Search Vulnerabilities

OpenClaw < 2026.4.2 - Information Disclosure via Gateway Connect Snapshot

OpenClaw < 2026.3.31 - Information Disclosure via Control UI Bootstrap JSON

Xerte Online Toolkits Missing Authentication via connector.php

Xerte Online Toolkits Path Disclosure via /setup

Sparx Pro Cloud Server reveals sensitive information to an unauthenticated user

WordPress BSK PDF Manager plugin <= 3.7.2 - Sensitive Data Exposure vulnerability

WordPress Bus Ticket Booking with Seat Reservation plugin < 5.6.5 - Sensitive Data Exposure vulnerability

WordPress Instantio plugin <= 3.3.30 - Sensitive Data Exposure vulnerability

WordPress DirectoryPress plugin <= 3.6.26 - Sensitive Data Exposure vulnerability

WordPress RSVP and Event Management plugin <= 2.7.16 - Sensitive Data Exposure vulnerability

WordPress Nexter Blocks plugin <= 4.7.0 - Sensitive Data Exposure vulnerability

WordPress PageLayer plugin <= 2.0.8 - Sensitive Data Exposure vulnerability

MB connect line mbCONNECT24 vulnerable to an unauthenticated information disclosure in the data24 Endpoint

Incorrect administrative access control in IBM DataPower Gateway

WordPress Review Schema plugin <= 2.2.6 - Sensitive Data Exposure vulnerability

WordPress WoodMart theme <= 8.3.9 - Sensitive Data Exposure vulnerability

WordPress ShopBuilder – Elementor WooCommerce Builder Addons plugin <= 3.2.4 - Sensitive Data Exposure vulnerability

Cortex XDR Broker VM: Sensitive Information Disclosure Vulnerability

Unchecked role in wwwdnload.cgi

DataStage on Cloud Pak for Data is vulnerable to sensitive information leak due to HTTP response