CWE-201: Insertion of Sensitive Information Into Sent Data
The code transmits data to another actor, but a portion of the data includes sensitive information that should not be accessible to that actor.
A kind of CWE-200 Information Disclosure.
From the CWE List. © The MITRE Corporation.
Newest
- atlas educational software industry ltd. co. k12netSensitive Data Exposure in Atlas Software's k12net6.8 Medium
- tanium threat responseTanium addressed an information disclosure vulnerability in Threat Response.4.9 Medium
- edimax technology ew-7438rpn-v3 mini, edimax ew-7438rpn mini firmware +1 moreEdimax Technology EW-7438RPn-v3 Mini 1.27 - Unauthorized Access: Wi-Fi Password Disclosure8.7 High
- netis systems co., ltd. e1+Netis E1+ 1.2.32533 - Unauthenticated WiFi Password Leak8.7 High
- shenzhen tenda technology co., ltd. tenda ac7, tenda ac7 firmware +1 moreTenda AC7 Exposes Admin Credentials in Configuration Responses6.8 Medium
- wpfactory advanced woocommerce product sales reportingWordPress Advanced WooCommerce Product Sales Reporting plugin <= 4.1.2 - Sensitive Data Exposure vulnerability5.3 Medium
- moodleMoodle: moodle: data exposure of user identifiers in urls4.3 Medium
- aws sagemaker python sdkCleartext transmission of sensitive materials in aws/sagemaker-python-sdk8.5 High
- vercel next.jsNext.js: Unauthenticated Disclosure of Internal Server Function endpoints6.3 Medium
- gnome libsoup, red hat enterprise linux 10, enterprise linux 6 +4 more +6 moreLibsoup: libsoup: credential leakage via http redirects5.8 Medium
- mintplexlabs anythingllm, mintplex-labs anything-llm +1 moreAnythingLLM has key leak in `systemSettings.js`8.7 High
- shenzhen tenda technology co., ltd. w30e v2, tenda w30e firmware +1 moreTenda W30E V2 HTTP Responses Expose Plaintext Credentials8.2 High
- cargus ecommerce cargusWordPress Cargus plugin <= 1.5.8 - Sensitive Data Exposure vulnerability5.3 Medium
- bplugins b accordionWordPress B Accordion plugin <= 2.0.2 - Sensitive Data Exposure vulnerability6.5 Medium
- crm perks integration for contact form 7 hubspotWordPress Integration for Contact Form 7 HubSpot plugin <= 1.4.3 - Sensitive Data Exposure vulnerability5.3 Medium
- wen solutions contact form 7 getresponse extensionWordPress Contact Form 7 GetResponse Extension plugin <= 1.0.8 - Sensitive Data Exposure vulnerability5.3 Medium
- tabbyai tabby checkoutWordPress Tabby Checkout plugin <= 5.8.4 - Sensitive Data Exposure vulnerability7.5 High
- deetronix booking ultra proWordPress Booking Ultra Pro plugin <= 1.1.23 - Sensitive Data Exposure vulnerability6.5 Medium
- johan jonk stenström cookies and content security policyWordPress Cookies and Content Security Policy plugin <= 2.34 - Sensitive Data Exposure vulnerability5.3 Medium
- hotcrpHotCRP vulnerable to exposure of submitted documents6.5 Medium
- joinmastodon mastodonLocal Mastodon users can enumerate and access severed relationships of every other local user6.5 Medium
- aitpro bulletproof securityWordPress BulletProof Security plugin <= 6.9 - Sensitive Data Exposure vulnerability7.5 High
- efacec qc 60/90/120INFORMATION DISCLOSURE VIA CURL REQUESTS (OCPP)5.3 Medium
- coollabs coolifyCoolify leaksensitive information `email_change_code` in `/api/v1/teams/{team_id | current}/members` API endpoint5.7 Medium
