32667 matches found
CVE-2026-96342
Missing Authorization vulnerability in Amauri.IO WPMobile.App wpappninja allows Retrieve Embedded Sensitive Data.This issue affects WPMobile.App: from n/a through 11.83...
WordPress MPG plugin <= 4.2.3 - Sensitive Data Exposure vulnerability
Sensitive Data Exposure vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin MPG versions = 4.2.3...
WordPress Notivo plugin <= 1.4.2 - Sensitive Data Exposure vulnerability
Sensitive Data Exposure vulnerability discovered by Ashish Agarwal @Donrulezz in WordPress Plugin Notivo versions = 1.4.2...
CVE-2026-96342 WordPress WPMobile.App plugin <= 11.83 - Sensitive Data Exposure vulnerability
Missing Authorization vulnerability in Amauri.IO WPMobile.App wpappninja allows Retrieve Embedded Sensitive Data.This issue affects WPMobile.App: from n/a through 11.83...
CVE-2026-96342
The Amauri.IO WPMobile.App wpappninja WordPress plugin is susceptible to a Missing Authorization vulnerability in versions up to 11.83 . This flaw allows an attacker to Retrieve Embedded Sensitive Data . No specific root cause details, exploitation links, or remediation steps are provided in the ...
EUVD-2026-89773
Missing Authorization vulnerability in Amauri.IO WPMobile.App wpappninja allows Retrieve Embedded Sensitive Data.This issue affects WPMobile.App: from n/a through 11.83...
CVE-2026-10764
Information disclosure in BVMS 4.5 up to 12.3 including allows man-in-the-middle attackers to gain unauthorized access to sensitive data...
CVE-2026-10764 Information disclosure in BVMS 4.5 up to 12.3
Information disclosure in BVMS 4.5 up to 12.3 including allows man-in-the-middle attackers to gain unauthorized access to sensitive data...
CVE-2026-10764
The BVMS software (versions 4.5 up to 12.3 ) is susceptible to an information disclosure vulnerability. This flaw allows man-in-the-middle attackers to gain unauthorized access to sensitive data . The vulnerability is characterized by a high CVSS 3.1 base score of 8.7 , reflecting significant imp...
EUVD-2026-89756
Information disclosure in BVMS 4.5 up to 12.3 including allows man-in-the-middle attackers to gain unauthorized access to sensitive data...
CVE-2026-102578
A flaw was found in Moodle. An authenticated attacker with access to the question bank web service can submit unsanitized input directly into database queries, resulting in a SQL Structured Query Language injection vulnerability. This issue could allow an attacker to view, alter, or delete...
CVE-2026-102578
A SQL injection vulnerability exists in the Moodle learning management system. An authenticated attacker who has access to the question bank web service can submit unsanitized input that is directly processed into database queries. This flaw allows the attacker to view, alter, or delete sensitive...
CVE-2026-94274 YayReviews 1.0.4 - 1.4.0 - Unauthenticated Sensitive Data Disclosure via REST API
The YayReviews WordPress plugin before 1.4.1 does not restrict access to an API route that returns individual customer review records, including reviews still pending moderation, allowing unauthenticated attackers to harvest reviewers' email addresses and other non-public review content...
CVE-2026-94274
The YayReviews WordPress plugin, in versions prior to 1.4.1 , contains a vulnerability where it fails to restrict access to an API route designed to return individual customer review records. This oversight allows unauthenticated attackers to harvest sensitive data, including reviewers' email add...
CVE-2026-94274 YayReviews 1.0.4 - 1.4.0 - Unauthenticated Sensitive Data Disclosure via REST API
The YayReviews WordPress plugin before 1.4.1 does not restrict access to an API route that returns individual customer review records, including reviews still pending moderation, allowing unauthenticated attackers to harvest reviewers' email addresses and other non-public review content...
WordPress YayReviews plugin 1.0.4-1.4.0 - Unauthenticated Sensitive Data Disclosure vulnerability
Unauthenticated Sensitive Data Disclosure vulnerability discovered by Pablo González Pérez, Francisco José Ramírez Vicente, and Iñigo Sánchez Enciso in WordPress Plugin YayReviews versions 1.0.4-1.4.0...
CVE-2026-97302: Insertion of Sensitive Information Into Sent Data
Unauthenticated Sensitive Data Exposure in MPG = 4.2.3 versions...
CVE-2026-97261: Insertion of Sensitive Information Into Sent Data
Unauthenticated Sensitive Data Exposure in Notivo = 1.4.2 versions...