CWE-497: Exposure of Sensitive System Information to an Unauthorized Control Sphere
The product does not properly prevent sensitive system-level information from being accessed by unauthorized actors who do not have the same level of access to the underlying system as the product does.
A kind of CWE-200 Information Disclosure.
From the CWE List. © The MITRE Corporation.
Newest
- crocoblock jetsearchWordPress JetSearch plugin <= 3.6.1.2 - Sensitive Data Exposure vulnerability5.3 Medium
- crocoblock jetblocks for elementorWordPress JetBlocks For Elementor plugin <= 1.5.0 - Sensitive Data Exposure vulnerability5.3 Medium
- crocoblock jetreviewsWordPress JetReviews plugin <= 3.0.1 - Sensitive Data Exposure vulnerability5.3 Medium
- edgarrojas woocommerce pdf invoice builderWordPress WooCommerce PDF Invoice Builder plugin <= 2.0.8 - Sensitive Data Exposure vulnerability6.5 Medium
- prog mis management systemPROG MIS｜Prog Management System - Exposure of Sensitive Information9.3 Critical
- gardyn cloud api, home firmware, studio firmware +2 moreGardyn IoT Hub Exposure of Sensitive System Information to an Unauthorized Control Sphere6.9 Medium
- nathanbarry kit (formerly convertkit) for woocommerceWordPress Kit (formerly ConvertKit) for WooCommerce plugin <= 2.1.5 - Sensitive Data Exposure vulnerability5.3 Medium
- dojin club micmnis phpuploaderphpUploader < 2.0.2 Unauthenticated Database Exposure via index model8.7 High
- villatheme bopo – woocommerce product bundle builderWordPress Bopo – WooCommerce Product Bundle Builder plugin <= 1.1.6 - Sensitive Data Exposure vulnerability4.3 Medium
- wcboost – products compareWordPress WCBoost – Products Compare plugin <= 1.1.0 - Sensitive Data Exposure vulnerability5.3 Medium
- roxnor getgenieWordPress GetGenie plugin <= 4.4.2 - Sensitive Data Exposure vulnerability6.5 Medium
- tychesoftwares print invoice & delivery notes for woocommerceWordPress Print Invoice & Delivery Notes for WooCommerce plugin <= 7.1.1 - Sensitive Data Exposure vulnerability7.5 High
- ads by wpquads by wpquadsWordPress Ads by WPQuads plugin <= 3.0.3 - Sensitive Data Exposure vulnerability7.5 High
- rockwell automation compactlogix 5370Rockwell Automation CompactLogix 5370 Controllers – Multiple Vulnerabilities6.3 Medium
- wp e-signature signature add-on for woocommerceWordPress Signature Add-On for WooCommerce plugin <= 2.0 - Sensitive Data Exposure vulnerability7.5 High
- elliot sowersby / relywp coupon affiliatesWordPress Coupon Affiliates plugin <= 7.8.1 - Sensitive Data Exposure vulnerability7.5 High
- conekta group payment gatewayWordPress Conekta Payment Gateway plugin <= 6.0.0 - Sensitive Data Exposure vulnerability7.5 High
- webtoffee woocommerce pdf invoices, packing slips, delivery notes and shipping labelsWordPress WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels plugin <= 4.9.4 - Sensitive Data Exposure vulnerability7.5 High
- bootstrapped ventures visual link previewWordPress Visual Link Preview plugin <= 2.4.1 - Sensitive Data Exposure vulnerability6.5 Medium
- wasiliy strecker contest galleryWordPress Contest Gallery plugin <= 28.1.7 - Sensitive Data Exposure vulnerability6.5 Medium
- ollybach wppizzaWordPress WPPizza plugin <= 3.19.9 - Sensitive Data Exposure vulnerability6.5 Medium
- idpay payment gateway for woocommerceWordPress IDPay Payment Gateway for Woocommerce plugin <= 2.2.5 - Sensitive Data Exposure vulnerability7.5 High
