Server-Side Request Forgery in the ILLID Share This Image WordPress plugin (all versions through 2.14) allows unauthenticated remote attackers to induce the WordPress server to issue arbitrary HTTP requests to internal or external destinations, potentially exposing internal network topology and services. The scope-changed CVSS vector (S:C) confirms that exploitation can extend impact beyond the vulnerable WordPress instance to backend systems reachable by the server. No public exploit code has been identified and SSVC assessment classifies exploitation as none at time of analysis, placing real-world urgency below the raw CVSS 5.4 score suggests.
MongoDB Server's user management command contains an authorization flaw allowing authenticated low-privilege users to make limited modifications to authentication-related data belonging to other user accounts. Affected across three active release branches (7.0.x, 8.0.x, 8.2.x), this could allow one MongoDB user to interfere with how authentication is processed for another account - a form of limited horizontal privilege escalation. No public exploit exists and SSVC confirms no observed exploitation, but the network-accessible attack vector and low authentication requirement warrant timely patching in multi-tenant or shared MongoDB environments.
Denial of Service in Spring Framework's static resource serving affects Spring MVC and Spring WebFlux applications running on Windows, where crafted HTTP requests trigger abnormally slow Windows file system resolution, exhausting HTTP connection pools. Affected branches span 5.3.x through 7.0.x; fixed versions are available from VMware/Spring. No active exploitation is confirmed (not in CISA KEV), EPSS is 0.05% at the 16th percentile, and SSVC rates exploitation as 'none' - but the attack is automatable and unauthenticated, making it meaningful for any qualifying Windows Spring deployment.
SQL injection in n8n's SeaTable node allows remote unauthenticated attackers to bypass row-level access controls and retrieve unintended data from SeaTable databases when workflows accept user-controlled input via expressions in search or row retrieval parameters. The vulnerability affects n8n versions before 1.123.32, 2.17.4, and 2.18.1, and requires specific workflow configuration combining the SeaTable node with external user input passed through expressions. No public exploit code or active exploitation has been confirmed at time of analysis.
SQL injection in n8n's Oracle Database node allows attackers to inject arbitrary SQL commands through the Limit field when user-controlled input is passed via expressions, enabling data exfiltration from connected Oracle databases. Exploitation requires a specific workflow configuration where external input (e.g., from webhooks) reaches the Limit field; authentication depends on the webhook's access controls. The vulnerability affects n8n versions prior to 1.123.32, 2.17.4, and 2.18.1, and vendor-released patches are available.
Unauthorized post content disclosure in the Complianz - GDPR/CCPA Cookie Consent WordPress plugin (all versions up to and including 7.4.5) allows unauthenticated remote attackers to read consent-area block content from private, draft, and unpublished posts via a REST API endpoint that bypasses all access controls. The root cause is CWE-862 (Missing Authorization): the endpoint registers WordPress's built-in `__return_true` as its permission callback, unconditionally permitting all callers regardless of authentication or capability. Real-world exploitation probability is very low (EPSS 0.03%, 10th percentile), no public exploit has been identified, and the SSVC assessment confirms no observed exploitation - though the attack is trivially automatable against any site running the plugin.
SQL injection in n8n Snowflake and legacy MySQL v1 nodes allows authenticated users with workflow creation permissions to execute arbitrary SQL against connected databases by injecting malicious table names, column names, or update keys via expression inputs. This vulnerability affects n8n versions before 1.123.32, 2.17.4, and 2.18.1; successful exploitation enables data exfiltration, modification, or deletion. The flaw represents an incomplete fix to a prior SQL injection vulnerability (GHSA-f3f2-mcxc-pwjx) that already patched MySQL, PostgreSQL, and SQL Server nodes but overlooked the Snowflake node and legacy MySQL v1 implementation.
Sensitive system information in the BetterDocs WordPress knowledge base plugin (WPDeveloper, all versions through 4.3.10) is exposed to unauthenticated remote attackers via CWE-497, enabling retrieval of embedded sensitive data without credentials. Reported by Patchstack and tracked as EUVD-2026-26215, this medium-severity finding carries an EPSS of 0.03% (8th percentile) with no public exploit code or active exploitation recorded at time of analysis. The SSVC framework confirms no known exploitation but flags the attack as automatable, making it a viable target for mass WordPress plugin scanning campaigns.
Missing authorization in GiveWP (StellarWP's WordPress donation plugin) versions through 4.14.5 permits unauthenticated remote attackers to access restricted functionality due to incorrectly configured access control levels, resulting in partial information disclosure. The CVSS vector (AV:N/AC:L/PR:N/UI:N) confirms no authentication or special conditions are required, and the SSVC framework rates the attack as automatable - meaning mass scanning is trivially feasible if a public exploit emerges. No public exploit or active exploitation has been identified at time of analysis; EPSS places exploitation probability at just 0.03% (8th percentile), indicating low current real-world risk despite the accessible attack surface.
