An issue in NetEase (Hangzhou) Network Co., Ltd NeacSafe64 Driver before v1.0.0.8 allows attackers to escalate privileges via sending crafted IOCTL commands to the NeacSafe64.sys component.
An issue in the Bluetooth Low Energy (BLE) stack of Realtek RTL8762E BLE SDK v1.4.0 allows attackers within Bluetooth range to cause a Denial of Service (DoS) via sending a specific sequence of crafted control packets.
D-Link DIR-823-Pro 1.02 has improper permission control, allowing unauthorized users to turn on and access Telnet services.
RaspAP raspap-webgui 3.3.1 is vulnerable to Directory Traversal in ajax/networking/get_wgkey.php. An authenticated attacker can send a crafted POST request with a path traversal payload in the `entity` parameter to overwrite arbitrary files writable by the web server via abuse of the `tee` command used in shell execution.
Path traversal in the unauthenticated file upload endpoint of openvpn-cms-flask 1.2.7 and earlier allows remote attackers to write arbitrary files to the server, potentially achieving remote code execution. The vulnerability is publicly disclosed with a proof-of-concept, and a vendor patch is available in version 1.2.8.
Path traversal in DB-GPT versions 0.7.0 through 0.7.2 allows unauthenticated remote attackers to read or write files outside the intended directory by supplying crafted path sequences in the File argument of the AWEL flow import endpoint at /api/v2/serve/awel/flow/import. A proof-of-concept has been publicly disclosed via the eosphoros-ai GitHub issue tracker, materially lowering the bar for opportunistic exploitation against internet-exposed instances. No vendor-released patched version has been confirmed at time of analysis, leaving affected deployments without an official upstream fix.
SQL injection in code-projects Food Distributor Site 1.0 allows remote attackers to bypass authentication or extract sensitive data via crafted username/password inputs at /admin/process_login.php. A public proof-of-concept exploit is available, but no active exploitation has been confirmed. Despite being classified as "critical" by the reporter, the CVSS 4.0 base score is 5.5 (Medium) with low impact across confidentiality, integrity, and availability.
The Responsive Lightbox & Gallery WordPress plugin before 2.5.2 use the Swipebox library which does not validate and escape title attributes before outputting them back in a page/post where used, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
The Firelight Lightbox WordPress plugin before 2.3.16 does not sanitise and escape title attributes before outputting them in the page, which could allow users with a role as low as contributors to perform stored Cross-Site Scripting attacks.
The WP Map Block WordPress plugin before 2.0.3 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
A security vulnerability in BuddyPress Docs WordPress (CVSS 4.3) that allows a logged. Risk factors: public PoC available.
CVE-2025-40910 is a security vulnerability (CVSS 6.5) that allows attackers. Remediation should follow standard vulnerability management procedures.
A security vulnerability in pankaj (CVSS 6.5). Remediation should follow standard vulnerability management procedures.
Stored XSS in the My Resume Builder WordPress plugin (versions through 1.0.3) enables authenticated contributors to inject persistent JavaScript payloads into resume content that executes in the browsers of other users who view it. When a privileged user such as an administrator views the affected page, the injected script runs in their browser context, enabling session hijacking, credential theft, or unauthorized administrative actions. No public exploit has been identified at time of analysis, and the EPSS score of 0.04% indicates negligible observed exploitation interest.
DOM-based cross-site scripting in the WordPress Raise The Money plugin allows authenticated attackers with low privileges to inject malicious scripts, leading to code execution in victims' browsers. No active exploitation or public exploit code has been observed, and EPSS predicts a 0.04% chance of exploitation, indicating very low real-world risk.
Cross-site scripting in Free Downloads EDD WordPress plugin allows DOM-based XSS attacks against authenticated users with low privileges, potentially leading to session hijacking or malicious actions. The vulnerability affects versions up to 1.0.4 and has a low exploitation likelihood (EPSS 0.04%) with no public exploit or active exploitation reported.
DOM-Based Cross-Site Scripting in the Theme Junkie Team Content WordPress plugin (versions through 0.1.1) allows a low-privileged authenticated attacker to inject malicious scripts that execute in the browser of any user who views the affected page. Because the scope changes (S:C in the CVSS vector), the injected script can access session cookies and perform actions on behalf of higher-privileged users such as administrators. No public exploit code or active exploitation has been identified at time of analysis, and the EPSS score of 0.04% reflects very low observed exploitation probability.
Stored cross-site scripting in the WordPress Podcast Feed Player Widget and Shortcode plugin up to version 2.2.0 allows authenticated contributors to inject arbitrary JavaScript through shortcode or widget inputs. When an administrator views the affected page, the script executes in the admin's browser context, enabling session theft or actions on behalf of the admin. No evidence of active exploitation (CISA KEV not listed) and EPSS score is low (0.04%), reducing immediate priority.
