CWE-201
Insertion of Sensitive Information Into Sent Data
The code transmits data to another actor, but a portion of the data includes sensitive information that should not be accessible to that actor.
368 vulnerabilities with CWE-201
CVE-2025-27001
MEDIUM
Shipmondo <= 5.0.3 - Authenticated Sensitive Data Exposure via WordPress Option Disclosure
CVSS 6.5
CVE-2025-30609
MEDIUM
AppExperts - WordPress to Mobile App - WooCommerce to iOs and Android Apps <= 1.4.3 - Sensitive Data Exposure
CVSS 5.3
CVE-2025-2565
MEDIUM
Liferay Portal/DXP - Info Disclosure
CVSS 4.3
CVE-2025-26318
MEDIUM
TSplus Remote Access <17.30 - Info Disclosure
CVSS 5.8
CVE-2025-24567
MEDIUM
WP Mailster <1.8.16.0 - Info Disclosure
CVSS 6.5
CVE-2025-24639
MEDIUM
GREYS Korea for WooCommerce <1.1.11 - Info Disclosure
CVSS 6.5
CVE-2025-24597
MEDIUM
UkrSolution Barcode Generator for WooCommerce <2.0.2 - Info Disclosure
CVSS 6.5
CVE-2025-24858
HIGH
Develocity <2024.3.1 - Info Disclosure
CVE-2025-24582
MEDIUM
Code for Recovery <3.16.5 - Info Disclosure
CVSS 5.3
CVE-2025-23781
HIGH
WM Options Import Export <1.0.1 - Info Disclosure
CVSS 7.5
CVE-2025-23774
HIGH
NotFound WPDB to Sql <1.2 - Info Disclosure
CVSS 7.5
CVE-2025-22303
MEDIUM
WP Mailster <1.8.17.0 - Info Disclosure
CVSS 5.3
CVE-2024-35690
MEDIUM
WordPress Widget Options plugin <= 4.0.1 - Subscriber+ User Meta Data Exposure Vulnerability
CVSS 6.5
CVE-2024-47569
MEDIUM
Fortinet FortiMail <7.4.3 - Info Disclosure
CVSS 4.3
CVE-2024-7872
HIGH
ExtremePACS Extreme XDS <3933 - Info Disclosure
CVSS 7.6
CVE-2024-45653
MEDIUM
IBM Sterling Connect:Direct Web Services <6.4 - Info Disclosure
CVSS 4.3
CVE-2024-50633
NONE
Indico < 3.3.5 - Information Disclosure via /api/principals
CVE-2024-46665
LOW
FortiOS 7.4.0-7.4.4 and 7.6.0 - Sensitive Information Exposure via RADIUS Accounting Request Interception
CVSS 3.7
CVE-2024-13276
HIGH
Drupal File Entity <7.X-2.39 - Info Disclosure
CVSS 7.5
CVE-2024-13269
MEDIUM
Drupal Advanced Varnish <4.0.11 - Info Disclosure
CVSS 5.3
CVE-2024-13259
HIGH
Drupal Image Sizes <3.0.2 - Info Disclosure
CVSS 7.5
CVE-2024-13254
HIGH
Drupal REST Views <3.0.1 - Info Disclosure
CVSS 7.5
CVE-2024-56300
HIGH
WPSpins Post/Page Copying Tool <2.0.0 - Info Disclosure
CVSS 7.5
CVE-2024-8429
MEDIUM
WiFiBurada < 1.0.5 - Use of Known Domain Credentials via Excessive Authentication Attempts
CVSS 4.3
CVE-2024-54309
MEDIUM
wpdebuglog PostBox <1.0.4 - Info Disclosure
CVSS 6.5
Details
Vulnerabilities
368