Memory exhaustion in OpenTelemetry.Exporter.OneCollector (NuGet, versions <= 1.15.0) enables denial-of-service against .NET applications when the configured telemetry collector endpoint is attacker-controlled or susceptible to MitM interception. The `HttpJsonPostTransport` class reads the full HTTP response body into heap memory on any 4xx or 5xx error - with no byte cap - allowing a malicious or intercepted endpoint to send an arbitrarily large body that exhausts heap memory, stalls the garbage collector, or triggers an OutOfMemoryException that terminates the process. No public exploit code exists and EPSS is 0.02% (3rd percentile), consistent with the high attack complexity; however, the impact on availability is rated High by the CVSS vector.
Admidio 5.0.8 and earlier allows authenticated administrators to remove all other administrators from the system via Role::stopMembership(), which lacks a minimum-administrator-count validation check. Two colluding or compromised admin accounts can sequentially remove each other, leaving zero administrators and locking administrative access. The vulnerability requires high privileges (PR:H) and user interaction (UI:R) but results in complete denial of administrative access once exploited.
Open redirect vulnerability in n8n's MCP OAuth consent flow allows unauthenticated attackers to register arbitrary redirect URIs and silently redirect users to attacker-controlled URLs when they deny OAuth consent. The `/mcp-oauth/register` endpoint lacks authentication and the `handleDeny` handler does not validate redirect destinations, enabling phishing attacks via crafted links. CVSS 4.7 (network-accessible, requires user interaction). Patches available: versions 1.123.32, 2.17.4, and 2.18.1 or later.
Stored cross-site scripting in Helpy 2.8.0 allows any registered user to persist arbitrary HTML in their account display name, which renders unescaped across three distinct surfaces: public forum threads, the admin ticket view, and HTML notification emails sent to other users. The multi-surface persistence is the key risk amplifier - a single malicious account name can target both end-users and privileged administrators without further action by the attacker. No active exploitation is confirmed (SSVC: none; EPSS: 0.05%), making this a medium-priority issue requiring a registered attacker account and victim interaction.
Stack-based buffer overflow in SonicWall SonicOS enables authenticated remote attackers with high-privilege credentials to crash the firewall, producing a complete denial-of-service condition across multiple SonicOS release trains. Affected deployments span SonicOS 6.5.x, 7.0.x, 7.3.x, and 8.1.x builds per ENISA EUVD-2026-26256 and SonicWall advisory SNWLID-2026-0004. No public exploit code has been identified and CISA SSVC classifies exploitation as none, placing this at lower operational priority despite the network-accessible attack vector.
Admidio 5.0.8 and earlier allows user managers with rol_edit_user permission to bypass multi-tenant organization isolation and retrieve complete member directories across all organizations by directly calling the contacts_data.php endpoint with mem_show_filter=3, exploiting a permission check mismatch between the frontend UI (which correctly requires isAdministrator() and contacts_show_all setting) and the backend API endpoint (which only requires the weaker isAdministratorUsers() check). Affected data includes full names, email addresses, login names, UUIDs, and all configured profile fields from unauthorized organizations. This is confirmed actively exploited vulnerability with patch available in version 5.0.9.
Stored cross-site scripting in Helpy 2.8.0's knowledge base Doc rendering logic allows authenticated admin or agent editor accounts to persist arbitrary JavaScript in Doc body fields, which then executes silently in the browsers of any user who views the affected page. The vulnerability is confirmed in version 2.8.0 per CPE cpe:2.3:a:helpy.io:helpy:2.8.0 and the Fluid Attacks advisory (EUVD-2026-26245). No active exploitation has been identified - EPSS sits at 0.04% (13th percentile) and CISA KEV lists no known threat actor activity - but the stored nature of the payload means a single injection persists for all subsequent victims without further attacker interaction.
Insecure default file permissions in the Anthropic TypeScript SDK's `BetaLocalFilesystemMemoryTool` expose persisted agent state to local read access and, in Docker deployments with permissive umasks, enable local users to overwrite memory files and manipulate subsequent model behavior. Affected versions span `@anthropic-ai/sdk` 0.79.0 through 0.91.0; a fix is available in 0.91.1. No public exploit exists and exploitation has not been observed (SSVC: none), with an EPSS score of 0.01% placing this in the 2nd percentile - risk is real but narrowly scoped to shared-host or containerized deployments.
GNU wget2 incorrectly validates TLS server certificates, accepting certificates with improper Key Usage (KU) or Extended Key Usage (EKU) attributes. This allows attackers who have compromised certificates issued for non-server purposes to impersonate legitimate servers in TLS connections, enabling man-in-the-middle attacks that leak sensitive information such as authentication credentials or request/response data.
