Cross-site scripting (XSS) in Responsive Blog 1.0/1.12.4/3.3.4 via the admin pageViewMembers.php allows authenticated attackers with high privileges to inject malicious scripts. A public exploit exists, but EPSS score is low (0.04%) and no active exploitation in CISA KEV.
Stored cross-site scripting in Ninja Team File Manager Pro for WordPress allows authenticated users with high privileges to inject malicious scripts that execute when other users view affected pages. The vulnerability affects versions up to 1.8.8 and has a low EPSS score (0.04%) with no public exploit or active exploitation reported.
Stored cross-site scripting (XSS) in Login/Signup Popup plugin for WordPress versions up to 2.9.4 allows authenticated users with high privileges (e.g., administrators) to inject malicious scripts that execute when other users view the affected page. No public exploit or active exploitation has been identified, and the EPSS score is low (0.04%).
Stored cross-site scripting in Spoki WordPress plugin up to version 2.16.0 allows authenticated attackers with high privileges to inject malicious scripts that execute when other users view affected pages. No public exploit or active exploitation has been identified, and EPSS score is low (0.04%).
Stored cross-site scripting (XSS) in CP Polls WordPress plugin up to version 1.0.81 allows authenticated users with high privileges to inject malicious scripts that execute when other users view poll data. No public exploit or active exploitation identified.
Stored cross-site scripting in ATP Call Now WordPress plugin up to version 1.0.3 allows authenticated users with high privileges to inject malicious scripts that execute when other users view affected pages. No public exploit or active exploitation identified; EPSS score is low (0.04%).
Stored cross-site scripting in CodePen Embed Block plugin for WordPress allows authenticated users with high privileges to inject malicious scripts. This issue affects versions through 1.1.1 and has a low EPSS score with no public exploit identified.
Stored cross-site scripting in WP-FB-AutoConnect plugin for WordPress allows authenticated administrators to inject malicious scripts via improperly neutralized input. Affects versions up to 4.6.3. No public exploit or active exploitation identified; EPSS score is low (0.04%).
Stored cross-site scripting (XSS) in Better Random Redirect WordPress plugin versions up to 1.3.20 allows authenticated users with high privileges (e.g., administrators) to inject malicious scripts that execute when other users view affected pages. No public exploit or active exploitation has been identified, and the EPSS score is low (0.04%).
Stored cross-site scripting in RDFa Breadcrumb WordPress plugin through version 2.3 allows authenticated users with high privileges (e.g., administrators) to inject malicious scripts that execute when other users view affected pages. No public exploit or active exploitation identified; EPSS score is low (0.04%).
Stored cross-site scripting in Simple Sticky Footer WordPress plugin up to version 1.3.5 allows authenticated users with high privileges to inject arbitrary web scripts into pages, which execute when other users access the affected page. No public exploit or active exploitation identified; EPSS score is low (0.04%).
Stored cross-site scripting in Tealium WordPress plugin up to version 2.1.17 allows authenticated users with high privileges to inject malicious scripts that execute when other users view affected pages. No public exploit or active exploitation has been identified, and the EPSS score is low (0.04%).
Stored cross-site scripting in WP Voting Contest plugin for WordPress allows authenticated users with high privileges to inject malicious scripts that execute when other users view affected pages. The vulnerability affects versions up to 5.8 and has a low EPSS score with no public exploit identified.
Stored cross-site scripting (XSS) in the WordPress plugin IP Based Login through version 2.4.2 allows authenticated administrators to inject malicious scripts that execute when other users view affected pages. No public exploit or active exploitation has been identified, and the EPSS score is low (0.04%).
Stored cross-site scripting vulnerability in the Hand Talk WordPress plugin up to version 6.0 allows authenticated users with high privileges to inject malicious scripts into web pages. An attacker with admin-level access can store XSS payloads that execute when other users view affected pages, potentially leading to session hijacking or defacement. No public exploit or active exploitation has been identified.
Stored cross-site scripting (XSS) vulnerability in the PDPA Consent for Thailand WordPress plugin up to version 1.1.1 allows authenticated users with high privileges (e.g., administrators) to inject malicious scripts into web pages. This can lead to session hijacking, defacement, or redirection to malicious sites when other users view the affected page. No public exploit or active exploitation has been identified, and the EPSS score is low (0.04%).
Stored cross-site scripting (XSS) in CSV Importer Improved WordPress plugin up to version 0.6.1 allows authenticated users with high privileges to inject malicious scripts via imported CSV data. The vulnerability is triggered when an administrator views the imported data, leading to script execution in the admin context. No public exploit or active exploitation has been identified, and the EPSS score is low (0.04%).
