CVE-2026-40789: Insertion of Sensitive Information Into Sent Data

Unauthenticated Sensitive Data Exposure in Amelia = 2.2 versions...

CVE-2026-34891: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Unauthenticated Sensitive Data Exposure in IDPay Payment Gateway for Woocommerce = 2.2.5 versions...

CVE-2026-50884

Incorrect access control in statping-ng v0.93.0 allows attackers to escalate privileges to Administrator and access sensitive components...

CVE-2026-50884

The statping-ng application (v0.93.0) contains an incorrect access control vulnerability in its authentication process. Specifically, improper enforcement of access restrictions within the github.com/statping-ng/statping-ng/handlers package allows an attacker to bypass authorization controls. Suc...

PT-2026-49581

Name of the Vulnerable Software and Affected Versions Angular versions prior to 22.0.1 Angular versions prior to 21.2.17 Angular versions prior to 20.3.25 Description An issue in the @angular/compiler package allows bypassing DOM property sanitization when using two-way property bindings. When a...

CVE-2026-42667: Insertion of Sensitive Information Into Sent Data

Unauthenticated Sensitive Data Exposure in Bookly = 27.4 versions...

CVE-2026-39196

Datadog, Inc Vector v0.54.0 was discovered to contain a SQL injection vulnerability in the seturiquery parameter in the KeyPartitioner::partition function. This vulnerability allows attackers to access sensitive database information via crafted SQL statements...

CVE-2026-40796: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Subscriber Sensitive Data Exposure in WPPizza = 3.19.9 versions...

PT-2026-49427

Unauthenticated Sensitive Data Exposure in Amelia = 2.2 versions...

PT-2026-49451

Subscriber Sensitive Data Exposure in Contest Gallery = 28.1.7 versions...

PT-2026-49520

Unauthenticated Sensitive Data Exposure in ABC Crypto Checkout = 1.8.2 versions...

PT-2026-49438

Unauthenticated Sensitive Data Exposure in Simply Schedule Appointments 1.6.11.2 versions...

PT-2026-49458

Unauthenticated Sensitive Data Exposure in Bookly = 27.4 versions...

PT-2026-49214

WordPress Simple-Backup 2.7.11 contains multiple vulnerabilities that allow unauthenticated attackers to delete arbitrary files and download sensitive files by manipulating the delete backup file and download backup file parameters in tools.php. Attackers can exploit insufficient input validation...

CVE-2026-48965: Insertion of Sensitive Information Into Sent Data

Subscriber Sensitive Data Exposure in XCloner = 4.8.6 versions...

PT-2026-49331

Name of the Vulnerable Software and Affected Versions grocy version 4.6.0 Description SQL injection occurs at the '/stockreports/spendings' endpoint through the product-group parameter. This allows attackers to access sensitive database information by using a crafted SQL statement. SQL injection ...

CVE-2026-39480: Insertion of Sensitive Information Into Sent Data

Unauthenticated Sensitive Data Exposure in Backup Migration = 2.1.1 versions...

PT-2026-49517

Unauthenticated Sensitive Data Exposure in Affiliates Manager = 2.9.50 versions...

CVE-2026-48872: Authorization Bypass Through User-Controlled Key

Unauthenticated Sensitive Data Exposure in EmbedPress = 4.5.2 versions...

CVE-2026-49066: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Unauthenticated Sensitive Data Exposure in Conekta Payment Gateway = 6.0.0 versions...