- brecht custom related postsWordPress Custom Related Posts plugin <= 1.8.0 - Sensitive Data Exposure vulnerability7.5 High
- wp swings wallet system for woocommerceWordPress Wallet System for WooCommerce plugin <= 2.7.3 - Sensitive Data Exposure vulnerability6.3 Medium
- awethemes awebookingWordPress AweBooking plugin <= 3.2.26 - Sensitive Data Exposure vulnerability6.5 Medium
- razvan stanga varnish/nginx proxy cachingWordPress Varnish/Nginx Proxy Caching plugin <= 1.8.3 - Sensitive Data Exposure vulnerability5.3 Medium
- efí bank gerencianet oficialWordPress Gerencianet Oficial plugin <= 3.1.3 - Sensitive Data Exposure vulnerability5.3 Medium
- vladimir statsenko terms descriptionsWordPress Terms descriptions plugin <= 3.4.10 - Sensitive Data Exposure vulnerability5.3 Medium
- inkthemescom colorwayWordPress ColorWay Theme <= 4.2.3 - Sensitive Data Exposure Vulnerability5.8 Medium
- renzo johnson contact-form-7-mailchimp-extensionWordPress Contact Form 7 Extension For Mailchimp plugin <= 0.9.68 - Sensitive Data Exposure vulnerability4.3 Medium
- wedevs wp project managerWordPress WP Project Manager plugin <= 3.0.1 - Sensitive Data Exposure vulnerability6.5 Medium
- essekia tablesomeWordPress Tablesome plugin <= 1.1.35.1 - Sensitive Data Exposure vulnerability5.0 Medium
- wp messiah ai copilotWordPress WP AI CoPilot plugin <= 1.2.7 - Sensitive Data Exposure vulnerability5.0 Medium
- connectwise screenconnectCertificate Signing Extension Returns Encrypted Values5.3 Medium
- userelements ultimate member widgets for elementorWordPress Ultimate Member Widgets for Elementor plugin <= 2.3 - Sensitive Data Exposure vulnerability7.5 High
- syed balkhi all in one seo packWordPress All In One SEO Pack plugin <= 4.8.6.1 - Sensitive Data Exposure vulnerability6.5 Medium
- wp chill passsterWordPress Passster plugin <= 4.2.19 - Sensitive Data Exposure vulnerability7.5 High
- stylemixthemes masterstudy lms proWordPress MasterStudy LMS Pro plugin < 4.7.16 - Sensitive Data Exposure vulnerability7.5 High
- digitalme eroomWordPress eRoom plugin <= 1.5.6 - Sensitive Data Exposure vulnerability5.8 Medium
- e4jvikwp vikbooking hotel booking engine & pmsWordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.8.2 - Sensitive Data Exposure vulnerability5.9 Medium
- wowpress.host fix media libraryWordPress Fix Media Library plugin <= 2.0 - Sensitive Data Exposure vulnerability5.3 Medium
- nitesh ultimate auctionWordPress Ultimate Auction plugin <= 4.3.3 - Sensitive Data Exposure vulnerability5.3 Medium
- shinetheme traveler option treeWordPress Traveler Option Tree plugin <= 2.8 - Sensitive Data Exposure vulnerability2.7 Low
- apache airflowApache Airflow: Secrets in rendered templates not redacted properly and exposed in the UI6.5 Medium
- airlift aircompressorAircompressor's Snappy and LZ4 Java-based decompressor implementation can leak information from reused output buffer6.3 Medium
- averta shortcodes and extra features for phlox themeWordPress Shortcodes and extra features for Phlox theme plugin <= 2.17.15 - Sensitive Data Exposure vulnerability5.3 Medium
- metagauss eventprimeWordPress EventPrime plugin <= 4.2.4.1 - Sensitive Data Exposure vulnerability4.3 Medium
- levelfourdevelopment wp easycartWordPress WP EasyCart plugin <= 5.8.11 - Sensitive Data Exposure vulnerability5.3 Medium
- Show moreLoading…