Stored cross-site scripting (XSS) in Inventory Presser WordPress plugin up to version 15.0.0 allows authenticated users with high privileges to inject malicious scripts that execute when other users view affected pages. No public exploit or active exploitation has been identified, and EPSS score is low (0.04%).
Stored cross-site scripting in Recipes manager - WPH plugin for WordPress allows authenticated users with high privileges to inject malicious scripts. Versions through 1.0.4 are affected. No public exploit or active exploitation identified.
An issue was discovered in the COROS application through 3.8.12 for Android. Bluetooth pairing and bonding is neither initiated nor enforced by the application itself. Also, the watch does not enforce pairing and bonding. As a result, any data transmitted via BLE remains unencrypted, allowing attackers within Bluetooth range to eavesdrop on the communication. Furthermore, even if a user manually initiates pairing and bonding in the Android settings, the application continues to transmit data without requiring the watch to be bonded. This fallback behavior enables attackers to exploit the communication, for example, by conducting an active machine-in-the-middle attack.
Buffer overflow in OpenVPN ovpn-dco-win version 1.3.0 and earlier and version 2.5.8 and earlier allows a local user process to send a too large control message buffer to the kernel driver resulting in a system crash
Missing authorization in Kata Plus WordPress plugin up to version 1.5.3 allows low-privileged attackers to exploit incorrectly configured access controls, leading to limited integrity and availability impact. No public exploit or active exploitation has been identified, and EPSS score is low (0.07%).
A remote code execution vulnerability (CVSS 5.4). Remediation should follow standard vulnerability management procedures.
Missing authorization in WooCommerce Fortnox Integration plugin for WordPress allows authenticated attackers with low privileges to exploit incorrectly configured access controls, potentially leading to unauthorized modifications. The vulnerability affects all versions up to 4.5.5 and has a CVSS score of 5.4 (medium), with no public exploit or active exploitation reported.
Missing authorization in Zapier for WordPress plugin up to version 1.5.2 allows authenticated attackers with low privileges to exploit broken access controls, potentially leading to unauthorized data access or modification. No public exploit or active exploitation has been identified, and the EPSS score is low (0.05%).
A security vulnerability in osama (CVSS 5.3) that allows accessing functionality not properly constrained. Remediation should follow standard vulnerability management procedures.
A security vulnerability in Missing Authorization vulnerability in tggfref WP-Recall (CVSS 5.3) that allows accessing functionality not properly constrained. Remediation should follow standard vulnerability management procedures.
Missing authorization in Contact Form 7 AWeber Extension up to version 0.1.38 allows unauthenticated attackers to exploit incorrectly configured access controls, potentially causing limited availability impact. No public exploit or active exploitation has been identified, and the EPSS score is low (0.08%).
Missing authorization in RafflePress Giveaways and Contests plugin for WordPress allows unauthenticated attackers to access functionality that should be restricted to authorized users. This affects versions through 1.12.17 and can lead to unauthorized modification of giveaway settings or data. No public exploit or active exploitation has been identified.
CVE-2025-49995 is a security vulnerability (CVSS 5.3). Remediation should follow standard vulnerability management procedures.
Missing authorization in Cookie-Script.com WordPress plugin up to version 1.2.1 allows unauthenticated attackers to exploit incorrectly configured access controls, potentially modifying plugin settings. No public exploit or active exploitation has been identified, and EPSS score is low (0.06%).
A security vulnerability in Missing Authorization vulnerability in contentstudio ContentStudio (CVSS 5.3) that allows accessing functionality not properly constrained. Remediation should follow standard vulnerability management procedures.
Missing authorization in App Builder WordPress plugin up to version 5.5.3 allows unauthenticated attackers to exploit incorrectly configured access controls, potentially accessing sensitive information. No public exploit or active exploitation has been identified, and EPSS score is low (0.06%).
Missing authorization in WPFactory CRM ERP Business Solution for WordPress allows unauthenticated attackers to modify data without authentication. The vulnerability affects versions up to and including 1.13, with a CVSS score of 5.3 and low EPSS probability (0.06%). No public exploit or active exploitation has been identified.
A security vulnerability in Missing Authorization vulnerability in thanhtungtnt Video List Manager (CVSS 5.3) that allows accessing functionality not properly constrained. Remediation should follow standard vulnerability management procedures.
Dell PowerScale OneFS, versions 9.5.0.0 through 9.10.0.1, contains an improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to denial of service, information disclosure, and information tampering.
Server-Side Request Forgery (SSRF) in the WordPress plugin Auto Upload Images versions up to 3.3.2 allows authenticated attackers with low privileges to make the server send crafted requests to internal or external resources. This can lead to limited information disclosure or limited manipulation of internal services. No public exploit or active exploitation has been identified, and the EPSS score is low (0.04%).
