CVE-2026-66462 | High | 7.5 | 2026-08-13 | Unauthenticated Sensitive Data Exposure in WooCommerce Appointments <= 5.3.8 versions. |
CVE-2026-66444 | Medium | 6.5 | 2026-08-13 | Subscriber Sensitive Data Exposure in Payment Forms for Paystack <= 4.0.5 versions. |
CVE-2025-15680 | | | 2026-08-10 | TBEA TLogger V2.1.0.0B0.0.0.0 exposes a UART interface on the device's circuit board without sufficient protection. A physically proximate attacker can connect… |
CVE-2026-6373 | Medium | 6.5 | 2026-08-10 | Exposure of sensitive system information to an unauthorized control sphere vulnerability in Zyxel Networks WAH7601 allows Web Application Fingerprinting.
This… |
CVE-2026-69127 | | | 2026-08-07 | Kirby is an open-source content management system. Prior to 4.9.5 and from 5.0.0 through 5.5.1, the REST API error handler can return unsanitized PHP error mes… |
CVE-2026-17595 | | | 2026-08-07 | Nexus Repository 3 did not fully sandbox JEXL expressions used in Content Selectors. An account holding the nexus:selectors:create permission could construct a… |
CVE-2026-28169 | Medium | 5.3 | 2026-08-06 | Unauthenticated Sensitive Data Exposure in YITH WooCommerce Zoom Magnifier <= 2.52.0 versions. |
CVE-2026-44945 | Critical | 9.1 | 2026-08-05 | A privilege escalation vulnerability exists in Rancher's impersonation middleware (pkg/auth/requests/impersonate.go). An authenticated Rancher user with the de… |
CVE-2026-56569 | Medium | 4.0 | 2026-07-31 | HCL iControl was affected by Sensitive Data Exposure vulnerabilities. It involves the public exposure of internal configuration files due to improper web serve… |
CVE-2026-58246 | Medium | 4.3 | 2026-07-28 | SAP NetWeaver Application Server for ABAP and ABAP Platform writes sensitive session identifier information into a diagnostic trace when the trace is activated… |
CVE-2026-66438 | Medium | 5.3 | 2026-07-27 | Unauthenticated Sensitive Data Exposure in Exclusive Addons Elementor <= 2.8.0 versions. |
CVE-2026-65564 | Medium | 5.3 | 2026-07-27 | Unauthenticated Sensitive Data Exposure in MapPress Maps for WordPress <= 2.97.6 versions. |
CVE-2026-59548 | High | 7.5 | 2026-07-27 | Unauthenticated Sensitive Data Exposure in Byteflows Travel & Hotel Booking <= 1.0.0 versions. |
CVE-2026-59528 | High | 7.5 | 2026-07-27 | Subscriber Sensitive Data Exposure in ShipTime: Discounted Shipping Rates <= 1.1.1 versions. |
CVE-2025-59178 | | | 2026-07-27 | Ericsson Packet Core Controller (PCC) versions prior to 1.39 contain an Exposure of Sensitive System Information vulnerability in Configuration Management allo… |
CVE-2026-44955 | Medium | 5.3 | 2026-07-23 | Pronetiqs IntraVUE versions 3.2.1a14 and prior have an exposure of sensitive system information to an unauthorized control sphere vulnerability which could all… |
CVE-2026-28698 | High | 8.6 | 2026-07-23 | Pronetiqs IntraVUE versions 3.2.1a14 and prior have an exposure of sensitive system information to an unauthorized control sphere vulnerability which could exp… |
CVE-2026-65535 | Medium | 4.3 | 2026-07-23 | Contributor Sensitive Data Exposure in TinyMCE Templates <= 4.8.1 versions. |
CVE-2026-65521 | Medium | 5.3 | 2026-07-23 | Unauthenticated Sensitive Data Exposure in WP Social Ninja <= 4.3.0 versions. |
CVE-2026-65505 | Medium | 5.3 | 2026-07-23 | Unauthenticated Sensitive Data Exposure in Ultimate Store Kit Elementor Addons <= 3.0.5 versions. |
CVE-2026-65498 | Medium | 5.3 | 2026-07-23 | Unauthenticated Sensitive Data Exposure in Complianz <= 7.5.0 versions. |
CVE-2026-65490 | Medium | 5.3 | 2026-07-23 | Unauthenticated Sensitive Data Exposure in Create by Mediavine <= 2.5.3 versions. |
CVE-2026-65474 | Medium | 5.3 | 2026-07-23 | Unauthenticated Sensitive Data Exposure in Ninja Tables <= 5.2.10 versions. |
CVE-2026-65458 | Medium | 4.3 | 2026-07-23 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Chouby Polylang and Chouby Polylang Pro allows Retrieve Embedded Se… |
CVE-2026-61945 | Medium | 6.5 | 2026-07-23 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in MultiVendorX WooCommerce Product Stock Alert allows Retrieve Embedd… |