- hashthemes hash elementsWordPress Hash Elements plugin <= 1.5.4 - Sensitive Data Exposure vulnerability4.3 Medium
- amd uprof, µprof, μprof +2 moreImproper access control in AMD uProf may allow a local attacker with user privileges to write to...6.8 Medium
- sap se business objectsSecurity Misconfiguration vulnerability in SAP Business Objects3.7 Low
- tips and tricks hq wp ememberWordPress WP eMember plugin <= v10.2.2 - Sensitive Data Exposure vulnerability5.3 Medium
- sap se gatewayInformation Disclosure vulnerability in SAP Gateway4.3 Medium
- d-link dir-601D-Link DIR601 2.02NA Credential Disclosure via my_cgi.cgi8.7 High
- unknown mail mintWordPress Mail Mint plugin <= 1.19.5 - Sensitive Data Exposure vulnerability4.3 Medium
- palo alto networks trust protection foundationTrust Protection Foundation: Sensitive Information Disclosure Vulnerability4.5 Medium
- palo alto networks chronosphere chronocollector, paloaltonetworks chronosphere collector +1 moreChronosphere Chronocollector Information Disclosure Vulnerability4.9 Medium
- apple ipados, macos, tvos +4 more +6 moreThe issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.9 and...7.5 High
- seppmail ag secure email gatewayExposure of Sensitive Information to an Unauthorized Actor6.9 Medium
- givanz vvvebVvveb < 1.0.8.2 Information Disclosure via Cron Controller6.9 Medium
- wedevs happy addons for elementorWordPress Happy Addons for Elementor plugin <= 3.20.8 - Sensitive Data Exposure vulnerability5.3 Medium
- inngest, inngest inngest-js +1 moreInngest TypeScript SDK exposes environment variables via serve() handler on unhandled HTTP methods8.6 High
- wpdeveloper betterdocsWordPress BetterDocs plugin <= 4.3.10 - Sensitive Data Exposure vulnerability5.3 Medium
- nvidia nemoclawNVIDIA NeMoClaw contains a vulnerability in the sandbox environment initialization component,...8.6 High
- thexerteproject xerteonlinetoolkitsXerte Online Toolkits Missing Authentication via connector.php8.8 High
- thexerteproject xerteonlinetoolkitsXerte Online Toolkits Path Disclosure via /setup6.9 Medium
- sparx systems pty ltd. pro cloud serverSparx Pro Cloud Server reveals sensitive information to an unauthenticated user9.3 Critical
- bannersky bsk pdf managerWordPress BSK PDF Manager plugin <= 3.7.2 - Sensitive Data Exposure vulnerability5.3 Medium
- magepeople inc. bus ticket booking with seat reservationWordPress Bus Ticket Booking with Seat Reservation plugin < 5.6.5 - Sensitive Data Exposure vulnerability4.3 Medium
- themefic instantioWordPress Instantio plugin <= 3.3.30 - Sensitive Data Exposure vulnerability5.3 Medium
- designinvento directorypressWordPress DirectoryPress plugin <= 3.6.26 - Sensitive Data Exposure vulnerability4.3 Medium
- wp chill rsvp and event managementWordPress RSVP and Event Management plugin <= 2.7.16 - Sensitive Data Exposure vulnerability5.3 Medium
- posimyth nexter blocksWordPress Nexter Blocks plugin <= 4.7.0 - Sensitive Data Exposure vulnerability5.3 Medium
- softaculous pagelayerWordPress PageLayer plugin <= 2.0.8 - Sensitive Data Exposure vulnerability4.3 Medium
- openclawOpenClaw < 2026.4.2 - Information Disclosure via Gateway Connect Snapshot5.3 Medium
- openclawOpenClaw < 2026.3.31 - Information Disclosure via Control UI Bootstrap JSON6.9 Medium
- Show moreLoading…