Authorization bypass in the GSheetConnector For Gravity Forms WordPress plugin (versions ≤ 1.3.27) allows any authenticated user holding subscriber-level access or above to invoke the plugin's 'install_plugin' function, which performs no capability check, and push arbitrary plugin packages onto the target site. Successful installation of a malicious or otherwise exploitable plugin can lead to arbitrary code execution on the web server, though the vendor description qualifies this as achievable only 'under certain conditions' rather than automatically. There is no public exploit identified at time of analysis and no CISA KEV listing; EPSS is low (0.43%, ~35th percentile), while the CVSS v3.1 base score of 8.8 reflects high confidentiality, integrity and availability impact once the plugin-install primitive is chained to code execution.
UNISOC modem firmware can be crashed by remote attackers via improperly validated input, as described in CVE-2025-31718. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H, score 7.5) indicates a network-reachable, low-complexity, unauthenticated flaw whose sole impact is availability, despite the 'privilege escalation' tag. No public exploit code or confirmed active exploitation has been identified, and EPSS is 1.02% (62nd percentile).
Malformed cellular signaling messages can crash the baseband/modem firmware on UNISOC-based devices, producing a remote denial of service (CVSS 7.5, AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) that requires neither authentication nor user interaction. The flaw is an input-validation failure in modem message handling: when the modem receives a crafted signaling message it fails to parse safely and the system crashes, with no path to code execution, privilege escalation, or data disclosure. Impact is bounded to availability, and real-world exploitation is constrained by the fact that the malicious message must reach the baseband - typically over the air, requiring radio proximity or a rogue/malicious base station. There is no confirmed active exploitation (not in CISA KEV) and no public exploit code identified at time of analysis; EPSS is 0.64% (49th percentile), indicating a low, non-urgent likelihood of exploitation in the near term.