CVE-2023-37507 | High | 7.5 | 2026-07-21 | HCL DevOps Plan is susceptible to an information disclosure that can allow an attacker to focus their attacks based upon the information revealed. |
CVE-2026-10588 | Medium | 4.4 | 2026-07-16 | A potential vulnerability could allow a local privileged attacker to disclose the address of protected System Management Mode memory. |
CVE-2026-50294 | Medium | 6.2 | 2026-07-14 | Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an unauthorized attacker to disclose information locally. |
CVE-2026-61977 | Medium | 5.3 | 2026-07-13 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Crocoblock JetSearch jet-search allows Retrieve Embedded Sensitive… |
CVE-2026-61976 | Medium | 5.3 | 2026-07-13 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Crocoblock JetBlocks For Elementor jet-blocks allows Retrieve Embed… |
CVE-2026-61975 | Medium | 5.3 | 2026-07-13 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Crocoblock JetReviews jet-reviews allows Retrieve Embedded Sensitiv… |
CVE-2026-57393 | Medium | 6.5 | 2026-07-13 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in EDGARROJAS WooCommerce PDF Invoice Builder woo-pdf-invoice-builder… |
CVE-2026-14808 | Critical | 9.8 | 2026-07-06 | Prog
Management System developed by PROG MIS has a Exposure of Sensitive
Information vulnerability, allowing unauthenticated remote attackers to view
a s… |
CVE-2026-55726 | Medium | 5.3 | 2026-07-03 | The Azure Blob Storage container used for Gardyn device logs is publicly listable without authentication. A malicious user would be able to access any device l… |
CVE-2026-57753 | Medium | 5.3 | 2026-07-02 | Unauthenticated Sensitive Data Exposure in Kit (formerly ConvertKit) for WooCommerce <= 2.1.5 versions. |
CVE-2026-56124 | High | 7.5 | 2026-06-29 | phpUploader before 2.0.2 contains an unauthenticated information disclosure vulnerability that allows remote attackers to access the full contents of the uploa… |
CVE-2026-57664 | Medium | 4.3 | 2026-06-26 | Unauthenticated Sensitive Data Exposure in Bopo – WooCommerce Product Bundle Builder <= 1.1.6 versions. |
CVE-2026-57633 | Medium | 5.3 | 2026-06-26 | Unauthenticated Sensitive Data Exposure in WCBoost – Products Compare <= 1.1.0 versions. |
CVE-2026-57316 | Medium | 6.5 | 2026-06-26 | Subscriber Sensitive Data Exposure in GetGenie <= 4.4.2 versions. |
CVE-2026-56060 | High | 7.5 | 2026-06-26 | Unauthenticated Sensitive Data Exposure in Print Invoice & Delivery Notes for WooCommerce <= 7.1.1 versions. |
CVE-2026-54824 | High | 7.5 | 2026-06-26 | Unauthenticated Sensitive Data Exposure in Ads by WPQuads <= 3.0.3 versions. |
CVE-2026-9307 | | | 2026-06-16 | A sensitive information disclosure security issue exists within the affected CompactLogix controllers. The controller's web server exposes CIP Connection IDs o… |
CVE-2026-52694 | High | 7.5 | 2026-06-15 | Unauthenticated Sensitive Data Exposure in Signature Add-On for WooCommerce <= 2.0 versions. |
CVE-2026-49068 | High | 7.5 | 2026-06-15 | Subscriber Sensitive Data Exposure in Coupon Affiliates <= 7.8.1 versions. |
CVE-2026-49066 | High | 7.5 | 2026-06-15 | Unauthenticated Sensitive Data Exposure in Conekta Payment Gateway <= 6.0.0 versions. |
CVE-2026-49056 | High | 7.5 | 2026-06-15 | Unauthenticated Sensitive Data Exposure in WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels <= 4.9.4 versions. |
CVE-2026-48878 | Medium | 6.5 | 2026-06-15 | Subscriber Sensitive Data Exposure in Visual Link Preview <= 2.4.1 versions. |
CVE-2026-42660 | Medium | 6.5 | 2026-06-15 | Subscriber Sensitive Data Exposure in Contest Gallery <= 28.1.7 versions. |
CVE-2026-40796 | Medium | 6.5 | 2026-06-15 | Subscriber Sensitive Data Exposure in WPPizza <= 3.19.9 versions. |
CVE-2026-34891 | High | 7.5 | 2026-06-15 | Unauthenticated Sensitive Data Exposure in IDPay Payment Gateway for Woocommerce <= 2.2.5 versions. |
CVE-2026-24618 | Medium | 4.3 | 2026-06-12 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in HashThemes Hash Elements allows Retrieve Embedded Sensitive Data.
