Lucene search
+L

127701 matches found

NVD
NVD
added 3 days ago6 views

CVE-2026-17580

The Advanced Views – Display Custom Fields ACF, Pods, MetaBox, Posts, CPT and Woo Products anywhere in Gutenberg, Elementor, Divi, Beaver… plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.9.1 via the registerrestroutes. This makes it...

6.5CVSS0.00314EPSS
SaveExploits0References10
EUVD
EUVD
added 3 days ago8 views

EUVD-2025-210580

The WooCommerce PayPal Payments plugin for WordPress is vulnerable to Sensitive Information Disclosure due to an Insecure Direct Object Reference in all versions up to, and including, 3.3.2 via the enqueuepaypalinsightsscriptonorderreceived function due to missing validation on a user controlled...

5.3CVSS5.5AI score0.00232EPSS
SaveExploits0References4
CVE
CVE
added 3 days ago8 views

CVE-2025-14073

The CVE-2025-14073 entry concerns the WooCommerce PayPal Payments plugin for WordPress (affected versions up to 3.3.2). It describes an Insecure Direct Object Reference flaw in the enqueue_paypal_insights_script_on_order_received() function caused by missing validation on a user-controlled key. T...

5.3CVSS5.5AI score0.00232EPSS
SaveExploits0References4
NVD
NVD
added 3 days ago6 views

CVE-2026-2916

The Jeg Kit for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.1.1 via the enqueuescripts method in class/dashboard/class-dashboard.php. The plugin injects a JkitDashboardOption JavaScript object containing full plugin...

4.3CVSS0.00217EPSS
SaveExploits0References5
CVE
CVE
added 3 days ago5 views

CVE-2026-17580

The CVE concerns the WordPress plugin Advanced Views (Display Custom Fields) versions up to and including 3.9.1. It exposes sensitive content via REST endpoints register_rest_routes (view-refresh and card-refresh), where an authenticated user with subscriber-level access or higher can access admi...

6.5CVSS5.5AI score0.00314EPSS
SaveExploits0References10
Cvelist
Cvelist
added 3 days ago35 views

CVE-2026-17580 Advanced Views <= 3.9.1 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure via 'view-refresh' and 'card-refresh' REST Endpoints

The Advanced Views – Display Custom Fields ACF, Pods, MetaBox, Posts, CPT and Woo Products anywhere in Gutenberg, Elementor, Divi, Beaver… plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.9.1 via the registerrestroutes. This makes it...

6.5CVSS0.00314EPSS
SaveExploits0References10
EUVD
EUVD
added 3 days ago10 views

EUVD-2026-51762

The Advanced Views – Display Custom Fields ACF, Pods, MetaBox, Posts, CPT and Woo Products anywhere in Gutenberg, Elementor, Divi, Beaver… plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.9.1 via the registerrestroutes. This makes it...

6.5CVSS5.5AI score0.00314EPSS
SaveExploits0References10
ATTACKERKB
ATTACKERKB
added 3 days ago8 views

CVE-2026-18059

The PixelYourSite – Your smart PIXEL TAG & API Manager plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 11.2.1 via the getWooPurchaseEventParams. This makes it possible for unauthenticated attackers to extract WooCommerce purchase metadata...

5.3CVSS5.7AI score0.00331EPSS
SaveExploits0References13
CVE
CVE
added 3 days ago12 views

CVE-2026-18059

PixelYourSite (WordPress plugin) ≤ 11.2.1 is affected by an unauthenticated Sensitive Information Exposure via the getWooPurchaseEventParams function. The issue allows any unauthenticated attacker to retrieve WooCommerce purchase metadata for any existing order by supplying an invalid or arbitrar...

5.3CVSS5.7AI score0.00331EPSS
SaveExploits0References12
ATTACKERKB
ATTACKERKB
added 3 days ago6 views

CVE-2026-2916

The Jeg Kit for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.1.1 via the enqueuescripts method in class/dashboard/class-dashboard.php. The plugin injects a JkitDashboardOption JavaScript object containing full plugin...

