CWE-201
Insertion of Sensitive Information Into Sent Data
The code transmits data to another actor, but a portion of the data includes sensitive information that should not be accessible to that actor.
294 vulnerabilities with CWE-201
CVE-2025-55710
MEDIUM
Steve Burge TaxoPress <3.37.2 - Info Disclosure
CVSS 4.3
CVE-2025-54685
MEDIUM
Brainstorm Force SureDash <1.1.0 - Info Disclosure
CVSS 6.5
CVE-2025-8862
HIGH
YugabyteDB - Info Disclosure
CVE-2025-7204
MEDIUM
Connectwise Professional Service Automation - Privilege Escalation
CVSS 6.5
CVE-2025-53322
MEDIUM
ZealousWeb Accept Authorize.NET Payments Using Contact Form 7 - Inf...
CVSS 5.3
CVE-2025-53309
MEDIUM
ZealousWeb Accept Stripe Payments Using Contact Form 7 - Info Discl...
CVSS 5.3
CVE-2025-49584
HIGH
XWiki <16.4.6, 16.5.0-rc-1, 16.10.2, 17.0.0-rc-1 - Info Disclosure
CVSS 7.5
CVE-2025-48261
HIGH
MultiVendorX <4.2.22 - Info Disclosure
CVSS 7.5
CVE-2025-49294
MEDIUM
CodeRevolution Crawlomatic <2.6.8.2 - Info Disclosure
CVSS 5.3
CVE-2025-5733
MEDIUM
Modern Events Calendar Lite <7.21.9 - Info Disclosure
CVSS 5.3
CVE-2025-48934
MEDIUM
Deno <2.1.13, 2.2.13 - Info Disclosure
CVSS 5.3
CVE-2025-31134
HIGH
FreshRSS <1.26.2 - Info Disclosure
CVSS 7.5
CVE-2025-48996
MEDIUM
HAX open-apis <10.0.2 - Info Disclosure
CVSS 5.3
CVE-2025-48331
HIGH
Vanquish WooCommerce Orders & Customers Exporter <5.0 - Info Disclo...
CVSS 7.5
CVE-2025-48381
MEDIUM
CVAT <2.38.0 - Info Disclosure
CVSS 4.3
CVE-2025-48045
HIGH
Unspecified - Info Disclosure
CVE-2025-48749
CRITICAL
Netwrix Directory Manager <11.1.25134.03 - Info Disclosure
CVSS 9.1
CVE-2025-39498
MEDIUM
Spotlight Spotlight <1.7.1 - Info Disclosure
CVSS 5.3
CVE-2025-47541
HIGH
WPFunnels Mail Mint <1.17.7 - Info Disclosure
CVSS 7.5
CVE-2025-48219
LOW
O2 UK <2025-05-19 - Info Disclosure
CVSS 3.5
CVE-2025-47775
MEDIUM
Bullfrog <0.8.4 - Privilege Escalation
CVSS 6.2
CVE-2025-3529
HIGH
WordPress Simple Shopping Cart <5.1.2 - Info Disclosure
CVSS 8.2
CVE-2025-32635
HIGH
Hive Support <1.2.2 - Info Disclosure
CVSS 7.5
CVE-2025-32594
HIGH
WPMinds Simple WP Events <1.8.17 - Info Disclosure
CVSS 7.5
CVE-2025-26335
MEDIUM
Dell PowerProtect Cyber Recovery <19.18.0.2 - Info Disclosure
CVSS 5.8
Details
Vulnerabilities
294