… |
CVE-2026-0466 | Medium | 5.5 | 2026-06-09 | Improper access control in AMD uProf may allow a local attacker with user privileges to write to the kernel-shared memory section, potentially resulting in cra… |
CVE-2026-44743 | Low | 3.7 | 2026-06-09 | Under certain conditions, when an unauthorized attacker accesses a specific endpoint, SAP Business Objects application leaks sensitive information .This has a… |
CVE-2026-49077 | Medium | 5.3 | 2026-06-04 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Tips and Tricks HQ WP eMember allows Retrieve Embedded Sensitive Da… |
CVE-2026-44749 | Medium | 4.3 | 2026-05-26 | The SAP Gateway allows attackers to inject content into error messages, potentially leading to disclosure of request artefacts (e.g., regex patterns) and revea… |
CVE-2018-25358 | High | 7.5 | 2026-05-23 | D-Link DIR601 2.02NA contains a credential disclosure vulnerability that allows unauthenticated attackers to retrieve sensitive configuration data by manipulat… |
CVE-2026-27349 | Medium | 4.3 | 2026-05-21 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WPFunnels Team Mail Mint allows Retrieve Embedded Sensitive Data.
… |
CVE-2026-0240 | High | 8.7 | 2026-05-13 | An information disclosure vulnerability in Trust Protection Foundation enables an authenticated attacker to obtain sensitive information from the server's vaul… |
CVE-2026-0239 | Medium | 6.5 | 2026-05-13 | An information disclosure vulnerability in the Chronosphere Chronocollector enables an unauthenticated attacker with network access to the collector service to… |
CVE-2026-43654 | High | 7.5 | 2026-05-11 | The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, mac… |
CVE-2026-7864 | | | 2026-05-08 | SEPPmail Secure Email Gateway before version 15.0.4 exposes server environment variables through an unauthenticated endpoint in the new GINA UI, allowing remot… |
CVE-2026-41928 | Medium | 5.3 | 2026-05-07 | Vvveb before 1.0.8.2 contains an information disclosure vulnerability in the cron controller that allows unauthenticated attackers to retrieve the application'… |
CVE-2026-42047 | High | 8.6 | 2026-05-07 | Inngest is a platform for running event-driven and scheduled background functions with queueing, retries, and step orchestration. Versions 3.22.0 through 3.53… |
CVE-2026-25468 | Medium | 5.3 | 2026-05-07 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in weDevs Happy Addons for Elementor allows Retrieve Embedded Sensitiv… |
CVE-2026-42644 | Medium | 5.3 | 2026-04-29 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WPDeveloper BetterDocs betterdocs allows Retrieve Embedded Sensitiv… |
CVE-2026-24222 | High | 8.6 | 2026-04-28 | NVIDIA NeMoClaw contains a vulnerability in the sandbox environment initialization component, where a remote attacker could cause improper access control by se… |
CVE-2026-41339 | Medium | 4.3 | 2026-04-23 | OpenClaw before 2026.4.2 exposes configPath and stateDir metadata in Gateway connect success snapshots to non-admin authenticated clients. Non-admin clients ca… |
CVE-2026-41335 | Medium | 5.3 | 2026-04-23 | OpenClaw before 2026.3.31 contains an information disclosure vulnerability in the Control Interface bootstrap JSON that exposes version and assistant agent ide… |
CVE-2026-41459 | Medium | 5.3 | 2026-04-22 | Xerte Online Toolkits versions 3.15 and earlier contain an information disclosure vulnerability that allows unauthenticated attackers to retrieve the full serv… |
CVE-2026-34413 | High | 8.6 | 2026-04-22 | Xerte Online Toolkits versions 3.15 and earlier contain a missing authentication vulnerability in the elFinder connector endpoint at /editor/elfinder/php/conne… |
CVE-2025-15623 | High | 7.5 | 2026-04-17 | Exposure of Private Personal Information to an Unauthorized Actor, : Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability i… |
CVE-2026-39686 | Medium | 5.3 | 2026-04-08 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in bannersky BSK PDF Manager bsk-pdf-manager allows Retrieve Embedded… |
CVE-2026-39572 | Medium | 4.3 | 2026-04-08 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in magepeopleteam Bus Ticket Booking with Seat Reservation bus-ticket-… |
CVE-2026-39571 | Medium | 5.3 | 2026-04-08 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Themefic Instantio instantio allows Retrieve Embedded Sensitive Dat… |
CVE-2026-39566 | Medium | 4.3 | 2026-04-08 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Designinvento DirectoryPress directorypress allows Retrieve Embedde… |