4.3CVSS5.4AI score0.00217EPSS
SaveExploits0References6
EUVD
EUVD
added 3 days ago10 views

EUVD-2026-51740

The Jeg Kit for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.1.1 via the enqueuescripts method in class/dashboard/class-dashboard.php. The plugin injects a JkitDashboardOption JavaScript object containing full plugin...

4.3CVSS5.4AI score0.00217EPSS
SaveExploits0References5
Cvelist
Cvelist
added 3 days ago34 views

CVE-2026-2916 Jeg Kit for Elementor <= 3.1.1 - Authenticated (Contributor+) Exposure of Sensitive Information via 'JkitDashboardOption' Inline Script

The Jeg Kit for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.1.1 via the enqueuescripts method in class/dashboard/class-dashboard.php. The plugin injects a JkitDashboardOption JavaScript object containing full plugin...

4.3CVSS0.00217EPSS
SaveExploits0References5
CVE
CVE
added 3 days ago10 views

CVE-2026-2916

The Jeg Kit for Elementor WordPress plugin (up to v3.1.1) is vulnerable to Sensitive Information Exposure via enqueue_scripts() in class-dashboard.php. The plugin injects a JkitDashboardOption inline script containing: (1) full plugin inventory (names, versions, paths, active status), (2) system ...

4.3CVSS5.4AI score0.00217EPSS
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 4 days ago12 views

CVE-2026-34490

Cleartext storage of sensitive information vulnerability in Johnson Controls XAAP Application on Android allows an attacker on a jailbroken or otherwise compromised device to Retrieve Sensitive Data. This issue affects XAAP Application: before 1.53...

4.8CVSS5.5AI score0.00101EPSS
SaveExploits0References2
Cvelist
Cvelist
added 4 days ago32 views

CVE-2026-34490 XAAP Android Data Stored in Unencrypted Database

Cleartext storage of sensitive information vulnerability in Johnson Controls XAAP Application on Android allows an attacker on a jailbroken or otherwise compromised device to Retrieve Sensitive Data. This issue affects XAAP Application: before 1.53...

4.8CVSS0.00101EPSS
SaveExploits0References1
EUVD
EUVD
added 4 days ago9 views

EUVD-2026-51576

Cleartext storage of sensitive information vulnerability in Johnson Controls XAAP Application on Android allows an attacker on a jailbroken or otherwise compromised device to Retrieve Sensitive Data. This issue affects XAAP Application: before 1.53...

4.8CVSS5.5AI score0.00101EPSS
SaveExploits0References1
CVE
CVE
added 4 days ago22 views

CVE-2026-34490

CVE-2026-34490 affects the XAAP Android application (pre-1.53). The issue is cleartext storage of sensitive data in an unencrypted local database on the device, allowing a local attacker on a jailbroken or otherwise compromised device to retrieve sensitive information. CVSS v4.0 base score 4.8 (M...

4.8CVSS5.5AI score0.00101EPSS
SaveExploits0References1
NVD
NVD
added 4 days ago10 views

CVE-2026-56569

HCL iControl was affected by Sensitive Data Exposure vulnerabilities. It involves the public exposure of internal configuration files due to improper web server or application hardening...

4CVSS0.00112EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 4 days ago7 views

CVE-2026-56569

HCL iControl was affected by Sensitive Data Exposure vulnerabilities. It involves the public exposure of internal configuration files due to improper web server or application hardening...

4CVSS5.5AI score0.00112EPSS
SaveExploits0References2
Cvelist
Cvelist
added 4 days ago35 views

CVE-2026-56569 HCL iControl is affected by multiple security vulnerabilities.

HCL iControl was affected by Sensitive Data Exposure vulnerabilities. It involves the public exposure of internal configuration files due to improper web server or application hardening...

4CVSS0.00112EPSS
SaveExploits0References1
Rows per page
Query Builder