Information disclosure.

Ladybird: Missing origin-clean enforcement in CSSStyleSheet allows cross-origin CSS read and mutation

• ladybird
• Information disclosure
• CWE-346

WordPress Flexible Chat plugin <= 1.1.0 - Sensitive Data Exposure vulnerability

• wpdesk Flexible Chat
• Information disclosure

WordPress HUSKY plugin <= 1.4.6 - Sensitive Data Exposure vulnerability

• RealMag777 HUSKY
• Information disclosure

Insertion of sensitive information into a log file and process argument list in the Amazon Kinesis Producer Library for Java

• AWS amazon-kinesis-producer
• Information disclosure
• CWE-214

Advanced Custom Fields: Extended <= 0.9.2.7 - Unauthenticated Sensitive Information Exposure in 'acf[<mapped_field>]' Parameter via {get_user} Template Tag Injection

• hwk-fr Advanced Custom Fields: Extended
• Information disclosure

Zuke: Resolved secret() values are written to GITHUB_STEP_SUMMARY in the clear, disclosing them to anyone who can view the workflow run

• zuke
• Information disclosure

charmbracelet/soft-serve HTTP responses disclose the existence and names of private repositories

• Information disclosure
• Broken access control

>=0.5.0, <0.12.3 · fixed in 0.12.3

SOCFortress CoPilot: Unauthenticated Exposure of ScoutSuite Reports and Uploaded GCP Service-Account Key via Static Mount

• socfortress CoPilot
• Information disclosure
• Authentication bypass

SOCFortress CoPilot: Stored comment and SOC-field XSS permits privileged account takeover

• socfortress CoPilot
• Cross-site scripting (XSS)
• Information disclosure

Parse Server 9.7.0 before 9.10.5-alpha.7 Protected Field Exposure in Save Responses

• parse-community parse-server
• Information disclosure

Plausible Analytics through 3.2.1 Site Takeover via Exposed Invitation IDs

• Plausible Analytics
• Information disclosure

Display of information in the Forocoches comments editor

• Forocoches comments editor
• Information disclosure

Cloud Controller exposes secrets in audit log

• Cloud Foundry Foundation CAPI (Cloud Foundry Controller)
• Cloud Foundry Foundation cf-deployment
• Information disclosure

BuddyForms < 2.10.3 - Unauthenticated Form Configuration Disclosure

• BuddyForms
• Information disclosure

Security by CleanTalk < 2.191 - Admin+ Sensitive Data Disclosure via FSWatcher File Viewer

• Security Plugin, Firewall & Malware Scanner with Auto Removal
• Information disclosure

Two Factor Authentication - TFA / Passwordless Login - Moderately critical - Information disclosure - SA-CONTRIB-2026-207

• Drupal Two Factor Authentication - TFA / Passwordless Login
• Information disclosure

AI (Artificial Intelligence) - Less critical - Information Disclosure - SA-CONTRIB-2026-271

• Drupal AI (Artificial Intelligence)
• Information disclosure

Content Sync (content-sync.io) - Moderately critical - Information disclosure - SA-CONTRIB-2026-291

• Drupal Content Sync (content-sync.io)
• Information disclosure

@sylphx/pdf-reader-mcp: HTTP transport accepts unauthenticated requests despite a configured MCP_API_KEY

• Information disclosure
• Authentication bypass

>=2.2.0, <3.0.1 · fixed in 3.0.1

Parse Server before 8.6.107 and 9.0.0 before 9.10.5-alpha.8 Information Disclosure via beforeSave Reverted Fields

• parse-community parse-server
• Information disclosure

Password Disclosure via Activity Logs Enabling Administrator Privilege Escalation in WS_FTP Server

• Progress Software WS_FTP Server
• Hard-coded credentials
• Information disclosure

WordPress WP Crowdfunding plugin <= 2.2.2 - Sensitive Data Exposure vulnerability

• Themeum WP Crowdfunding
• Information disclosure

Langflow OSS is affected by multiple vulnerabilities

• IBM Langflow OSS
• Information disclosure

Langflow OSS is affected by multiple vulnerabilities

• IBM Langflow OSS
• Information disclosure

WordPress Document Library Lite plugin <= 1.3.0 - Sensitive Data Exposure vulnerability

• Barn2 Plugins Document Library Lite
• Information disclosure

Insertion of Sensitive Information into Externally-Accessible File or Directory in Elastic Cloud Enterprise (ECE) Leading to Credential Disclosure

• Elastic Cloud Enterprise
• Information disclosure

Insertion of Sensitive Information into Externally-Accessible File or Directory in Elastic Cloud Enterprise (ECE) Leading to Privilege Escalation

• Elastic Cloud Enterprise
• Information disclosure

System Account Credential Disclosure in BMC ITSM

• BMC IT Service Management Suite
• Information disclosure

Insecure storage of sensitive information in Yamaha Corporation NWR100

• Yamaha Corporation NWR100
• Information disclosure

MW WP Form <= 5.1.7 - Unauthenticated Sensitive Information Exposure in 'post_id' Parameter

