CWE-201

Insertion of Sensitive Information Into Sent Data

Parent: CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor

The code transmits data to another actor, but a portion of the data includes sensitive information that should not be accessible to that actor.

368 vulnerabilities with CWE-201

CVE-2025-8862 HIGH

YugabyteDB Sensitive Information Exposure via Diagnostic Data Collection

CVE-2025-7204 MEDIUM

ConnectWise Professional Service Automation < 2025.9 - Authenticated Sensitive Information Exposure via User Object API

CVSS 6.5

CVE-2025-53322 MEDIUM

ZealousWeb Accept Authorize.NET Payments Using Contact Form 7 - Inf...

CVSS 5.3

CVE-2025-53309 MEDIUM

ZealousWeb Accept Stripe Payments Using Contact Form 7 - Info Discl...

CVSS 5.3

CVE-2025-49584 HIGH

XWiki <16.4.6, 16.5.0-rc-1, 16.10.2, 17.0.0-rc-1 - Info Disclosure

CVSS 7.5

CVE-2025-48261 HIGH

MultiVendorX <4.2.22 - Info Disclosure

CVSS 7.5

CVE-2025-49294 MEDIUM

CodeRevolution Crawlomatic <2.6.8.2 - Info Disclosure

CVSS 5.3

CVE-2025-5733 MEDIUM

Modern Events Calendar Lite <7.21.9 - Info Disclosure

CVSS 5.3

CVE-2025-48934 MEDIUM

Deno <2.1.13, 2.2.13 - Info Disclosure

CVSS 5.3

CVE-2025-31134 HIGH

FreshRSS < 1.26.2 - Information Disclosure via Directory Existence Check

CVSS 7.5

CVE-2025-48996 MEDIUM

HAX open-apis <10.0.2 - Info Disclosure

CVSS 5.3

CVE-2025-48331 HIGH

Vanquish WooCommerce Orders & Customers Exporter <5.0 - Info Disclo...

CVSS 7.5

CVE-2025-48381 MEDIUM

CVAT 2.4.0-2.38.0 - Authenticated Information Disclosure and Denial of Service

CVSS 4.3

CVE-2025-48045 HIGH

NetFax Server < 3.0.1.0 - Unauthenticated Administrator Credential Disclosure via /client.php

CVE-2025-48749 CRITICAL

Netwrix Directory Manager <11.1.25134.03 - Info Disclosure

CVSS 9.1

CVE-2025-39498 MEDIUM

Spotlight Spotlight <1.7.1 - Info Disclosure

CVSS 5.3

CVE-2025-47541 HIGH

WPFunnels Mail Mint <1.17.7 - Info Disclosure

CVSS 7.5

CVE-2025-48219 LOW

O2 UK <2025-05-19 - Info Disclosure

CVSS 3.5

CVE-2025-47775 MEDIUM

Bullfrog <0.8.4 - Privilege Escalation

CVSS 6.2

CVE-2025-3529 HIGH

WordPress Simple Shopping Cart <5.1.2 - Info Disclosure

CVSS 8.2

CVE-2025-32635 HIGH

Hive Support <1.2.2 - Info Disclosure

CVSS 7.5

CVE-2025-32594 HIGH

WPMinds Simple WP Events <1.8.17 - Info Disclosure

CVSS 7.5

CVE-2025-26335 MEDIUM

Dell PowerProtect Cyber Recovery <19.18.0.2 - Info Disclosure

CVSS 5.8

CVE-2025-27244 MEDIUM

AssetView <unknown> - Info Disclosure

CVSS 5.9

CVE-2025-31842 MEDIUM

Viral Loops WP Integration <3.4.0 - Info Disclosure

CVSS 5.3

Details

Vulnerabilities 368

Links