CVE-2025-54008

CVE-2025-54008 is a vulnerability in Crocoblock JetSmartFilters (JetSmartFilters) versions up to and including 3.6.7, identified as a Sensitive Information Exposure issue. The description notes an insertion of sensitive information into sent data, enabling retrieval of embedded sensitive data. Th...

CVE-2025-55715 WordPress Otter - Gutenberg Block Plugin <= 3.1.0 - Sensitive Data Exposure Vulnerability

Insertion of Sensitive Information Into Sent Data vulnerability in Themeisle Otter - Gutenberg Block otter-blocks allows Retrieve Embedded Sensitive Data.This issue affects Otter - Gutenberg Block: from n/a through = 3.1.0...

PT-2025-33943 · WordPress · Templately

Name of the Vulnerable Software and Affected Versions: Templately versions through 3.2.7 Description: An information insertion issue in WPDeveloper Templately allows retrieval of embedded sensitive data. Recommendations: At the moment, there is no information about a newer version that contains a...

PT-2025-33992 · Crocoblock · Jetmenu

Name of the Vulnerable Software and Affected Versions: Crocoblock JetMenu versions n/a through 2.4.11.1 Description: A flaw exists in Crocoblock JetMenu that allows the retrieval of embedded sensitive data through the insertion of sensitive information into sent data. Recommendations: Update...

PT-2025-33967 · Crocoblock · Jetengine

Name of the Vulnerable Software and Affected Versions: Crocoblock JetEngine versions through 3.7.0 Description: A flaw exists in Crocoblock JetEngine that allows the retrieval of embedded sensitive data due to the insertion of sensitive information into sent data. Recommendations: Update Crocoblo...

PT-2025-33996 · Crocoblock · Jetwoobuilder

Name of the Vulnerable Software and Affected Versions: Crocoblock JetWooBuilder versions through 2.1.20 Description: An insertion of sensitive information into sent data issue exists in Crocoblock JetWooBuilder, allowing retrieval of embedded sensitive data. Recommendations: Update JetWooBuilder ...

PT-2025-33991 · Crocoblock · Jettabs

Name of the Vulnerable Software and Affected Versions: Crocoblock JetTabs versions through 2.2.9 Description: An insertion of sensitive information into sent data issue exists in Crocoblock JetTabs, potentially allowing the retrieval of embedded sensitive data. Recommendations: Update JetTabs to ...

CVE-2025-54685

Insertion of Sensitive Information Into Sent Data vulnerability in Brainstorm Force SureDash suredash allows Retrieve Embedded Sensitive Data.This issue affects SureDash: from n/a through = 1.1.0...

Linux Distros Unpatched Vulnerability : CVE-2024-38626

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: fuse: clear FRSENT when re-adding requests into pending list The following warning was...

Malicious code in forgot-sent (npm)

The package forgot-sent was found to contain malicious code...

MAL-2025-20780 Malicious code in forgot-sent (npm)

The package forgot-sent was found to contain malicious code...

CVE-2025-55710 WordPress TaxoPress Plugin <= 3.37.2 - Sensitive Data Exposure Vulnerability

Insertion of Sensitive Information Into Sent Data vulnerability in Steve Burge TaxoPress allows Retrieve Embedded Sensitive Data. This issue affects TaxoPress: from n/a through 3.37.2...

CVE-2025-47444

CVE-2025-47444 affects the WordPress FiboSearch plugin (ajax-search-for-woocommerce) with versions

CVE-2025-47444 WordPress FiboSearch plugin <= 1.32.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in Damian Góra FiboSearch ajax-search-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FiboSearch: from n/a through = 1.32.1...

PT-2025-32630

Name of the Vulnerable Software and Affected Versions: GiveWP versions prior to 4.6.1 Description: GiveWP contains a flaw related to the insertion of sensitive information into sent data, allowing retrieval of embedded sensitive data. Recommendations: Update GiveWP to version 4.6.1 or later...

MCP Server using Server Sent Events Detected

Binary data mcpssedetect.nbin...

CVE-2025-52463

Active! mail CVE-2025-52463 is a cross-site request forgery in versions up to 6.60.06008562. Exploitation could cause unintended emails to be sent when a logged-in user visits a crafted URL. Root cause: CSRF without adequate request validation. Mitigation: update to Active! mail 6.61.01008654 as ...

CVE-2025-48261

Insertion of Sensitive Information Into Sent Data vulnerability in MultiVendorX MultiVendorX allows Retrieve Embedded Sensitive Data. This issue affects MultiVendorX: from n/a through 4.2.22...

CVE-2025-48749

Netwrix Directory Manager formerly Imanami GroupID v11.0.0.0 and before & after v.11.1.25134.03 inserts Sensitive Information into Sent Data...

CVE-2023-22488

Flarum is a forum software for building communities. Using the notifications feature, one can read restricted/private content and bypass access checks that would be in place for such content. The notification-sending component does not check that the subject of the notification can be seen by the...