PULSEUnderground Intel

EN VIVO30señales / 24h

FEED

ransombooba project reclama a Aesthetic Specialty Centre · PK · Healthcareransombooba project reclama a City of Big Spring · US · Government & Defenseransombooba project reclama a KING FAMILY MEDICAL · US · Healthcareransombooba project reclama a Charter Township of Commerce · US · Government & Defenseransombooba project reclama a Regent Christian Online Academy · CA · Educationransomaurora reclama a GreenbergFarrow · Professional Servicesransomwallstreet reclama a Bristol City Council · GB · Government & Defenseransomqilin reclama a NuVista Federal Credit Union · US · Financial Servicesransomqilin reclama a Hawaii Law Enforcement Fedral Credit Union · US · Financial Servicesransomn0n reclama a Company #111 · AEransomeverest reclama a OR Technology · Technologyransomeverest reclama a Burris & MacOmber · Professional Servicesransomeverest reclama a Energy Storage Terminal in Singapore · SG · Energy & Utilitiesransomeverest reclama a Point Robotics · Technologyransombooba project reclama a Aesthetic Specialty Centre · PK · Healthcareransombooba project reclama a City of Big Spring · US · Government & Defenseransombooba project reclama a KING FAMILY MEDICAL · US · Healthcareransombooba project reclama a Charter Township of Commerce · US · Government & Defenseransombooba project reclama a Regent Christian Online Academy · CA · Educationransomaurora reclama a GreenbergFarrow · Professional Servicesransomwallstreet reclama a Bristol City Council · GB · Government & Defenseransomqilin reclama a NuVista Federal Credit Union · US · Financial Servicesransomqilin reclama a Hawaii Law Enforcement Fedral Credit Union · US · Financial Servicesransomn0n reclama a Company #111 · AEransomeverest reclama a OR Technology · Technologyransomeverest reclama a Burris & MacOmber · Professional Servicesransomeverest reclama a Energy Storage Terminal in Singapore · SG · Energy & Utilitiesransomeverest reclama a Point Robotics · Technology

← Todos los CVEs

CVE Watch24 oct 2026

CVE-2026-66432

Subscriber Sensitive Data Exposure in WPJAM Basic <= 7.0.2.1 versions.

CVSS

7.5

Alto

EPSS

0.4%

p36

KEV

—

Exploit Today

11

0-100

Publicado: 13 ago 2026 · Última mod.: 24 oct 2026 · CWE-1258

EPSS · 30d

0.4%EPSS · 30 días0.4%

2026-09-282026-10-26

Descripción técnica

Subscriber Sensitive Data Exposure in WPJAM Basic <= 7.0.2.1 versions.

Referencias oficiales

patchstack.comhttps://patchstack.com/database/wordpress/plugin/wpjam-basic/vulnerability/wordpress-wpjam-basic-plugin-7-0-2-1-sensitive-data-exposure-vulnerability?_s_id=cve

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2026-651274.1 MED

——6NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause exposure of sensitive system information due to uncleared debug information. A successful exploit of this vulnerability might lead to information disclosure.28d CVE-2026-802392.4 BAJ

——3Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Exposure of Sensitive System Information Due to Uncleared Debug Information vulnerability. An unauthenticated attacker with physical access could potentially exploit this vulnerability, leading to information exposure.48d CVE-2026-797273.3 BAJ

——1Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Exposure of Sensitive System Information Due to Uncleared Debug Information vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to information exposure.48d CVE-2026-526967.5 ALT

——4Unauthenticated Sensitive Data Exposure in JetBlog <= 2.4.8 versions.1d CVE-2025-154809.1 CRÍ

——7In Ubuntu, ubuntu-desktop-provision version 24.04.4 could leak sensitive user credentials during crash reporting. Upon installation failure, if a user submitted a bug report to Launchpad, ubuntu-desktop-provision could include the user's password hash in the attached logs.20d CVE-2025-145518.1 ALT

——6In Ubuntu, Subiquity version 24.04.4 could leak sensitive user credentials during crash reporting. Upon installation failure, if a user submitted a bug report to Launchpad, Subiquity could include certain user credentials, such as the user's plaintext Wi-Fi password, in the attached logs.20d