Stored cross-site scripting (XSS) in the Smart Agenda WordPress plugin up to version 4.9 allows authenticated attackers with low-privilege accounts to inject malicious scripts that execute in the browsers of users viewing the compromised content. No known public exploit or active exploitation (CISA KEV) has been identified, and the EPSS score of 0.04% indicates a very low probability of exploitation in the wild.
DOM-based XSS in the WP DataTable WordPress plugin (versions up to and including 0.2.7) allows a low-privileged authenticated attacker to inject malicious client-side scripts that execute in a victim's browser session. The flaw is classified under CWE-79 and arises from insufficient input neutralization in a DOM manipulation path, meaning the payload is processed by the browser rather than the server. No public exploit code and no CISA KEV listing have been identified at the time of analysis; EPSS at 0.04% reflects a low near-term exploitation probability.
Stored cross-site scripting in the WordPress plugin WP Visual Sitemap up to version 1.0.2 allows authenticated attackers with contributor-level access or higher to inject malicious scripts into sitemap content. When an administrator or other privileged user views the affected content, the script executes in their browser, enabling session hijacking or site defacement. No public exploit or active exploitation is known, and EPSS probability is very low (0.04%).
Stored cross-site scripting in WordPress Thumbnail Editor plugin ≤2.3.3 allows authenticated users with low privileges to inject arbitrary web scripts that execute when an administrator views the affected content, potentially leading to privilege escalation or data theft. No active exploitation or public exploit code has been identified, and EPSS indicates very low exploitation probability (0.04%).
Stored cross-site scripting in the Football Pool WordPress plugin (≤2.12.5) enables authenticated attackers to inject malicious scripts into pages viewed by other users. Successful exploitation requires user interaction to trigger the stored payload, leading to potential data theft or session compromise. EPSS indicates very low current exploitation probability (0.04%).
DOM-Based Cross-Site Scripting (XSS) in the Popup addon for Ninja Forms WordPress plugin up to version 3.4 allows authenticated attackers with at least contributor-level access to inject and execute arbitrary JavaScript in the browser of a victim who interacts with a crafted popup. Successful exploitation could lead to session hijacking, credential theft, or complete site takeover in the context of a higher-privileged user. No active exploitation or public exploit code is known at this time, and the EPSS exploitation probability is low (0.04%).
Stored Cross-Site Scripting in WP AdCenter plugin up to version 2.6.0 allows authenticated users with low-level privileges to inject malicious scripts into ad content, which execute in the browsers of administrators viewing the affected pages, potentially leading to session hijacking or privilege escalation. No active exploitation or public exploit code has been identified, and the EPSS score indicates a very low probability of widespread exploitation.
DOM-based Cross-Site Scripting (XSS) in the Omnipress WordPress plugin through version 1.6.3 allows authenticated attackers with low privileges (e.g., contributor accounts) to inject malicious scripts that execute in the browser of an administrator or other user. The vulnerability is triggered via crafted page content and requires victim interaction (e.g., visiting a page). No active exploitation or public proof-of-concept has been identified, and the EPSS score is very low (0.04%), indicating minimal current exploitation risk.
DOM-based cross-site scripting (XSS) vulnerability in the VaultDweller Leyka WordPress plugin (versions ≤3.31.9) allows authenticated attackers to inject arbitrary JavaScript into pages viewed by other users. Successful exploitation requires a low-privileged attacker account and user interaction, potentially leading to session hijacking or page manipulation. No active exploitation or public exploit code has been confirmed at this time.
Stored cross-site scripting in HT Mega – Absolute Addons for WPBakery Page Builder allows authenticated attackers with low privileges to inject arbitrary web scripts. When an administrator or other high-privilege user views the injected content, the script executes in their browser, leading to session theft, account takeover, or site defacement. The vulnerability affects all versions up to 1.0.8; no active exploitation or public exploit code is known, and the EPSS probability is low.
DOM-based cross-site scripting in the CyberChimps Responsive Blocks WordPress plugin allows authenticated attackers to inject arbitrary JavaScript. The vulnerability affects plugin versions up to 2.0.6 and can be exploited by low-privileged users who create malicious block content, leading to script execution in the browsers of victims who view the affected page. No active exploitation or public exploit code has been identified at this time.
A DOM-based cross-site scripting (XSS) vulnerability in the HT Slider For Elementor WordPress plugin up to version 1.
