability in inkthemes WP Gmail SMTP wp-gmail-smtp allows Retrieve Embedded Sensitive Data.This issue affects WP Gmail SMTP: from n/a through = 1.0.7...
CVE-2025-53218 WordPress AppExperts plugin <= 1.4.5 - Sensitive Data Exposure vulnerability
Insertion of Sensitive Information Into Sent Data vulnerability in Saad Iqbal AppExperts appexperts allows Retrieve Embedded Sensitive Data.This issue affects AppExperts: from n/a through = 1.4.5...
CVE-2025-53218
CVE-2025-53218 describes an information disclosure in the WordPress plugin AppExperts (versions <= 1.4.5). The root cause is the insertion of sensitive information into sent data, allowing retrieval of embedded sensitive data. Affected software: AppExperts – Mobile App Builder for WordPress | ...
CVE-2025-53218 WordPress AppExperts plugin <= 1.4.5 - Sensitive Data Exposure vulnerability
Insertion of Sensitive Information Into Sent Data vulnerability in Saad Iqbal AppExperts appexperts allows Retrieve Embedded Sensitive Data.This issue affects AppExperts: from n/a through = 1.4.5...
CVE-2025-52752 WordPress IDonatePro plugin <= 2.1.9 - Sensitive Data Exposure vulnerability
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in ThemeAtelier IDonatePro idonate-pro allows Retrieve Embedded Sensitive Data.This issue affects IDonatePro: from n/a through = 2.1.9...
CVE-2025-52752 WordPress IDonatePro plugin <= 2.1.9 - Sensitive Data Exposure vulnerability
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in ThemeAtelier IDonatePro idonate-pro allows Retrieve Embedded Sensitive Data.This issue affects IDonatePro: from n/a through = 2.1.9...
CVE-2025-52752
CVE-2025-52752 affects the WordPress IDonatePro plugin up to version 2.1.9. The issue is described as an exposure of embedded sensitive data to an unauthorized control sphere, allowing retrieval of sensitive data from IDonatePro. Affected software: WordPress IDonatePro plugin (versions
CVE-2025-26392
SolarWinds Observability Self-Hosted is susceptible to SQL injection vulnerability that may display sensitive data using a low-level account. This vulnerability requires authentication from a low-privilege account...
WordPress plugin MasterStudy LMS 安全漏洞
WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. An information disclosure vulnerability exists in the WordPress plugin MasterStudy LMS, which...
WordPress plugin ShopMagic 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...
Atlassian Jira Align 安全漏洞
Atlassian Jira Align is a strategic-grade agile management platform from Atlassian Australia. A security vulnerability exists in Atlassian Jira Align that stems from an authorization issue that could lead to a low-privileged user accessing an unexpected endpoint and disclosing a small amount of...
Atlassian Jira Align 安全漏洞
Atlassian Jira Align is a strategic-grade agile management platform from Atlassian Australia. A security vulnerability exists in Atlassian Jira Align that stems from an authorization issue that could lead to the disclosure of sensitive information...
PT-2025-43249
Name of the Vulnerable Software and Affected Versions AppExperts versions through 1.4.5 Description An issue exists in the AppExperts application that allows retrieval of embedded sensitive data due to insertion of sensitive information into sent data. Recommendations Update to a version later th...
WordPress plugin WP Gmail SMTP 安全漏洞
WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. An information disclosure vulnerability exists in the WordPress plugin WP Gmail SMTP, which...
OpenBao 日志信息泄露漏洞
OpenBao is an OpenBao open source sensitive data management software. A log information disclosure vulnerability exists in OpenBao versions prior to 2.4.2, which stems from audit logs that are not properly edited for byte array response parameters, which could lead to sensitive data disclosure...
WordPress plugin AppExperts 安全漏洞
WordPress AppExperts plugin is a plugin for converting WordPress websites to iOS and Android mobile apps, with support for converting WooCommerce e-commerce platform features. WordPress AppExperts plugin suffers from an information disclosure vulnerability that originates from the insertion of...