CWE-201: CWE-201

This vulnerability in Vimesoft Corporate Messaging Platform allows attackers to retrieve embedded sensitive data from sent messages. It affects organi...

The Tribal WordPress plugin versions up to 1.3.3 contains a vulnerability where sensitive information is embedded in sent data, potentially allowing a...

This vulnerability in the FoodBook WordPress plugin allows attackers to retrieve embedded sensitive data through insertion of information into sent da...

This vulnerability in the 3D FlipBook WordPress plugin allows attackers to retrieve embedded sensitive data from flipbooks. It affects all WordPress s...

This vulnerability in the Envíos Coordinadora Woocommerce WordPress plugin exposes sensitive information embedded in sent data. Attackers can retriev...

The UK Address Postcode Validation WordPress plugin exposes API keys in sent data, allowing unauthorized third parties to steal and misuse them. This ...

This vulnerability in Hesabfa Accounting WordPress plugin exposes sensitive data through log files. Attackers can retrieve embedded sensitive informat...

This vulnerability in the Accept Authorize.NET Payments Using Contact Form 7 WordPress plugin exposes sensitive payment data embedded in form submissi...

The Modern Events Calendar Lite WordPress plugin versions up to 7.21.9 expose full web server path information to unauthenticated attackers through im...

An unauthenticated information disclosure vulnerability in HAX open-apis allows remote attackers to retrieve a full list of PSU websites hosted on HAX...

This vulnerability in the Spotlight Social Media Feeds Premium WordPress plugin allows attackers to retrieve embedded sensitive data from the plugin's...

This vulnerability in the Viral Loops WP Integration WordPress plugin allows attackers to retrieve sensitive data embedded in sent information. It aff...

This vulnerability allows attackers to retrieve embedded sensitive data from the AppExperts WordPress to Mobile App plugin. It affects WordPress sites...

This vulnerability in WP Mailster WordPress plugin allows attackers to retrieve embedded sensitive data from sent emails. It affects all WP Mailster i...

The SiteGuard WP Plugin vulnerability exposes the customized login page path through wp-register.php redirection. Attackers can discover hidden login ...

This vulnerability in WP AI CoPilot WordPress plugin allows attackers to retrieve embedded sensitive data from the plugin's sent data. It affects all ...

This vulnerability allows authenticated low-privileged attackers to bypass authorization controls on REST API endpoints in Cisco Nexus Dashboard and N...

CVE-2025-15329 is an information disclosure vulnerability in Tanium Threat Response that allows unauthorized access to sensitive data. Organizations u...

This vulnerability in the Templately WordPress plugin exposes sensitive embedded data through sent information. Attackers can retrieve confidential in...

This vulnerability in the Ninja Tables WordPress plugin allows attackers to retrieve embedded sensitive data through improper handling of sent informa...

This vulnerability in Moodle exposes user identifiers in URLs during anonymous assignment submissions, compromising intended anonymity. Attackers can ...

This vulnerability in the EventPrime WordPress plugin allows attackers to retrieve embedded sensitive data through information insertion into sent dat...

This vulnerability in the WP AI CoPilot WordPress plugin allows attackers to retrieve embedded sensitive data through information leakage in sent data...

This vulnerability in GitLab allows unauthorized users to view confidential branch names when accessing project issues with related merge requests. It...

This vulnerability allows blocked GitLab users to access sensitive information by establishing GraphQL subscriptions through WebSocket connections. It...

This vulnerability in Rank Math SEO WordPress plugin exposes sensitive embedded data that could be retrieved by attackers. It affects all WordPress si...

This vulnerability in the Stackable WordPress plugin allows attackers to retrieve embedded sensitive data through information leakage in sent data. It...

This WordPress vulnerability allows users with contributor-level privileges to embed sensitive data into sent content, potentially exposing informatio...

This vulnerability in All In One SEO Pack WordPress plugin exposes sensitive embedded data through sent responses. Attackers can retrieve information ...

This vulnerability in the Getwid WordPress plugin allows attackers to retrieve embedded sensitive data through information leakage in sent responses. ...

This vulnerability in the Qubely WordPress plugin allows attackers to retrieve embedded sensitive data that should not be exposed. It affects all Word...

The Gunosy mobile app contains an information disclosure vulnerability where JSON Web Tokens (JWTs) may be leaked in outbound communications. If users...

This vulnerability in TaxoPress WordPress plugin exposes sensitive embedded data through sent information. Attackers can retrieve confidential informa...

This vulnerability allows authenticated CVAT users to enumerate all task, project, label, job, and quality report IDs and names on the instance. It ca...

This vulnerability allows unauthorized users to access form entry data in affected Liferay versions. It affects Liferay Portal 7.4.0-7.4.3.126 and mul...

IBM Sterling Connect:Direct Web Services versions 6.0-6.3 expose sensitive IP address information to authenticated users in API responses. This inform...

This vulnerability in Cisco Content Security Management Appliance (SMA) allows authenticated remote attackers to access sensitive information, includi...

The goTenna Pro ATAK Plugin's default settings broadcast user location data every 60 seconds without encryption when the plugin is active. This vulner...

HCL Connections has an information disclosure vulnerability where improper rendering of application data allows authenticated users to access sensitiv...

This vulnerability in the Traveler Option Tree WordPress plugin exposes sensitive embedded data through sent responses. Attackers can retrieve informa...

LogStare Collector contains an information disclosure vulnerability where administrative users can access other users' password hashes. This affects a...

Tenda AC7 routers expose administrative credentials in plaintext within web management responses, allowing attackers to steal router passwords. The vu...

This vulnerability allows unauthenticated attackers with knowledge of the OCPP v1.6 protocol to obtain information from electric vehicle chargers. It ...

This vulnerability in yawkat LZ4 Java library allows attackers to read previous contents of output buffers when processing crafted compressed input. A...

Sentry-Javascript SDK versions 10.11.0 to 10.27.0 inadvertently send sensitive HTTP headers like Cookie to Sentry when sendDefaultPii is enabled. This...

Parse Server versions before 8.5.0-alpha.5 allow unauthenticated clients to execute MongoDB explain() queries without requiring the master key. This e...