The FL3R Accessibility Suite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's fl3raccessibilitysuite shortcode in all versions up to, and including, 1.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVE-2025-47822 is a security vulnerability (CVSS 6.4). Remediation should follow standard vulnerability management procedures.
CVE-2025-47819 is a security vulnerability (CVSS 6.4). Remediation should follow standard vulnerability management procedures.
Improper signature verification in AMD CPU ROM microcode patch loader may allow an attacker with local administrator privilege to load malicious microcode, potentially resulting in loss of integrity of x86 instruction execution, loss of confidentiality and integrity of data in x86 CPU privileged context and compromise of SMM execution environment.
Command injection in openvpn-cms-flask up to version 1.2.7 allows remote authenticated attackers to execute arbitrary system commands via the username parameter of the user creation API endpoint. Public exploit code is available, and the vulnerability is fixed in version 1.2.8.
A security vulnerability in A vulnerability classified as critical (CVSS 6.3). Risk factors: public PoC available.
A security vulnerability in A vulnerability classified as critical (CVSS 6.3). Risk factors: public PoC available.
Server-side request forgery in diyhi bbs up to version 6.8 allows remote authenticated attackers with low privileges to manipulate the Host header via the /admin/login endpoint, enabling limited unauthorized access to internal resources. A public proof-of-concept exploit is available, but no active exploitation has been confirmed; EPSS score indicates a low probability of exploitation (0.08%).
SQL injection in the getOfficeName method of sfturing hosp_order enables remote attackers with low privileges to manipulate the officesName parameter, potentially extracting or modifying database contents. The vulnerability is publicly documented with proof-of-concept exploit code available, though low EPSS score suggests limited real-world exploitation likelihood.
A stored blind XSS vulnerability exists in the Contact Page of the Phpgurukul Medical Card Generation System 1.0 mcgs/contact.php. The name field fails to properly sanitize user input, allowing an attacker to inject malicious JavaScript.
A security vulnerability in Roo Code (CVSS 5.9). Remediation should follow standard vulnerability management procedures. Vendor patch is available.
Stored cross-site scripting (XSS) in code-projects Food Distributor Site 1.0 allows an authenticated administrator to inject arbitrary JavaScript into site settings. The vulnerability is triggered via the site_phone, site_email, or address parameters in the /admin/save_settings.php endpoint. Public exploit code is available, but the high privilege requirement (administrator access) and low EPSS score (0.07%) limit real-world risk.
A heap-based buffer overflow vulnerability in HDF5 1.14.6 allows local attackers with low privileges to cause a denial of service via crafted HDF5 file metadata encoding. Exploit code is publicly available, but the low EPSS score (0.05%) and local attack requirement limit real-world urgency. No active exploitation has been confirmed by CISA KEV.
Stored cross-site scripting in the WordPress plugin Beauty Contact Popup Form up to version 6.0 enables authenticated attackers with high privileges to inject malicious scripts that execute when other users view stored contact form data. This issue has a medium CVSS score and low EPSS exploitation probability, with no known active exploitation or public exploit code.
Stored cross-site scripting in the EC Stars Rating WordPress plugin (versions ≤1.0.11) allows authenticated administrators to inject malicious scripts that execute in the browsers of other users who view the affected rating page. This could lead to session hijacking, defacement, or other browser-based attacks.
Stored cross-site scripting in the Quick Favicon WordPress plugin ≤0.22.8 allows authenticated attackers with administrator-level privileges to inject arbitrary web scripts that execute when another user views an affected page. No known public exploit or active exploitation has been reported, and EPSS indicates a very low probability of widespread use.
Stored cross-site scripting (XSS) in the Affiliate Links for Amazon WordPress plugin (versions up to 1.0.6) allows an authenticated attacker with high privileges to inject arbitrary scripts that execute when another user views the affected page. No public exploit or active exploitation has been identified, and the EPSS score indicates very low exploitation probability (0.04%).
Stored cross-site scripting (XSS) in the WP Edit WordPress plugin through version 4.0.4 allows authenticated attackers with high privileges (such as administrators) to inject arbitrary web scripts into pages. These scripts execute in the browsers of other users who later view the affected content, enabling session hijacking, defacement, or theft of sensitive data. No public exploit or active exploitation has been identified, and the EPSS score of 0.04% indicates very low current exploitation probability.
A race condition in the Nix, Lix, and Guix package managers enables changing the ownership of arbitrary files to the UID and GID of the build user (e.g., nixbld* or guixbuild*). This affects Nix before 2.24.15, 2.26.4, 2.28.4, and 2.29.1; Lix before 2.91.2, 2.92.2, and 2.93.1; and Guix before 1.4.0-38.0e79d5b.
