Information disclosure.

Exposure of sensitive information in Progress MarkLogic Server

• Progress Software Corporation MarkLogic Server
• Information disclosure

Sensitive information exposure in Progress MarkLogic Server Azure deployments

• Progress Software Corporation MarkLogic Server
• Information disclosure

SurrealDB before 3.3.0 Field Permission Bypass via PATCH copy/move/test Operations

• surrealdb
• Information disclosure

SurrealDB before 3.3.0 Field Permission Bypass via LIVE SELECT WHERE Clause

• surrealdb
• Information disclosure

SurrealDB 3.0.0 before 3.3.0 Information Disclosure via COMPUTED Fields

• surrealdb
• Information disclosure

Grav from 2.0.22 before 2.1.7 Clockwork Profiler Authentication Bypass via Proxy

• grav
• Information disclosure

Grav 2.0.22 before 2.1.7 Clockwork Debugger Token Disclosure via Twig Sandbox

• grav
• Information disclosure

Grav Login Plugin 1.2.0 before 3.9.9 Password Reset Token Disclosure via Reset Page

• getgrav grav-plugin-login
• Information disclosure

Craft CMS 4.0.0 before 4.18.7 and 5.0.0 before 5.10.14 Arbitrary File Read via Twig create() DOMDocument

• cms
• Information disclosure

Open WebUI 0.11.0 before 0.11.4 Tool Source Disclosure via Tool Export Endpoint

• open-webui
• Information disclosure

Open WebUI 0.6.27 before 0.11.4 Session Token Disclosure via OAuth-Mode Connections

• open-webui
• Information disclosure

ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Information Disclosure in TGA Decoder

• ImageMagick
• Information disclosure

Sensitive information exposure in Progress MarkLogic Server trace logs

• Progress Software Corporation MarkLogic Server
• Information disclosure

Internal error terms inspected into AshTypescript RPC error responses

• Information disclosure

>=0.1.0, <0.19.1 · fixed in 0.19.1

WordPress Booster Elite for WooCommerce plugin < 8.4.0 - Authenticated Arbitrary WordPress Option Disclosure vulnerability

• Pluggabl LLC. Booster Elite for WooCommerce
• Information disclosure

WMCMS index.php information disclosure

• WMCMS
• Information disclosure
• Broken access control

tsi-coop tsi-dpdp-cms JSON Schema Validation information disclosure

• tsi-coop tsi-dpdp-cms
• Information disclosure
• Broken access control

Unauthenticated Disclosure of Agent Frontend Configuration

• OTRS
• Information disclosure

Channel tokens and organization API key exposed in API responses

• GitroomHQ postiz-app
• Information disclosure
• CWE-213

Odoo MCP 1.0.0 through 1.3.2 Information Disclosure via execute_method Tool

• erpipe-org Odoo MCP
• Information disclosure

Predibase LoRAX through 0.12.1 API Token Exposure via Router Logs

• Predibase LoRAX
• Information disclosure

Hugging Face Text Embeddings Inference through 1.9.4 Cleartext API Key Logging

• Hugging Face Text Embeddings Inference
• Information disclosure

Neterbit NW-431F Embedded Web Server sms.json information disclosure

• Neterbit NW-431F
• Information disclosure
• Broken access control

GPT-Load through 1.4.11 Cleartext Proxy Key Logging via Access Logger

• tbphp gpt-load
• Information disclosure

Flyte 2.0.1 through 2.0.51 Cleartext Secret Exposure via Admission Webhook

• flyte
• Information disclosure

WP-Invoice <= 4.3.1 - Subscriber+ User PII Disclosure via Unprotected AJAX Handlers

• WP-Invoice
• Information disclosure

Simple Membership < 4.8.3 - Newly Registered Member Password Disclosure via URL Query String

• Simple Membership
• Information disclosure

Dokan < 5.2.0 - Vendor+ Cross-Vendor Commission Settings Disclosure via Commission REST Endpoint

• Dokan: AI Powered WooCommerce Multivendor Marketplace Solution
• Information disclosure

Envira Gallery < 1.16.2 - Author+ Non-Public Post Title and Excerpt Disclosure via Gallery REST Field

• Envira Gallery
• Information disclosure

WordPress YITH WooCommerce Product Add-Ons plugin <= 4.34.0 - Sensitive Data Exposure vulnerability

• YITH WooCommerce Product Add-Ons
• Information disclosure

WordPress Contact Form 7 – Dynamic Text Extension plugin <= 5.0.7 - Sensitive Data Exposure vulnerability

• sevenspark Contact Form 7 – Dynamic Text Extension
• Information disclosure

WordPress Web Plura Backup & Restore Manager plugin <= 0.2.25 - Sensitive Data Exposure vulnerability

• Web Plura Backup &amp; Restore Manager
• Information disclosure

WordPress Swish Migrate and Backup plugin <= 1.4.0 - Sensitive Data Exposure vulnerability