• websoudan MW WP Form
• Information disclosure

Everest Forms <= 3.6.2 - Unauthenticated Sensitive Information Exposure via Smart-Tag Injection in Smart-Tag Injection in Form Field Values ({post_meta key=...})

• wpeverest Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI
• Information disclosure

Keycloak-services: keycloak-services: vault secret disclosure via client registration installation configuration

• Red Hat Build of Keycloak
• Red Hat Single Sign-On 7
• Information disclosure

GeoDirectory < 2.8.197 - Unauthenticated Password-Protected Listing Content Disclosure

• GeoDirectory
• Information disclosure

WP Post Author < 4.2.0 - Unauthenticated reCAPTCHA Secret Key Disclosure

• WP Post Author
• Information disclosure

Link Library < 7.10.0 - Unauthenticated Link Contact and Submitter Information Disclosure

• Link Library
• Information disclosure

Recipe Card Blocks Lite 2.6.4 - 3.6.3 - Unauthenticated Unpublished Post Content Disclosure

• Recipe Card Blocks Lite
• Information disclosure

Information disclosure in Frangoteam

• Frangoteam
• Information disclosure

Information disclosure in canva ortto

• canva ortto
• Information disclosure

maotoumao MusicFreeDesktop Request Forwarder information disclosure

• maotoumao MusicFreeDesktop
• Information disclosure
• Broken access control

Mem0: Cross-tenant conversation leak via unescaped delimiter collision in session-scope key (_build_session_scope)

• Information disclosure
• Broken access control

<3.1.6 · fixed in 3.1.6

LangGraph CLI prints the registry push token in `langgraph deploy --verbose` output

• Information disclosure

>=0.4.15, <0.4.32 · fixed in 0.4.32

filelock: ReadWriteLock follows a symlink at the lock path into SQLite

• Path traversal
• Information disclosure

>=3.20.4, <4.0.9 · fixed in 4.0.9

GraphQL Tools: Shared legacy executor routes one subscription's results to a different caller

• Information disclosure

<1.1.36 · fixed in 1.1.36

MySqlConnector: Account password disclosed to a man-in-the-middle in zero-configuration TLS mode (clear-text password sent before certificate is verified)

• Information disclosure

<2.6.1 · fixed in 2.6.1

FearlessCMS: Unauthenticated debug scripts expose filesystem operations and XSS

• fearlessgeekmedia FearlessCMS
• Path traversal
• Cross-site scripting (XSS)

n8n before 1.123.85, 2.43.5, and 2.44.1 SeaTable Trigger API Token Exposure via Execution Data

• n8n
• Information disclosure

n8n before 1.123.85, 2.43.5, and 2.44.1 Credential Exposure via Node Execution Error Data

• n8n
• Information disclosure

PostgreSQL Anonymizer: Cached plans bypass transparent dynamic masking after a role change or a new masking rule

• DALIBO PostgreSQL Anonymizer
• Information disclosure

PostgreSQL Anonymizer: The secret salt and shift of anon are readable by any role in pg_roles or pg_db_role_setting

• DALIBO PostgreSQL Anonymizer
• Information disclosure

OAuth and OIDC tokens written unredacted to server logs by the Generic OAuth, Google and GitLab connectors

• Grafana OSS
• Grafana Enterprise
• Information disclosure

Apache Kafka: Kafka Connect configuration provider values exposed via validation REST API endpoint

• Apache Software Foundation Apache Kafka
• Information disclosure

WordPress Contact Form by Supsystic plugin <= 1.10.5 - Sensitive Data Exposure vulnerability

• Contact Form by Supsystic
• Information disclosure

HCL BigFix AEX is affected by multiple security vulnerabilities.

• HCL Software BigFix AEX
• Information disclosure
• CWE-391

HCL BigFix AEX is affected by multiple security vulnerabilities.

• HCL Software BigFix AEX
• Cross-site scripting (XSS)
• Broken access control

GeoDirectory < 2.8.195 - Contributor+ Non-Public Listing Disclosure via gd_post_content Shortcode

• GeoDirectory
• Information disclosure

Essential Addons for Elementor < 6.8.7 - Unauthenticated Private Post Meta Disclosure via load_more AJAX Handler

• Essential Addons for Elementor
• Information disclosure

Page Builder by SiteOrigin < 2.38.0 - Contributor+ Sensitive Data Disclosure via Post Loop Widget Query Arguments

• Page Builder by SiteOrigin
• Information disclosure

PayPlug for WooCommerce 2.9.0 - 3.1.0 - Unauthenticated Order Key Disclosure and Order Cancellation via payplug_create_intent

• PayPlug for WooCommerce (Official)
• Information disclosure

Royal Elementor Addons 1.3.81 - 1.7.1069 - Unauthenticated Non-Public Post Content Disclosure via wpr_get_page_content

• Royal Addons for Elementor
• Information disclosure

Payconiq for WooCommerce <= 1.0.4 - Unauthenticated Order Key Disclosure

• Payconiq
• Information disclosure