CWE-669
Incorrect Resource Transfer Between Spheres
The product does not properly transfer a resource/behavior to another sphere, or improperly imports a resource/behavior from another sphere, in a manner that provides unintended control over that resource.
We have discovered 2,856,932 live websites that are affected by CWE-669.
CVEs
- Count - 6
CWE References
Website Distribution by Country
Number of websites using CWE-669 United States | 647,843 websites |
 Germany | 328,094 websites |
 Japan | 198,601 websites |
 France | 148,283 websites |
 Italy | 133,286 websites |
 Russia | 126,482 websites |
 GB | 110,496 websites |
 Poland | 97,656 websites |
 Netherlands | 85,847 websites |
 Spain | 79,426 websites |
Website Distribution by TLD
Number of websites using CWE-669| .com | 1,112,963 websites |
| .de | 194,060 websites |
| .org | 116,476 websites |
| .ru | 105,110 websites |
| .it | 88,908 websites |
| .net | 83,890 websites |
| .nl | 74,466 websites |
| .pl | 72,908 websites |
| .co.uk | 62,920 websites |
| .fr | 61,475 websites |
Newest CVEs
List of the most recent CVEs that are part of CWE-669| Discovered | CVE | Description | Websites |
|---|---|---|---|
| Apr, 2026 | CVE-2026-35540 | An issue was discovered in Roundcube Webmail 1.6.0 before 1.6.14. Insufficient Cascading Style Sheet... | 9,102 |
| Apr, 2026 | CVE-2026-35542 | An issue was discovered in Roundcube Webmail before 1.5.14 and 1.6.14. The remote image blocking fea... | 15,031 |
| Apr, 2026 | CVE-2026-35543 | An issue was discovered in Roundcube Webmail before 1.5.14 and 1.6.14. The remote image blocking fea... | 15,031 |
| Apr, 2026 | CVE-2026-35544 | An issue was discovered in Roundcube Webmail before 1.5.14 and 1.6.14. Insufficient Cascading Style ... | 15,031 |
| Apr, 2026 | CVE-2026-35545 | An issue was discovered in Roundcube Webmail before 1.5.15 and 1.6.15. The remote image blocking fea... | 15,187 |
| Jul, 2025 | CVE-2025-54352 | WordPress 3.5 through 6.8.2 allows remote attackers to guess titles of private and draft posts via p... | 2,841,871 |
The most widespread CVEs
List of the most common CVEs that are part of CWE-669| Discovered | CVE | Description | Websites |
|---|---|---|---|
| Jul, 2025 | CVE-2025-54352 | WordPress 3.5 through 6.8.2 allows remote attackers to guess titles of private and draft posts via p... | 2,841,871 |
| Apr, 2026 | CVE-2026-35545 | An issue was discovered in Roundcube Webmail before 1.5.15 and 1.6.15. The remote image blocking fea... | 15,187 |
| Apr, 2026 | CVE-2026-35542 | An issue was discovered in Roundcube Webmail before 1.5.14 and 1.6.14. The remote image blocking fea... | 15,031 |
| Apr, 2026 | CVE-2026-35543 | An issue was discovered in Roundcube Webmail before 1.5.14 and 1.6.14. The remote image blocking fea... | 15,031 |
| Apr, 2026 | CVE-2026-35544 | An issue was discovered in Roundcube Webmail before 1.5.14 and 1.6.14. Insufficient Cascading Style ... | 15,031 |
| Apr, 2026 | CVE-2026-35540 | An issue was discovered in Roundcube Webmail 1.6.0 before 1.6.14. Insufficient Cascading Style Sheet... | 9,102 |
Websites affected by CWE-669
Top websites that are affected by CWE-669. Please click on the "Contact us" link to get more information.| Domain | Country | Rank | Contacts |
|---|---|---|---|
| ***************.org | United States | *** | |
| ************.org |  Singapore | *** | |
| *****************.com | United States | *** | |
| ****.br |  Brazil | *** | |
| *****.net |  Canada | *** | |
| ****.******.com | Singapore | *** | |
| *********.space | United States | *** | |
| ****************.com | United States | *** | |
| ********.info | United States | *** | |
| ***************.org | United States | *** |