CVE-2026-39536 | Medium | 5.3 | 2026-04-08 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WP Chill RSVP and Event Management rsvp allows Retrieve Embedded Se… |
CVE-2026-39516 | Medium | 5.3 | 2026-04-08 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in POSIMYTH Nexter Blocks the-plus-addons-for-block-editor allows Retr… |
CVE-2026-39469 | Medium | 4.3 | 2026-04-08 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Softaculous PageLayer pagelayer allows Retrieve Embedded Sensitive… |
CVE-2026-33617 | Medium | 5.3 | 2026-04-02 | An unauthenticated remote attacker can access a configuration file containing database credentials. This can result in a some loss of confidentiality, but ther… |
CVE-2025-36373 | Medium | 4.1 | 2026-04-01 | IBM DataPower Gateway 10.6CD 10.6.1.0 through 10.6.5.0 and IBM DataPower Gateway 10.5.0 10.5.0.0 through 10.5.0.20 and IBM DataPower Gateway 10.6.0 10.6.0.0 th… |
CVE-2026-25344 | Medium | 6.5 | 2026-03-25 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in RadiusTheme Review Schema review-schema allows Retrieve Embedded Se… |
CVE-2026-20691 | Medium | 4.3 | 2026-03-25 | An authorization issue was addressed with improved state management. This issue is fixed in Safari 26.4, iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4, visionOS 2… |
CVE-2026-32405 | Medium | 5.3 | 2026-03-13 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in xtemos WoodMart woodmart allows Retrieve Embedded Sensitive Data.Th… |
CVE-2026-32372 | Medium | 5.3 | 2026-03-13 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in RadiusTheme ShopBuilder – Elementor WooCommerce Builder Addons shop… |
CVE-2026-0231 | | | 2026-03-11 | An information disclosure vulnerability in Palo Alto Networks Cortex XDR® Broker VM allows an authenticated user to obtain and modify sensitive information by… |
CVE-2025-41763 | Medium | 6.5 | 2026-03-09 | A low‑privileged remote attacker can directly interact with the wwwdnload.cgi endpoint to download any resource available to administrators, including system b… |
CVE-2025-13616 | Medium | 6.5 | 2026-03-03 | IBM DataStage on Cloud Pak for Data 5.1.2 through 5.3.0 returns sensitive information in an HTTP response that could be used in further attacks against the sys… |
CVE-2025-47378 | High | 7.1 | 2026-03-02 | Cryptographic Issue when a shared VM reference allows HLOS to boot loader and access cert chain. |
CVE-2026-27494 | Critical | 9.9 | 2026-02-25 | n8n is an open source workflow automation platform. Prior to versions 2.10.1, 2.9.3, and 1.123.22, an authenticated user with permission to create or modify wo… |
CVE-2026-24314 | Medium | 4.3 | 2026-02-24 | Under certain conditions SAP S/4HANA (Manage Payment Media) allows an authenticated attacker to access information which would otherwise be restricted. This co… |
CVE-2026-3075 | Medium | 5.3 | 2026-02-23 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Jeff Starr Simple Ajax Chat simple-ajax-chat allows Retrieve Embedd… |
CVE-2026-25389 | Medium | 5.3 | 2026-02-19 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Metagauss EventPrime eventprime-event-calendar-management allows Re… |
CVE-2026-25325 | Medium | 5.3 | 2026-02-19 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in rtCamp rtMedia for WordPress, BuddyPress and bbPress buddypress-med… |
CVE-2025-13691 | High | 8.1 | 2026-02-17 | IBM DataStage on Cloud Pak for Data 5.1.2 through 5.3.0 returns sensitive information in an HTTP response that could be used to impersonate other users in the… |
CVE-2025-9986 | High | 8.2 | 2026-02-11 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Vadi Corporate Information Systems Ltd. Co. DIGIKENT allows Excavat… |
CVE-2025-13651 | High | 7.5 | 2026-02-11 | Exposure of Sensitive System Information to an Unauthorized Actor vulnerability in Microcom ZeusWeb allows Web Application Fingerprinting of sensitive data. Th… |
CVE-2025-66599 | | | 2026-02-09 | A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation.
Physical paths could
be displayed on web pages. This information cou… |
CVE-2025-14150 | Medium | 6.5 | 2026-02-05 | IBM webMethods Integration (on prem) - Integration Server 10.15 through IS_10.15_Core_Fix2411.1 to IS_11.1_Core_Fix8 IBM webMethods Integration could disclose… |
CVE-2025-27550 | Low | 3.5 | 2026-02-04 | IBM Jazz Reporting Service could allow an authenticated user on the host network to obtain sensitive information about other projects that reside on the server. |
CVE-2026-25023 | Medium | 5.3 | 2026-02-03 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in mdedev Run Contests, Raffles, and Giveaways with ContestsWP contest… |