Total
491 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2026-42379 | 2026-10-26 | N/A | 7.7 HIGH | ||
| Insertion of Sensitive Information Into Sent Data vulnerability in WPDeveloper Templately allows Retrieve Embedded Sensitive Data.This issue affects Templately: from n/a through 3.6.1. | |||||
| CVE-2026-39480 | 2026-10-25 | N/A | 7.5 HIGH | ||
| Unauthenticated Sensitive Data Exposure in Backup Migration <= 2.1.1 versions. | |||||
| CVE-2026-49064 | 2026-10-25 | N/A | 7.5 HIGH | ||
| Insertion of Sensitive Information Into Sent Data vulnerability in Stiofan GetPaid allows Retrieve Embedded Sensitive Data. This issue affects GetPaid: from n/a through 2.8.49. | |||||
| CVE-2026-52692 | 2026-10-25 | N/A | 7.5 HIGH | ||
| Unauthenticated Sensitive Data Exposure in Affiliates Manager <= 2.9.50 versions. | |||||
| CVE-2026-54848 | 2026-10-25 | N/A | 8.3 HIGH | ||
| Insertion of Sensitive Information Into Sent Data vulnerability in Saad Iqbal APIExperts Square for WooCommerce allows Retrieve Embedded Sensitive Data. This issue affects APIExperts Square for WooCommerce: from n/a through 4.7.3. | |||||
| CVE-2026-45215 | 2026-10-25 | N/A | 5.3 MEDIUM | ||
| Insertion of Sensitive Information Into Sent Data vulnerability in Saad Iqbal WP EasyPay wp-easy-pay allows Retrieve Embedded Sensitive Data.This issue affects WP EasyPay: from n/a through <= 4.3.0. | |||||
| CVE-2026-54821 | 2026-10-25 | N/A | 7.4 HIGH | ||
| Subscriber Sensitive Data Exposure in Visual Link Preview <= 2.3.1 versions. | |||||
| CVE-2026-52695 | 2026-10-25 | N/A | 7.5 HIGH | ||
| Unauthenticated Sensitive Data Exposure in ABC Crypto Checkout <= 1.8.2 versions. | |||||
| CVE-2026-49082 | 2026-10-25 | N/A | 7.4 HIGH | ||
| Subscriber Sensitive Data Exposure in Chatway Live Chat – AI Chatbot, Customer Support, FAQ & Helpdesk Customer Service & Chat Buttons <= 1.4.8 versions. | |||||
| CVE-2026-48965 | 2026-10-25 | N/A | 6.5 MEDIUM | ||
| Subscriber Sensitive Data Exposure in XCloner <= 4.8.6 versions. | |||||
| CVE-2026-40789 | 2026-10-25 | N/A | 7.5 HIGH | ||
| Unauthenticated Sensitive Data Exposure in Amelia <= 2.2 versions. | |||||
| CVE-2026-54841 | 2026-10-25 | N/A | 7.5 HIGH | ||
| Unauthenticated Sensitive Data Exposure in Vitepos <= 3.4.2 versions. | |||||
| CVE-2026-4525 | 1 Hashicorp | 1 Vault | 2026-10-25 | N/A | 7.5 HIGH |
| If a Vault auth mount is configured to pass through the "Authorization" header, and the "Authorization" header is used to authenticate to Vault, Vault forwarded the Vault token to the auth plugin backend. Fixed in 2.0.0, 1.21.5, 1.20.10, and 1.19.16. | |||||
| CVE-2026-12085 | 1 Ibm | 2 Devops Deploy, Urbancode Deploy | 2026-10-25 | N/A | 6.5 MEDIUM |
| IBM UCD - IBM UrbanCode Deploy 7.3 through 7.3.2.18 and IBM UCD - IBM DevOps Deploy 8.0 through 8.0.1.13, 8.1 through 8.1.2.6, and 8.2 through 8.2.1.0 IBM DevOps Deploy could disclose sensitive configurations and secrets to authenticated users in API responses that could be used in further attacks against the system. | |||||
| CVE-2026-13437 | 1 Devolutions | 1 Powershell Universal | 2026-10-25 | N/A | 6.5 MEDIUM |
| Insertion of sensitive information into sent data in the AI Agent job API in Devolutions PowerShell Universal 2026.2.0 allows an authenticated user with AI Agent read access to obtain reusable, potentially higher-privileged authentication tokens via App Tokens serialized in plaintext in job API responses. | |||||
| CVE-2026-57347 | 2026-10-25 | N/A | 6.5 MEDIUM | ||
| Subscriber Sensitive Data Exposure in Hotel Booking Lite <= 6.0.3 versions. | |||||
| CVE-2026-57318 | 2026-10-25 | N/A | 6.5 MEDIUM | ||
| Subscriber Sensitive Data Exposure in Site Reviews <= 8.0.11 versions. | |||||
| CVE-2026-54834 | 2026-10-25 | N/A | 7.5 HIGH | ||
| Unauthenticated Sensitive Data Exposure in Object Cache 4 everyone <= 2.3.2 versions. | |||||
| CVE-2026-13211 | 2026-10-25 | N/A | 4.3 MEDIUM | ||
| The genucenter web interface before version 8.0p11 unnecessarily exposes sensitive SNMP authentication and encryption keys in its HTTP responses to users with the “Service” or “Admin” role. | |||||
| CVE-2026-1365 | 2026-10-25 | N/A | 6.5 MEDIUM | ||
| Insertion of sensitive information into sent data vulnerability in Sayax Energy Technologies Inc. OSOS allows Authentication Bypass. This issue affects OSOS: through 09072026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. | |||||