143610 matches found
CVE-2026-48965: Insertion of Sensitive Information Into Sent Data
Subscriber Sensitive Data Exposure in XCloner = 4.8.6 versions...
CVE-2026-49056: Exposure of Sensitive System Information to an Unauthorized Control Sphere
Unauthenticated Sensitive Data Exposure in WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels = 4.9.4 versions...
CVE-2026-38812
RuoYi v4.8.2 is vulnerable to SQL Injection within the code generation module , specifically via the /tool/gen/createTable endpoint. This vulnerability allows an authenticated attacker with administrative privileges to potentially access sensitive database information . No information regarding a...
PT-2026-49325
Name of the Vulnerable Software and Affected Versions statping-ng version 0.93.0 Description Incorrect access control allows attackers to escalate privileges to Administrator and access sensitive components. Recommendations At the moment, there is no information about a newer version that contain...
CVE-2026-48872: Authorization Bypass Through User-Controlled Key
Unauthenticated Sensitive Data Exposure in EmbedPress = 4.5.2 versions...
PT-2026-49229
Insertion of Sensitive Information Into Sent Data vulnerability in Stiofan GetPaid allows Retrieve Embedded Sensitive Data. This issue affects GetPaid: from n/a through 2.8.49...
CVE-2026-40789: Insertion of Sensitive Information Into Sent Data
Unauthenticated Sensitive Data Exposure in Amelia = 2.2 versions...
CVE-2026-48878: Exposure of Sensitive System Information to an Unauthorized Control Sphere
Subscriber Sensitive Data Exposure in Visual Link Preview = 2.4.1 versions...
CVE-2026-40790: Authentication Bypass Using an Alternate Path or Channel
Subscriber Sensitive Data Exposure in WP SMS = 7.2.1 versions...
CVE-2026-39196
Datadog, Inc Vector v0.54.0 was discovered to contain a SQL injection vulnerability in the seturiquery parameter in the KeyPartitioner::partition function. This vulnerability allows attackers to access sensitive database information via crafted SQL statements...
CVE-2026-52694: Exposure of Sensitive System Information to an Unauthorized Control Sphere
Unauthenticated Sensitive Data Exposure in Signature Add-On for WooCommerce = 2.0 versions...
CVE-2026-49068: Exposure of Sensitive System Information to an Unauthorized Control Sphere
Subscriber Sensitive Data Exposure in Coupon Affiliates = 7.8.1 versions...
PT-2026-49216
WordPress IMDb Profile Widget 1.0.8 contains a local file inclusion vulnerability that allows unauthenticated attackers to read arbitrary files by manipulating the url parameter. Attackers can supply directory traversal sequences in GET requests to pic.php to access sensitive files like...
PT-2026-49458
Unauthenticated Sensitive Data Exposure in Bookly = 27.4 versions...
PT-2026-49519
Unauthenticated Sensitive Data Exposure in Signature Add-On for WooCommerce = 2.0 versions...
Shell command Disclosure
The vulnerability of the Shell command shell in Windows operating systems is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow a remote attacker to disclose protected information...
Shell command Disclosure
The vulnerability of the Shell command shell in Windows operating systems is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow an attacker to disclose protected information...
CVE-2026-52695: Insertion of Sensitive Information Into Sent Data
Unauthenticated Sensitive Data Exposure in ABC Crypto Checkout = 1.8.2 versions...
CVE-2026-34891: Exposure of Sensitive System Information to an Unauthorized Control Sphere
Unauthenticated Sensitive Data Exposure in IDPay Payment Gateway for Woocommerce = 2.2.5 versions...