Server-Side Request Forgery (SSRF) in PowerPress Podcasting plugin for WordPress allows authenticated attackers with low privileges to make the server send crafted requests to internal or external resources. This can lead to limited information disclosure and potential internal network scanning. No public exploit or active exploitation has been identified, and EPSS score is low (0.04%).
Server-Side Request Forgery (SSRF) in WPThumb plugin for WordPress up to version 0.10 allows authenticated attackers with low privileges to make the server send crafted requests to internal or external resources, potentially leading to limited information disclosure or low-impact manipulation. No public exploit or active exploitation has been identified, and EPSS score is low (0.04%).
The Postbox's configuration on macOS, specifically the presence of entitlements: "com.apple.security.cs.allow-dyld-environment-variables" and "com.apple.security.cs.disable-library-validation" allows for Dynamic Library (Dylib) injection. A local attacker with unprivileged access can use environment variables like DYLD_INSERT_LIBRARIES to successfully inject code in application's context and bypass Transparency, Consent, and Control (TCC). Acquired resource access is limited to previously granted permissions by the user. Access to other resources beyond granted-permissions requires user interaction with a system prompt asking for permission. The original company behind Postbox is no longer operational, the software will no longer receive updates. The acquiring company (em Client) did not cooperate in vulnerability disclosure.
The Phoenix Code's configuration on macOS, specifically the presence of entitlements: "com.apple.security.cs.allow-dyld-environment-variables" and "com.apple.security.cs.disable-library-validation" allows for Dynamic Library (Dylib) injection. A local attacker with unprivileged access can use environment variables like DYLD_INSERT_LIBRARIES to successfully inject code in application's context and bypass Transparency, Consent, and Control (TCC). Acquired resource access is limited to previously granted permissions by the user. Access to other resources beyond granted-permissions requires user interaction with a system prompt asking for permission. This issue was fixed in commit 0c75fb57f89d0b7d9b180026bc2624b7dcf807da
In the Linux kernel, the following vulnerability has been resolved: net_sched: prio: fix a race in prio_tune() Gerrard Tai reported a race condition in PRIO, whenever SFQ perturb timer fires at the wrong time. The race is as follows: CPU 0 CPU 1 [1]: lock root [2]: qdisc_tree_flush_backlog() [3]: unlock root | | [5]: lock root | [6]: rehash | [7]: qdisc_tree_reduce_backlog() | [4]: qdisc_put() This can be abused to underflow a parent's qlen. Calling qdisc_purge_queue() instead of qdisc_tree_flush_backlog() should fix the race, because all packets will be purged from the qdisc before releasing the lock.
CVE-2025-49978 is a security vulnerability (CVSS 4.3). Remediation should follow standard vulnerability management procedures.
Missing authorization in Zara 4 Image Compression WordPress plugin up to version 1.2.17.2 allows authenticated attackers with low privileges to exploit incorrectly configured access controls, potentially causing limited denial of service. No public exploit or active exploitation has been identified, and the EPSS score is low (0.07%).
Information disclosure in ProfileGrid WordPress plugin versions up to 5.9.5.2 allows authenticated attackers with low privileges to retrieve sensitive system information, such as full server paths. This exposure can aid in further attacks by revealing the underlying directory structure. No public exploit or active exploitation has been identified, and the EPSS score is low (0.06%).
Mattermost versions 10.5.x <= 10.5.5, 9.11.x <= 9.11.15, 10.8.x <= 10.8.0, 10.7.x <= 10.7.2, 10.6.x <= 10.6.5 fail to properly retrieve requestorInfo from playbooks handler for guest users which allows an attacker access to the playbook run.
Mattermost versions 10.5.x <= 10.5.5, 9.11.x <= 9.11.15, 10.8.x <= 10.8.0, 10.7.x <= 10.7.2, 10.6.x <= 10.6.5 fail to properly enforce channel member management permissions in playbook runs, allowing authenticated users without the 'Manage Channel Members' permission to add or remove users from public and private channels by manipulating playbook run participants when the run is linked to a channel.
A security vulnerability in Missing Authorization vulnerability in aguilatechnologies WP Customer Area (CVSS 4.3). Remediation should follow standard vulnerability management procedures.
Missing authorization in WANotifier WordPress plugin up to version 2.7.7 allows authenticated attackers with low privileges to exploit incorrectly configured access controls, leading to unauthorized modification of settings or data. No public exploit or active exploitation has been identified, and the EPSS score is low (0.05%).
A security vulnerability in a Project Management (CVSS 4.3). Remediation should follow standard vulnerability management procedures.