CVE-2026-56065High· 7.5▾ TwilightInsertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in Doofinder Doofinder for WooCommerce doofinder-for-woocommerce allows Retrieve Embedded Sensitive Data.This issue affects Doofinder for WooCo…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 41.3 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake. The CVSS score shown above comes from the assigning CNA record, not NVD.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
0.2%
Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in Doofinder Doofinder for WooCommerce doofinder-for-woocommerce allows Retrieve Embedded Sensitive Data.This issue affects Doofinder for WooCommerce: from n/a through 2.17.2.
doofinder-for-woocommerce <= 2.17.2Update the WordPress Doofinder for WooCommerce plugin to the latest available version (at least 2.17.3).
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-118494High· 8.2Joomla Extension - jreviews.com - Secret configs cached in a web-accessible in JReviews 1.0.0-5.12.0, 6.0.0-6.6.9
CVE-2012-4574Medium· 5.5Pulp: red hat cloudforms: pulp in red hat cloudforms: information disclosure via world-readable configuration file
CVE-2026-115707Medium· 6.4Insertion of Sensitive Information into Externally-Accessible File or Directory in Elastic Cloud Enterprise (ECE) Leading to Privilege Escalation
CVE-2026-115711Medium· 6.4Insertion of Sensitive Information into Externally-Accessible File or Directory in Elastic Cloud Enterprise (ECE) Leading to Credential Disclosure
CVE-2026-114195Medium· 5.3WordPress ShopMagic plugin <= 4.9.1 - Sensitive Data Exposure vulnerability
CVE-2026-112027Medium· 5.3cms: light0011 cms: Information disclosure via filename manipulation in Uploadify (CVE-2026-112027)