A security vulnerability in A vulnerability (CVSS 7.3). High severity vulnerability requiring prompt remediation.
Unauthenticated users on an adjacent network with the Sight Bulb Pro can run shell commands as root through a vulnerable proprietary TCP protocol available on Port 16668. This vulnerability allows an attacker to run arbitrary commands on the Sight Bulb Pro by passing a well formed JSON string.
Insufficient access controls in the WPManiax WP DB Booster plugin for WordPress up to version 1.0.1 allow authenticated low-privilege users to read sensitive data and cause limited availability impact. No public exploit or active exploitation has been identified. The vulnerability carries a medium-severity CVSS base score of 5.4 and a very low EPSS exploitation probability (0.07%).
IBM Cloud Pak System 2.3.5.0, 2.3.3.7, 2.3.3.7 iFix1 on Power and 2.3.3.6, 2.3.3.6 iFix1, 2.3.3.6 iFix2, 2.3.4.0, 2.3.4.1 on Intel operating systems is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site.
Unauthenticated cross-site request forgery in the Virusdie WordPress plugin through version 1.1.3 allows remote attackers to trick authenticated administrators into performing unintended actions, such as modifying plugin settings or triggering scans. Exploitation requires user interaction and no public exploit or active exploitation has been identified; EPSS indicates a very low exploitation probability.
Cross-site request forgery (CSRF) vulnerability in the Address Autocomplete via Google for Gravity Forms WordPress plugin allows attackers to perform unauthorized actions on behalf of logged-in administrators, such as modifying plugin settings. The flaw affects plugin versions through 1.3.4 and requires user interaction (admin clicking a link). No public exploit or active exploitation has been identified; EPSS score is low (0.02%).
Cross-site request forgery in the Writesonic WordPress plugin through version 1.0.4 enables attackers to trick administrators into unknowingly triggering actions such as modifying plugin settings or disrupting service. No active exploitation or public exploit code has been reported, and EPSS indicates a low 0.02% probability of exploitation.
Buffer Overflow vulnerability exists in multiple versions of TB-eye network recorders and AHD recorders. The CGI process may be terminated abnormally by processing a specially crafted request.
CVE-2025-6705 is a security vulnerability (CVSS 5.3). Remediation should follow standard vulnerability management procedures.
Sensitive information exposure in the Accept Authorize.NET Payments WordPress plugin up to version 2.5 allows unauthenticated remote attackers to retrieve embedded sensitive data from sent form submissions. The vulnerability has a CVSS base score of 5.3 with low confidentiality impact and requires no user interaction, but there is no evidence of public exploit code or active exploitation; EPSS probability is very low (0.06%).
Unauthenticated exposure of sensitive data in Accept Stripe Payments Using Contact Form 7 plugin up to version 3.0 sends embedded secrets (e.g., API keys) in network traffic, allowing remote attackers to retrieve that data. The vulnerability stems from insertion of sensitive information into sent data, with a CVSS 5.3 base score. No active exploitation or public proof-of-concept has been identified at this time, and the EPSS exploitation probability is very low (0.06%).
Information disclosure in Roland Beaussant Audio Editor & Recorder plugin for WordPress up to version 2.2.3 allows unauthenticated remote attackers to access sensitive system information. The vulnerability has a low exploitation probability (EPSS 0.06%) and no known public exploit code, but successful exploitation could leak embedded sensitive data.
CVE-2025-53304 is a security vulnerability (CVSS 5.3) that allows accessing functionality not properly constrained. Remediation should follow standard vulnerability management procedures.
A security vulnerability in Missing Authorization vulnerability in iCount iCount Payment Gateway (CVSS 5.3) that allows accessing functionality not properly constrained. Remediation should follow standard vulnerability management procedures.
Missing authorization in the HurryTimer WordPress plugin through version 2.13.1 allows unauthenticated, remote attackers to modify plugin data (low integrity impact) with no user interaction. The vulnerability arises from incorrectly configured access controls, enabling unauthorized action via network requests. No active exploitation or public exploit code is confirmed, and EPSS probability is very low (0.06%).
A vulnerability was found in HKUDS LightRAG up to 1.3.8. It has been declared as critical. Affected by this vulnerability is the function upload_to_input_dir of the file lightrag/api/routers/document_routes.py of the component File Upload. The manipulation of the argument file.filename leads to path traversal. It is possible to launch the attack on the local host. The identifier of the patch is 60777d535b719631680bcf5d0969bdef79ca4eaf. It is recommended to apply a patch to fix this issue.
