CWE-201: Insertion of Sensitive Information Into Sent Data
The code transmits data to another actor, but a portion of the data includes sensitive information that should not be accessible to that actor.
A kind of CWE-200 Information Disclosure.
From the CWE List. © The MITRE Corporation.
Newest
- gunosy inc. "gunosy" app for android, "gunosy" app for ios +1 more"Gunosy" App contains a vulnerability where sensitive information may be included in the...5.1 Medium
- gitpod-io gitpodGitpod Classic Affected by Bitbucket OAuth Token Exposure via Redirect Fragment6.5 Medium
- saeed sattar beglou hesabfa accountingWordPress Hesabfa Accounting plugin <= 2.2.5 - Sensitive Data Exposure via Log File vulnerability5.3 Medium
- cisco nexus dashboardCisco Nexus Dashboard Unauthorized REST API Vulnerability5.0 Medium
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal JSONWS API endpoint shares sensitive information5.1 Medium
- aveva pi integratorAVEVA PI Integrator Insertion of Sensitive Information into Sent Data7.1 High
- wpdeveloper templatelyWordPress Templately Plugin <= 3.2.7 - Sensitive Data Exposure Vulnerability10.0 Critical
- crocoblock jetengineWordPress JetEngine <= 3.7.0 - Sensitive Data Exposure Vulnerability6.5 Medium
- crocoblock jetelements for elementorWordPress JetElements For Elementor <= 2.7.7 - Sensitive Data Exposure Vulnerability6.5 Medium
- crocoblock jetmenuWordPress JetMenu <= 2.4.11.1 - Sensitive Data Exposure Vulnerability6.5 Medium
- crocoblock jettabsWordPress JetTabs <= 2.2.9 - Sensitive Data Exposure Vulnerability6.5 Medium
- crocoblock jettricksWordPress JetTricks <= 1.5.4.1 - Sensitive Data Exposure Vulnerability6.5 Medium
- crocoblock jetblocks for elementorWordPress JetBlocks For Elementor <= 1.3.18 - Sensitive Data Exposure Vulnerability6.5 Medium
- crocoblock jetpopupWordPress JetPopup plugin <= 2.0.15 - Sensitive Data Exposure vulnerability6.5 Medium
- crocoblock jetwoobuilderWordPress JetWooBuilder <= 2.1.20 - Sensitive Data Exposure Vulnerability6.5 Medium
- crocoblock jetsmartfiltersWordPress JetSmartFilters <= 3.6.7 - Sensitive Data Exposure Vulnerability6.5 Medium
- themeisle otter - gutenberg blockWordPress Otter - Gutenberg Block Plugin <= 3.1.0 - Sensitive Data Exposure Vulnerability7.5 High
- steve burge taxopressWordPress TaxoPress Plugin <= 3.37.2 - Sensitive Data Exposure Vulnerability4.3 Medium
- brainstorm force suredashWordPress SureDash Plugin <= 1.1.0 - Sensitive Data Exposure Vulnerability6.5 Medium
- damian góra fibosearchWordPress FiboSearch plugin <= 1.32.1 - Broken Access Control vulnerability5.3 Medium
- yugabytedb inc yugabytedbYugabyteDB has been collecting diagnostics information from YugabyteDB servers, which may include...7.0 High
- connectwise psa, professional service automation +1 moreExposure of password hashes via API responses in ConnectWise PSA6.5 Medium
- zealousweb accept authorize.net payments using contact form 7WordPress Accept Authorize.NET Payments Using Contact Form 7 plugin <= 2.5 - Sensitive Data Exposure Vulnerability5.3 Medium
- zealopensource accept stripe payments using contact form 7WordPress Accept Stripe Payments Using Contact Form 7 plugin <= 3.0 - Sensitive Data Exposure Vulnerability5.3 Medium
- xwiki, xwiki xwiki-platform +1 moreXWiki makes title of inaccessible pages available through the class property values REST API8.7 High
- multivendorxWordPress MultiVendorX plugin <= 4.2.22 - Sensitive Data Exposure Vulnerability7.5 High
- coderevolution crawlomatic multisite scraper post generatorWordPress Crawlomatic Multisite Scraper Post Generator plugin <= 2.6.8.2 - Sensitive Data Exposure via Log Exposure vulnerability5.3 Medium
- webnus/ modern events calendar liteModern Events Calendar <= 7.21.9 - Information Exposure5.3 Medium
- freshrssFreshRSS vulnerable to directory enumeration via ext.php5.5 Medium
- denoDeno.env.toObject() ignores the variables listed in --deny-env and returns all environment variables5.5 Medium
- haxtheweb issuesUnauthenticated Disclosure of PSU HAX CMS Site Listings via haxPsuUsage API Endpoint5.3 Medium
- vanquish woocommerce orders & customers exporterWordPress WooCommerce Orders & Customers Exporter <= 5.0 - Sensitive Data Exposure Vulnerability7.5 High
- cvat computer vision annotation tool, cvat-ai cvat +1 moreCVAT has information disclosure via browsable API5.3 Medium
- mici network co. ltd. netfax serverMICI Network Co. Ltd. NetFax Server Default Administrator Credentials Disclosure8.7 High
- netwrix directory managerNetwrix Directory Manager (formerly Imanami GroupID) v11.0.0.0 and before & after v.11.1.25134.03...9.1 Critical
- spotlight - social media feeds (premium)WordPress Spotlight - Social Media Feeds (Premium) plugin <= 1.7.1 - Sensitive Data Exposure vulnerability5.3 Medium
- unknown mail mintWordPress Mail Mint plugin <= 1.17.7 - Sensitive Data Exposure Vulnerability7.5 High
- o2 uk o2O2 UK through 2025-05-17 allows subscribers to determine the Cell ID of other subscribers by...3.5 Low
- bullfrogsec bullfrogBullfrog's DNS over TCP bypasses domain filtering6.2 Medium
- mra13 simple shopping cartWordPress Simple PayPal Shopping Cart <= 5.1.2 - Unauthenticated Information Exposure via file_url Parameter8.2 High
- wpminds simple wp eventsWordPress Simple WP Events plugin <= 1.8.17 - Sensitive Data Exposure vulnerability7.5 High
- hive support supportWordPress Hive Support plugin <= 1.2.6 - Sensitive Data Exposure vulnerability7.5 High
- mattermost, mattermost server +1 moreData exfiltration via AI plugin Jira tool3.0 Low
- dell powerprotect cyber recoveryDell PowerProtect Cyber Recovery, versions prior to 19.18.0.2, contains an Insertion of Sensitive...5.8 Medium
- hammock corporation assetview, assetview cloud +1 moreAssetView and AssetView CLOUD contain an issue with acquiring sensitive information from sent...5.9 Medium
- viralloops viral loops wp integrationWordPress Viral Loops WP Integration Plugin <= 3.4.0 - Sensitive Data Exposure vulnerability5.3 Medium
- shipmondo – a complete shipping solution for woocommerceWordPress Shipmondo – A complete shipping solution for WooCommerce plugin <= 5.0.3 - Authenticated Arbitrary WordPress Option Disclosure vulnerability6.5 Medium
- saad iqbal appexpertsWordPress AppExperts plugin <= 1.4.3 - Sensitive Data Exposure Vulnerability5.3 Medium
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal and Liferay DXP Reveals Data via Forms5.1 Medium
- extremepacs extreme xdsSensetive Data Exposure in ExtremePACS' Extreme XDS7.6 High
- Show moreLoading…