143180 matches found
CVE-2026-96342 WordPress WPMobile.App plugin <= 11.83 - Sensitive Data Exposure vulnerability
Missing Authorization vulnerability in Amauri.IO WPMobile.App wpappninja allows Retrieve Embedded Sensitive Data.This issue affects WPMobile.App: from n/a through 11.83...
CVE-2026-96342
The Amauri.IO WPMobile.App wpappninja WordPress plugin is susceptible to a Missing Authorization vulnerability in versions up to 11.83 . This flaw allows an attacker to Retrieve Embedded Sensitive Data . No specific root cause details, exploitation links, or remediation steps are provided in the ...
EUVD-2026-89773
Missing Authorization vulnerability in Amauri.IO WPMobile.App wpappninja allows Retrieve Embedded Sensitive Data.This issue affects WPMobile.App: from n/a through 11.83...
CVE-2026-10764
Information disclosure in BVMS 4.5 up to 12.3 including allows man-in-the-middle attackers to gain unauthorized access to sensitive data...
CVE-2026-10764 Information disclosure in BVMS 4.5 up to 12.3
Information disclosure in BVMS 4.5 up to 12.3 including allows man-in-the-middle attackers to gain unauthorized access to sensitive data...
EUVD-2026-89756
Information disclosure in BVMS 4.5 up to 12.3 including allows man-in-the-middle attackers to gain unauthorized access to sensitive data...
CVE-2026-10764
The BVMS software (versions 4.5 up to 12.3 ) is susceptible to an information disclosure vulnerability. This flaw allows man-in-the-middle attackers to gain unauthorized access to sensitive data . The vulnerability is characterized by a high CVSS 3.1 base score of 8.7 , reflecting significant imp...
CVE-2026-102578
A flaw was found in Moodle. An authenticated attacker with access to the question bank web service can submit unsanitized input directly into database queries, resulting in a SQL Structured Query Language injection vulnerability. This issue could allow an attacker to view, alter, or delete...
CVE-2026-102578
A SQL injection vulnerability exists in the Moodle learning management system. An authenticated attacker who has access to the question bank web service can submit unsanitized input that is directly processed into database queries. This flaw allows the attacker to view, alter, or delete sensitive...
CVE-2026-16596
The WP Directory Kit plugin for WordPress is vulnerable to generic SQL Injection via the 'datafieldslist' parameter in all versions up to, and including, 1.5.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it...
CVE-2026-92872
Pgpool-II inserts sensitive information into log file, which may allow an authenticated attacker to obtain the cluster information...
CVE-2026-16596 WP Directory Kit <= 1.5.4 - Authenticated (Custom+) SQL Injection via 'data_fields_list' Parameter
The WP Directory Kit plugin for WordPress is vulnerable to generic SQL Injection via the 'datafieldslist' parameter in all versions up to, and including, 1.5.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it...
CVE-2026-94274
The YayReviews WordPress plugin, in versions prior to 1.4.1 , contains a vulnerability where it fails to restrict access to an API route designed to return individual customer review records. This oversight allows unauthenticated attackers to harvest sensitive data, including reviewers' email add...
CVE-2026-94274 YayReviews 1.0.4 - 1.4.0 - Unauthenticated Sensitive Data Disclosure via REST API
The YayReviews WordPress plugin before 1.4.1 does not restrict access to an API route that returns individual customer review records, including reviews still pending moderation, allowing unauthenticated attackers to harvest reviewers' email addresses and other non-public review content...
CVE-2026-94274 YayReviews 1.0.4 - 1.4.0 - Unauthenticated Sensitive Data Disclosure via REST API
The YayReviews WordPress plugin before 1.4.1 does not restrict access to an API route that returns individual customer review records, including reviews still pending moderation, allowing unauthenticated attackers to harvest reviewers' email addresses and other non-public review content...
WordPress YayReviews plugin 1.0.4-1.4.0 - Unauthenticated Sensitive Data Disclosure vulnerability
Unauthenticated Sensitive Data Disclosure vulnerability discovered by Pablo González Pérez, Francisco José Ramírez Vicente, and Iñigo Sánchez Enciso in WordPress Plugin YayReviews versions 1.0.4-1.4.0...
PT-2026-103236
Unauthenticated Sensitive Data Exposure in StifLi Backup Tools = 2.2.7 versions...
CVE-2026-97302: Insertion of Sensitive Information Into Sent Data
Unauthenticated Sensitive Data Exposure in MPG = 4.2.3 versions...