CWE-201: Insertion of Sensitive Information Into Sent Data
The code transmits data to another actor, but a portion of the data includes sensitive information that should not be accessible to that actor.
A kind of CWE-200 Information Disclosure.
From the CWE List. © The MITRE Corporation.
Newest
- wpvibes elementor addon elements WordPress Elementor Addon Elements plugin <= 1.15 - Sensitive Data Exposure vulnerability 5.3 Medium
- freedom of the press securedrop SecureDrop: Onion Service client auth credentials copied to Monitor Server 2.6 Low
- jetbrains datalore In JetBrains Datalore before 2026.4 hidden notebook code was exposed to unauthenticated users via... 5.3 Medium
- bakkbone australia floristpress WordPress FloristPress plugin <= 7.8.4 - Sensitive Data Exposure vulnerability 7.5 High
- devolutions server Insertion of sensitive information into sent data in the identity provider user synchronization... 6.5 Medium
- wpvibes anywhere elementor WordPress AnyWhere Elementor plugin <= 1.3.0 - Sensitive Data Exposure vulnerability 6.5 Medium
- elastic kibana Insertion of Sensitive Information Into Sent Data in Kibana Leading to Credential Disclosure 6.5 Medium
- silkimen cordova-plugin-advanced-http cordova-plugin-advanced-http 1.5.0 through 3.3.1 Cookie Leak via Cross-Origin Redirects 8.2 High
- suse rancher Rancher credentials disclosed to third-party hosts by the Rancher Manager meta proxy 9.1 Critical
- wpdesk flexible chat WordPress Flexible Chat plugin <= 1.1.0 - Sensitive Data Exposure vulnerability 7.5 High
- realmag777 husky WordPress HUSKY plugin <= 1.4.6 - Sensitive Data Exposure vulnerability 6.5 Medium
- plausible analytics, plausible.io plausible analytics +1 more Plausible Analytics through 3.2.1 Site Takeover via Exposed Invitation IDs 6.0 Medium
- themeum wp crowdfunding WordPress WP Crowdfunding plugin <= 2.2.2 - Sensitive Data Exposure vulnerability 7.5 High
- barn2 plugins document library lite WordPress Document Library Lite plugin <= 1.3.0 - Sensitive Data Exposure vulnerability 5.3 Medium
- canva ortto The Ortto plugin for WordPress before 1.0.25 did not filter the WooCommerce product data it... 5.3 Medium
- supsystic contact form by supsystic WordPress Contact Form by Supsystic plugin <= 1.10.5 - Sensitive Data Exposure vulnerability 7.5 High
- follow-redirects follow-redirects: Cross-realm sensitiveHeaders arrays are discarded and custom credentials can follow redirects 5.9 Medium
- david lingren media library assistant WordPress Media LIbrary Assistant plugin <= 3.42 - Sensitive Data Exposure vulnerability 6.5 Medium
- hai zheng / lite speed cache litespeed cache WordPress LiteSpeed Cache plugin <= 7.9 - Sensitive Data Exposure vulnerability 5.9 Medium
- openwrt odhcpd odhcpd DHCPv6 Short IA_NA/IA_PD Body Stack Disclosure 8.7 High
- devolutions server Insufficient protection of sensitive information in the user list endpoint in Devolutions Server ... 4.3 Medium
- gitlab Insertion of Sensitive Information Into Sent Data in GitLab 4.3 Medium
- angular Angular: XSRF Token Leakage via URL Parsing Discrepancy in Angular HTTP Client (Incomplete fix for CVE-2025-66035) 5.9 Medium
- typo3 extension "typo3 ai integration extension" Sensitive Data Exposure in extension "TYPO3 AI Integration Extension" (ns_t3ai) 7.1 High
- mattermost, mattermost server +1 more Private channel ID disclosure via user status endpoints 4.3 Medium
- mattermost, mattermost server +1 more Disclosure of AD/LDAP bind password via Test Connection 4.9 Medium
- mattermost, mattermost server +1 more Outgoing OAuth connection client secret exposure during connection validation 6.5 Medium
- clikit infinite uploads WordPress Infinite Uploads plugin <= 3.4.1 - Sensitive Data Exposure vulnerability 6.5 Medium
- wpmanageninja fluentcart WordPress FluentCart plugin <= 1.7.1 - Sensitive Data Exposure vulnerability 7.5 High
- ministry of land, infrastructure, transport and tourism vehicle inspection certificate viewer (for android), vehicle inspection certificate viewer (for ios) +1 more The smartphone application "Vehicle Inspection Certificate Viewer" contains a vulnerability in... 6.9 Medium
- curl cross-origin reuse of a Negotiate connection 9.1 Critical
- curl auto client cert connection reuse mixup 7.5 High
- curl Negotiate credentials sent to redirected origin 9.1 Critical
- curl HSTS response erases persisted entries 8.1 High
- curl HSTS cache import drops longer-lived child 8.1 High
- curl leaking host credentials to HTTP proxy 9.1 Critical
- curl stale SigV4 headers sent unintended 8.1 High
- siemens ruggedcom crossbow A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices... 5.3 Medium
- pluginus.net active products tables for woocommerce WordPress Active Products Tables for WooCommerce plugin <= 2.1.3 - Sensitive Data Exposure vulnerability 5.3 Medium
- microsoft .net 10.0 runtime, .net 11.0 runtime, .net 8.0 runtime +3 more +5 more .NET Information Disclosure Vulnerability 5.9 Medium
- No product listed DeepSeek V4 is vulnerable to Incorrect Access Control via a crafted input. 9.1 Critical
- pluggabl llc. booster elite for woocommerce WordPress Booster Elite for WooCommerce plugin < 8.4.0 - Authenticated Arbitrary WordPress Option Disclosure vulnerability 6.5 Medium
- gitroomhq postiz-app Channel tokens and organization API key exposed in API responses 5.3 Medium
- sevenspark contact form 7 – dynamic text extension WordPress Contact Form 7 – Dynamic Text Extension plugin <= 5.0.7 - Sensitive Data Exposure vulnerability 7.5 High
- web plura backup & restore manager WordPress Web Plura Backup & Restore Manager plugin <= 0.2.25 - Sensitive Data Exposure vulnerability 7.5 High
- swishfolio swish migrate and backup WordPress Swish Migrate and Backup plugin <= 1.4.0 - Sensitive Data Exposure vulnerability 5.9 Medium
- devin walker wp rollback WordPress WP Rollback plugin <= 3.1.2 - Sensitive Data Exposure vulnerability 5.9 Medium
- quarka qa analytics WordPress QA Analytics plugin <= 5.3.0.0 - Sensitive Data Exposure vulnerability 6.9 Medium
- mongodb ops manager Ops Manager Sensitive MFA Enrollment Information Exposure in User Listings 6.0 Medium
- akin software computer import-export industry and trade co. ltd. akinsoft wolvox control panel Database Credentials Disclosure in AKIN Software's AKINSOFT WOLVOX Control Panel 9.8 Critical
- Show olderLoading…