A Cross-Site Request Forgery (CSRF) vulnerability exists in the Inquiry Management functionality /mcgs/admin/readenq.php of the Phpgurukul Medical Card Generation System 1.0. The vulnerable endpoint allows an authenticated admin to delete inquiry records via a simple GET request, without requiring a CSRF token or validating the origin of the request.
A Cross-Site Request Forgery (CSRF) vulnerability exists in the Manage Card functionality (/mcgs/admin/manage-card.php) of PHPGurukul Medical Card Generation System 1.0. The vulnerable endpoint allows an authorized admin to delete medical card records by sending a simple GET request without verifying the origin of the request.
The The Pack Elementor addon plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘slider_options’ parameter in all versions up to, and including, 2.1.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
The A/B Testing for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'ab-testing-for-wp/ab-test-block' block in all versions up to, and including, 1.18.2 due to insufficient input sanitization and output escaping on the 'id' parameter. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
The isMobile plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘device’ parameter in all versions up to, and including, 1.1.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Stored Cross-Site Scripting in the Osom Blocks WordPress plugin allows authenticated attackers with Contributor-level access or higher to inject arbitrary web scripts via the class_name parameter, executing whenever a user views the compromised page. The vulnerability affects all versions up to 1.2.1 and carries a CVSS score of 6.4 (Medium) with an EPSS probability of 0.04%, indicating low exploitation likelihood. No active exploitation (KEV) or public exploit code has been identified at this time.
The Ninja Forms - The Contact Form Builder That Grows With You plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the use of a templating engine in all versions up to, and including, 3.10.2.1 due to insufficient output escaping on user data passed through the template. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
The FL3R Accessibility Suite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's fl3raccessibilitysuite shortcode in all versions up to, and including, 1.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVE-2025-47822 is a security vulnerability (CVSS 6.4). Remediation should follow standard vulnerability management procedures.
CVE-2025-47819 is a security vulnerability (CVSS 6.4). Remediation should follow standard vulnerability management procedures.
Improper signature verification in AMD CPU ROM microcode patch loader may allow an attacker with local administrator privilege to load malicious microcode, potentially resulting in loss of integrity of x86 instruction execution, loss of confidentiality and integrity of data in x86 CPU privileged context and compromise of SMM execution environment.
A stored blind XSS vulnerability exists in the Contact Page of the Phpgurukul Medical Card Generation System 1.0 mcgs/contact.php. The name field fails to properly sanitize user input, allowing an attacker to inject malicious JavaScript.
A security vulnerability in Roo Code (CVSS 5.9). Remediation should follow standard vulnerability management procedures. Vendor patch is available.
Stored cross-site scripting in the WordPress plugin Beauty Contact Popup Form up to version 6.0 enables authenticated attackers with high privileges to inject malicious scripts that execute when other users view stored contact form data. This issue has a medium CVSS score and low EPSS exploitation probability, with no known active exploitation or public exploit code.
Stored cross-site scripting in the EC Stars Rating WordPress plugin (versions ≤1.0.11) allows authenticated administrators to inject malicious scripts that execute in the browsers of other users who view the affected rating page. This could lead to session hijacking, defacement, or other browser-based attacks.
Stored cross-site scripting in the Quick Favicon WordPress plugin ≤0.22.8 allows authenticated attackers with administrator-level privileges to inject arbitrary web scripts that execute when another user views an affected page. No known public exploit or active exploitation has been reported, and EPSS indicates a very low probability of widespread use.
Stored cross-site scripting (XSS) in the Affiliate Links for Amazon WordPress plugin (versions up to 1.0.6) allows an authenticated attacker with high privileges to inject arbitrary scripts that execute when another user views the affected page. No public exploit or active exploitation has been identified, and the EPSS score indicates very low exploitation probability (0.04%).
Stored cross-site scripting (XSS) in the WP Edit WordPress plugin through version 4.0.4 allows authenticated attackers with high privileges (such as administrators) to inject arbitrary web scripts into pages. These scripts execute in the browsers of other users who later view the affected content, enabling session hijacking, defacement, or theft of sensitive data. No public exploit or active exploitation has been identified, and the EPSS score of 0.04% indicates very low current exploitation probability.
A race condition in the Nix, Lix, and Guix package managers enables changing the ownership of arbitrary files to the UID and GID of the build user (e.g., nixbld* or guixbuild*). This affects Nix before 2.24.15, 2.26.4, 2.28.4, and 2.29.1; Lix before 2.91.2, 2.92.2, and 2.93.1; and Guix before 1.4.0-38.0e79d5b.
A security vulnerability in A vulnerability (CVSS 7.3). High severity vulnerability requiring prompt remediation.