• SwishFolio Swish Migrate and Backup
• Information disclosure

WordPress WP Rollback plugin <= 3.1.2 - Sensitive Data Exposure vulnerability

• Devin Walker WP Rollback
• Information disclosure

Booking Package < 1.7.30 - Unauthenticated Booking Customer PII Disclosure

• Booking Package
• Information disclosure

Accept PayPal Payments Using Contact Form 7 < 4.0.7 - Unauthenticated PII Disclosure via CSV Export

• Accept PayPal Payments using Contact Form 7
• Information disclosure

Order Export & Order Import for WooCommerce <= 2.7.8 - Unauthenticated Sensitive File Exposure via Missing Directory Guard Re-verification in get_file_path()

• webtoffee Order Export & Order Import for WooCommerce
• Information disclosure

Booking Calendar <= 11.4.3 - Unauthenticated Sensitive Information Exposure in 'WPBC_FLEXTIMELINE_NAV' AJAX Action

• wpdevelop Booking Calendar
• Information disclosure

Download Manager <= 3.3.71 - Authenticated (Subscriber+) Sensitive Information Exposure via Email Template Token Injection in 'first_name' Profile Field Token Injection into Suspension Email

• codename065 Download Manager
• Information disclosure

Online Scheduling and Appointment Booking System <= 28.4 - Unauthenticated Sensitive Information Exposure in 'phone' Parameter to bookly_render_details

• ladela Online Scheduling and Appointment Booking System – Bookly
• Information disclosure

Vikunja: Assignee email addresses disclosed to read-only project members via the task assignees endpoint

• Information disclosure

<2.6.0 · fixed in 2.6.0

Vikunja: Cross-project task disclosure through subtask expansion

• Information disclosure
• Broken access control

<2.6.0 · fixed in 2.6.0

Contao: Protected page content is disclosed to anonymous visitors after contao.search.index_protected is disabled

• Information disclosure

>=4.0.0, <5.3.50 || >=5.4.0-RC1, <5.7.12 · fixed in 5.3.50, 5.7.12

Vikunja: Link-share token can enumerate users through the v2 API

• Information disclosure
• Broken access control

<2.6.0 · fixed in 2.6.0

Vikunja: Any user can enumerate every team and its members by attaching arbitrary teams to a throwaway project

• Information disclosure
• Broken access control

<2.6.0 · fixed in 2.6.0

Vikunja: Read-only project members can obtain any link share's access hash via the single-share read endpoint (v1 and v2) and escalate to the share's permission level

• Information disclosure
• Broken access control

<2.6.0 · fixed in 2.6.0

Vikunja: TOTP secret is readable after enrollment, no step-up auth

• Information disclosure
• Hard-coded credentials

<2.6.0 · fixed in 2.6.0

Vikunja: Plaintext storage of password-reset/email-confirm tokens in database enables account takeover on DB read access

• Information disclosure
• Weak cryptography or TLS

<2.4.0 · fixed in 2.4.0

Mindwtr: Cloud token and WebDAV password stored in plaintext on mobile

• dongdongbh Mindwtr
• Information disclosure
• Hard-coded credentials

0xJacky/nginx-ui /api/nodes Leaks Cluster Node Tokens and Allows Cross-Node Impersonation as initUser

• Information disclosure
• Broken access control

>=1.9.10-0.20250517140552-daee3ac7ade1, <1.9.10-0.20260728091109-0ecbd106c37b · fixed in 1.9.10-0.20260728091109-0ecbd106c37b

Nginx UI: Node Secret Credential Exposure via URL Query Parameter

• Information disclosure
• CWE-598

>=1.9.10-0.20250517140552-daee3ac7ade1, <1.9.10-0.20260728074433-a3999bd78a3b · fixed in 1.9.10-0.20260728074433-a3999bd78a3b

pyLoad: Unauthenticated access to /web/<path:filename> bypasses authentication on sensitive templates and leaks internal error details via exception attribute typo

• Information disclosure
• Authentication bypass

<0.5.0b3.dev101 · fixed in 0.5.0b3.dev101

Insertion of sensitive information into log file in AWS Tools for PowerShell

• aws-tools-for-powershell
• Information disclosure

WordPress QA Analytics plugin <= 5.3.0.0 - Sensitive Data Exposure vulnerability

• QuarkA QA Analytics
• Information disclosure

WordPress All Bootstrap Blocks plugin <= 1.3.31 - Sensitive Data Exposure vulnerability

• AREOI All Bootstrap Blocks
• Information disclosure

Sensitive information in error messages in Dell Secure Connect Gateway (SCG) Policy Manager

• Dell Secure Connect Gateway (SCG) Policy Manager
• Information disclosure

SendPress <= 1.26.1.20 - Unauthenticated Newsletter Sending Log Disclosure via Hardcoded Token

• SendPress Newsletters
• Information disclosure

Ops Manager Sensitive MFA Enrollment Information Exposure in User Listings

• MongoDB Ops Manager
• Information disclosure

An issue in Netcore B11 Enterprise-level full Gigabit 9-port shop wireless router v1.3.241114.024540 and before allows a remote attacker to obtain sensitive information

• Information disclosure

Azure API Center Information Disclosure Vulnerability

• Microsoft Azure API Center
• Information disclosure