CWE-497
Exposure of Sensitive System Information to an Unauthorized Control Sphere
The product does not properly prevent sensitive system-level information from being accessed by unauthorized actors who do not have the same level of access to the underlying system as the product does.
311 vulnerabilities with CWE-497
CVE-2025-67954
MEDIUM
Dimitri Grassi Salon booking system <10.30.3 - Info Disclosure
CVSS 6.5
CVE-2025-63051
MEDIUM
REHub Framework <19.9.9.4 - Info Disclosure
CVSS 4.3
CVE-2025-31051
MEDIUM
EngoTheme Plant - Gardening & Houseplants <1.0.0 - Info Disclosure
CVSS 5.3
CVE-2025-34171
MEDIUM
CasaOS <=0.4.15 - Info Disclosure
CVSS 5.3
CVE-2025-9110
HIGH
QNAP OS - Info Disclosure
CVSS 7.5
CVE-2025-62083
MEDIUM
WP Messiah BoomDevs WordPress Coming Soon Plugin <1.0.4 - Info Disc...
CVSS 4.3
CVE-2025-49340
MEDIUM
Digages Direct Payments WP - Info Disclosure
CVSS 4.3
CVE-2025-62143
MEDIUM
nicashmu Post Video Players <1.163 - Info Disclosure
CVSS 4.3
CVE-2025-62114
MEDIUM
Marcelo Torres Download Media Library <0.2.1 - Info Disclosure
CVSS 5.3
CVE-2025-69026
MEDIUM
Roxnor PopupKit <2.1.5 - Info Disclosure
CVSS 4.3
CVE-2025-69025
MEDIUM
Aethonic Poptics - Info Disclosure
CVSS 4.3
CVE-2025-68988
MEDIUM
o2oe E-Invoice App Malaysia <1.1.0 - Info Disclosure
CVSS 5.3
CVE-2025-36229
LOW
IBM Aspera Faspex <5.0.14.1 - Info Disclosure
CVSS 3.1
CVE-2025-68943
MEDIUM
Gitea <1.21.8 - Info Disclosure
CVSS 5.3
CVE-2025-68606
MEDIUM
WPXPO PostX <5.0.3 - Info Disclosure
CVSS 5.3
CVE-2025-68576
MEDIUM
Virusdie <1.1.7 - Info Disclosure
CVSS 4.3
CVE-2025-68494
MEDIUM
Leap13 Premium Addons for Elementor <4.11.53 - Info Disclosure
CVSS 5.3
CVE-2025-67621
MEDIUM
8 Day Week Print Workflow <1.2.6 - Info Disclosure
CVSS 4.3
CVE-2025-68551
MEDIUM
Vikas Ratudi VPSUForm <3.2.24 - Info Disclosure
CVSS 6.5
CVE-2025-11545
CRITICAL
Sharp Display Solutions - Info Disclosure
CVE-2025-62955
MEDIUM
HappyDevs TempTool <1.3.1 - Info Disclosure
CVSS 4.3
CVE-2025-67546
MEDIUM
weDevs WP ERP <1.16.6 - Info Disclosure
CVSS 6.5
CVE-2025-64272
MEDIUM
GetResponse Email marketing <1.5.3 - Info Disclosure
CVSS 6.5
CVE-2025-64270
MEDIUM
Masteriyo LMS <2.0.3 - Info Disclosure
CVSS 6.5
CVE-2025-64258
HIGH
wpweb Follow My Blog Post <= 2.3.9 - Info Disclosure
CVSS 7.5
Details
Vulnerabilities
311