Content-type validation bypass in AgentFlow's localhost web API allows browser-driven cross-origin requests to reach the POST /api/runs and POST /api/runs/validate control plane endpoints without enforcement of application/json. Affected versions prior to commit 1667fa3 (CPE: cpe:2.3:a:berabuddies:agentflow:*) fail to reject non-JSON content types, enabling a malicious web page visited by a local AgentFlow user to issue CORS-simple requests that bypass the browser's same-origin enforcement and submit pipeline operations to the local agent runtime. No active exploitation is confirmed in CISA KEV; the SSVC framework records a PoC with partial technical impact and non-automatable exploitation.
Path traversal in Admidio's document add mode allows authenticated attackers to register arbitrary server files into document folders via unvalidated `name` parameter, enabling arbitrary file read when combined with CSRF. A low-privileged user can trick a documents administrator into clicking a malicious link to register sensitive files like `install/config.php` (containing database credentials) into a publicly accessible documents folder, then download those files using the attacker's own session. The vulnerability chains insufficient input validation (accepts `../` sequences), missing CSRF protection on the `add` action, and `SameSite=Lax` cookies that permit cross-site GET requests from administrators.
Heap-based buffer underwrite in Wazuh's GetAlertData function (versions 1.0.0 through 4.14.3) allows a threat actor who has already compromised a Wazuh agent to corrupt heap metadata on the manager or agent host by injecting a specially crafted alert into the log file monitored by wazuh-logcollector. The root cause is an unsigned integer underflow combined with pointer arithmetic wrapping that causes a NULL byte write exactly one byte before the start of a strdup-allocated buffer, corrupting adjacent heap metadata. No active exploitation is confirmed (absent from CISA KEV), though SSVC classifies a POC as existing; EPSS at 0.01% (2nd percentile) reflects very low observed exploitation probability, and a vendor-released patch is available in version 4.14.4.
Open redirect in the Jenkins Microsoft Entra ID Plugin (formerly Azure AD Plugin) version 666.v6060de32f87d and earlier allows network-accessible phishing attacks against Jenkins users. The plugin fails to validate the post-login redirect URL, enabling an attacker to craft a legitimate-looking Jenkins authentication link that silently forwards victims to an attacker-controlled site after successful Entra ID login. No active exploitation is confirmed (SSVC: none; EPSS 0.03%, 8th percentile), and the vendor has released a patch per the April 2026 Jenkins security advisory.
Missing authorization (CWE-862) in Jenkins GitHub Branch Source Plugin 1967.vdea_d580c1a_b_a_ and earlier allows any authenticated user with only Overall/Read permission to force the Jenkins server to initiate outbound connections to an arbitrary attacker-controlled URL using attacker-supplied GitHub App credentials. This SSRF-adjacent capability enables abuse of Jenkins as an unauthorized network proxy and may expose internal network topology to external actors. No public exploit has been identified and CISA has not added this to the KEV catalog; EPSS of 0.03% (7th percentile) and SSVC exploitation status of 'none' confirm low near-term exploitation likelihood, though the low privilege barrier makes it accessible to any credentialed Jenkins user.
Jenkins Script Security Plugin versions up to and including 1399.ve6a_66547f6e1 expose classpath enumeration to any user holding the low-privilege Overall/Read permission due to a missing authorization check (CWE-862). Any authenticated Jenkins user can query pending and approved Script Security classpaths without elevated rights, leaking internal class names, library paths, and approved script configuration useful for targeted reconnaissance. No public exploit exists and EPSS sits at 0.03% (7th percentile), placing this firmly in the low-urgency tier despite its network-reachable vector.
Missing authorization checks in the Spectra (ultimate-addons-for-gutenberg) WordPress plugin by Brainstorm Force allow authenticated low-privileged users to access restricted functionality or data beyond their intended permission level. All versions through 2.19.22 are affected, and the CVSS vector (PR:L, C:L) confirms that exploitation requires an existing authenticated session and yields only limited confidentiality exposure. No public exploit code exists and SSVC classifies exploitation status as none, making this a low-urgency but actionable remediation target for WordPress sites with open user registration.
Cross-Site Request Forgery in the WordPress 'Barcode Scanner with Inventory & Order Manager' plugin (versions up to and including 1.11.0) allows a remote unauthenticated attacker to induce an authenticated WordPress user into performing unintended state-changing actions on the plugin's behalf. Exploitation requires tricking a logged-in user into visiting a crafted page, consistent with the CVSS UI:R designation and SSVC automatable:no classification. No public exploit has been identified at time of analysis, and EPSS places this at the 3rd percentile (0.01%), indicating negligible observed exploitation pressure.
Server-Side Request Forgery in Dell Disk Library for Mainframe (DLm8700 and DLm2700, versions prior to 7.0.1.0) enables a low-privileged remote attacker to coerce the appliance into issuing server-side HTTP requests to arbitrary internal or external resources. The vulnerability is scored CVSS 4.3 Medium and carries an EPSS of 0.01% (1st percentile), reflecting negligible real-world exploitation probability. No public exploit code exists and CISA SSVC assessment confirms no active exploitation and non-automatable attack path.