Software installed and running inside a Guest VM may override Firmware's state and gain access to the GPU.
Arbitrary file read vulnerability in the Plugin Inspector WordPress plugin up to version 1.5 allows authenticated administrators to read arbitrary files on the server via a path traversal attack. The vulnerability requires high privileges but can expose sensitive configuration and data. No active exploitation or public exploit code has been observed, and the EPSS score indicates a low probability of widespread exploitation.
Cleartext storage of sensitive data in Bharti Airtel Thanks App 4.105.4 for Android allows physically present attackers with low privileges to read locally stored files, exposing personal information or session tokens. A publicly available proof-of-concept exploit exists, but exploitation requires physical device access and low user privileges, significantly reducing real-world risk. No active exploitation has been reported and the EPSS exploitation probability is extremely low at 0.01%.
Missing authorization checks in the WPKit For Elementor WordPress plugin (versions ≤ 1.1.0) allow unauthenticated attackers to escalate privileges via crafted requests that modify arbitrary WordPress options. The vulnerability requires user interaction and can lead to privilege escalation without user awareness. No active exploitation is confirmed, and EPSS indicates a very low exploitation probability (0.09%).
Low-privileged authenticated users can bypass authorization checks in the Cron Logger WordPress plugin up to version 1.3.0, leading to limited service disruption. The flaw allows attackers with subscriber-level or similar low access to cause availability impact without any interaction. No evidence of active exploitation or public exploit code exists.
A security vulnerability in Missing Authorization vulnerability in danbriapps Pre-Publish Post Checklist (CVSS 4.3). Remediation should follow standard vulnerability management procedures.
Unauthorized modification of dashboard widget sidebars in WordPress plugin Dashboard Widget Sidebar ≤1.2.3 allows authenticated users with low privileges to alter sidebar configurations. This missing authorization check permits exploitation of incorrectly configured access controls, leading to limited data integrity impact. No active exploitation or public exploit is known; EPSS probability is very low (0.05%).
Missing authorization in PlatiOnline Payments plugin for WordPress up to 6.3.2 allows authenticated attackers with low privileges to modify payment-related data. The vulnerability, stemming from broken access control, impacts only integrity (CVSS 4.3). No public exploit or active exploitation is known, and EPSS indicates very low exploitation probability.
Data manipulation in QuantumCloud ChatBot 6.7.3 and below allows authenticated low-privilege users to bypass missing authorization checks and modify plugin data. The vulnerability has a CVSS 3.1 base score of 4.3 (Medium) and an EPSS probability of 0.05%, indicating low exploitation likelihood. No active exploitation has been confirmed, and no public exploit code is available at time of analysis.
CVE-2025-46708 is a security vulnerability (CVSS 4.3). Remediation should follow standard vulnerability management procedures.
Cross-site request forgery in the Aioseo Multibyte Descriptions WordPress plugin (versions up to 0.0.6) allows unauthenticated attackers to perform state-changing actions on behalf of a logged-in administrator, such as altering plugin settings, by tricking them into clicking a malicious link. Exploitation requires user interaction, and no active exploitation or public exploit code has been reported; EPSS indicates a very low exploitation probability (0.02%).
Cross-site request forgery in the Slickstream WordPress plugin up to version 2.0.3 allows an unauthenticated attacker to trick an authenticated administrator into performing unintended actions, such as altering plugin settings. The vulnerability requires user interaction and has a low integrity impact. No active exploitation or public exploit code has been reported, and EPSS indicates a very low chance of real-world exploitation.
Cross-Site Request Forgery (CSRF) in the opicron Image Cleanup WordPress plugin (versions up to 1.9.2) allows unauthenticated attackers to trick authenticated administrators into performing unauthorized actions on the affected site. The vulnerability carries a CVSS base score of 4.3 (Medium) with low integrity impact only, and no public exploit or active exploitation has been observed.
Cross-Site Request Forgery in the Blend Media WordPress CTA plugin up to version 1.6.9 allows unauthenticated attackers to deceive logged-in administrators into executing unwanted actions, such as modifying plugin settings, through specially crafted requests. The vulnerability has a medium CVSS base score of 4.3 due to required user interaction and low integrity impact, with no confidentiality or availability loss. No active exploitation or public exploit code has been identified.
Cross-Site Request Forgery (CSRF) in the My Wp Brand WordPress plugin allows attackers to trick authenticated administrators into performing unintended actions on the plugin’s settings. Affected versions up to 1.1.3 lack proper request origin verification, enabling state-changing operations with only low integrity impact. No active exploitation or public exploit code is known, and EPSS rates exploitation probability as very low (0.02%).