CWE-201

CVEs per yearBy the year they were published

1. 20131
2. 20185
3. 20192
4. 202010
5. 20218
6. 20228
7. 202317
8. 202442
9. 2025139
10. 2026264

Newest CVEs

• CVE-2026-120716

  Insertion of sensitive information into sent data in the identity provider user synchronization in Devolutions Server 2026.3.13.0 and earlier allows an…

  Devolutions · Server

  Not scored
• CVE-2026-114183

  WordPress AnyWhere Elementor plugin <= 1.3.0 - Sensitive Data Exposure vulnerability

  WPVibes · AnyWhere Elementor

  Medium6.5
• CVE-2026-115293

  Insertion of Sensitive Information Into Sent Data in Kibana Leading to Credential Disclosure

  Elastic · Kibana

  Medium6.5
• CVE-2026-121554

  cordova-plugin-advanced-http 1.5.0 through 3.3.1 Cookie Leak via Cross-Origin Redirects

  silkimen · cordova-plugin-advanced-http

  High8.2
• CVE-2026-88811

  Rancher credentials disclosed to third-party hosts by the Rancher Manager meta proxy

  SUSE · Rancher

  Critical9.1
• CVE-2026-116861

  WordPress Flexible Chat plugin <= 1.1.0 - Sensitive Data Exposure vulnerability

  wpdesk · Flexible Chat

  High7.5
• CVE-2026-115947

  WordPress HUSKY plugin <= 1.4.6 - Sensitive Data Exposure vulnerability

  RealMag777 · HUSKY

  Medium6.5
• CVE-2026-119564

  Plausible Analytics through 3.2.1 Site Takeover via Exposed Invitation IDs

  Plausible · Plausible Analytics

  Medium6.0
• CVE-2026-107268

  Two Factor Authentication - TFA / Passwordless Login - Moderately critical - Information disclosure - SA-CONTRIB-2026-207

  Drupal · Two Factor Authentication - TFA / Passwordless Login

  Medium4.3
• CVE-2026-45049

  OpenAM Session Hijacking via CDSSO

  OpenIdentityPlatform · OpenAM

  High8.3

Vendors it comes up for most

1. GitLab16
2. Cisco11
3. curl10
4. Crocoblock9
5. Red Hat8
6. Liferay7
7. Drupal6
8. Apache Software Foundation5
9. Devolutions5
10. JetBrains5