Vulnerabilities > Information Exposure

DATE CVE VULNERABILITY TITLE RISK
2025-01-18 CVE-2025-0318 The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.9.1 through different error messages in the responses.
network
low complexity
CWE-200
5.3
5.3
2025-01-17 CVE-2024-12637 The Moving Users plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.05 via the export functionality.
network
low complexity
CWE-200
5.3
5.3
2025-01-09 CVE-2025-21592 An Exposure of Sensitive Information to an Unauthorized Actor vulnerability in the command-line interface (CLI) of Juniper Networks Junos OS on SRX Series devices allows a local, low-privileged user with access to the Junos CLI to view the contents of sensitive files on the file system. Through the execution of either 'show services advanced-anti-malware' or 'show services security-intelligence' command, a user with limited permissions (e.g., a low privilege login class user) can access protected files that should not be accessible to the user.
local
low complexity
CWE-200
5.5
5.5
2025-01-08 CVE-2024-12584 The 140+ Widgets | Xpro Addons For Elementor – FREE plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.6.2 via the 'duplicate' function.
network
low complexity
CWE-200
4.3
4.3
2025-01-07 CVE-2024-12532 The BWD Elementor Addons plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.3.18 in widgets/bwdeb-content-switcher.php.
network
low complexity
CWE-200
4.3
4.3
2025-01-07 CVE-2024-11282 The Passster – Password Protect Pages and Content plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.2.10 via the WordPress core search feature.
network
low complexity
CWE-200
5.3
5.3
2025-01-07 CVE-2024-11290 The Member Access plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.1.6 via the WordPress core search feature.
network
low complexity
CWE-200
5.3
5.3
2025-01-07 CVE-2024-12140 The Elementor Addons AI Addons – 70 Widgets, Premium Templates, Ultimate Elements plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.2.1 via the render function due to insufficient restrictions on which templates can be included.
network
low complexity
CWE-200
4.3
4.3
2025-01-07 CVE-2024-12159 The Optimize Your Campaigns – Google Shopping – Google Ads – Google Adwords plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 3.1 due to the print_php_information.php being publicly accessible.
network
low complexity
CWE-200
5.3
5.3
2025-01-07 CVE-2024-12538 The Duplicate Post, Page and Any Custom Post plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.5.3 via the 'dpp_duplicate_as_draft' function.
network
low complexity
CWE-200
4.3
4.3