Anonymous account takeover in FreeScout help desk before 1.8.224 lets an unauthenticated attacker seize the lowest-id activated agent or administrator account by abusing the public POST /user-setup/{hash}/{invite_sent_at} endpoint. By supplying a single URL-encoded space as the invite hash and a plaintext numeric timestamp, the attacker overwrites the target's email and password and is logged in as that user. No public exploit is identified at time of analysis, but the mechanics are fully disclosed in the GitHub advisory and CVSS is 9.4.
Remote code execution in ktransformers (kvcache-ai) through version 0.6.3 allows unauthenticated attackers to run arbitrary shell commands by sending crafted pickle payloads to the SchedulerServer's ZMQ ROUTER socket, which is bound to all network interfaces (0.0.0.0). The flaw stems from unsafe pickle deserialization of RPC messages, letting an attacker weaponize a malicious __reduce__ method to execute code as the server process. Publicly available exploit code exists and VulnCheck published an advisory; there is no public exploit identified in CISA KEV, so this is not yet confirmed as actively exploited.
Server-Side Request Forgery in the Kirki WordPress plugin before 6.0.12 allows unauthenticated attackers to coerce the server into issuing HTTP requests to arbitrary attacker-chosen hosts because a user-supplied URL is fetched server-side without validation. This is reachable remotely with no authentication or user interaction (CVSS 9.1), publicly available exploit code exists, and a vendor patch has shipped, but there is no public exploit identified as being used in active attacks (not in CISA KEV). Reported by WPScan (EUVD-2026-45889), the flaw is dangerous on WordPress sites hosted in cloud or internal-network environments where the request can pivot to metadata or intranet services.
Stored cross-site scripting in the Unlimited Elements For Elementor WordPress plugin (all versions before 2.0.11) lets an unauthenticated attacker plant a malicious Google review on a targeted business's Google listing that, once fetched via the Serp API and rendered unescaped in the Google Reviews widget, executes JavaScript in the browser of every visitor — including logged-in administrators — of any page showing that Place ID's reviews. Publicly available exploit code exists and the vendor has shipped a fix, but there is no public exploit identified as being used in active attacks. The injection is delivered through third-party review content rather than a direct request to the WordPress site, making it a supply-chain-style stored XSS.
Unauthenticated SQL injection in the Modern Event Calendar Pro and Modern Events Calendar Lite WordPress plugins (all versions before 7.34.0) lets remote attackers extract sensitive database contents by injecting into an unsanitized request parameter used within a SQL statement, reachable through an AJAX action open to unauthenticated users. Publicly available exploit code exists (reported by WPScan), and a vendor patch is available; the CVSS 8.6 rating reflects a scope-changed, high-confidentiality impact with no authentication or user interaction required. No EPSS score or CISA KEV listing was provided, so there is no public exploit identified as being actively exploited at time of analysis.
Authentication bypass via OTP brute-force in the 'Social Login, Passkeys, Magic Link & Email OTP' WordPress plugin before 1.4.1 lets an unauthenticated attacker who knows a registered email address guess the passwordless one-time-password and log in as that user, including an administrator, resulting in full site takeover. The plugin fails to enforce rate limiting or a working lockout on OTP verification and stores the short numeric codes in plaintext, so codes can be exhausted rapidly. Publicly available exploit code exists (reported by WPScan) and a vendor patch is available, though EPSS remains low at 0.14%.
Arbitrary command execution in Roo Code (the open-source AI coding agent) through version 3.54.0 lets attackers slip past the auto-approve execute feature's allowlist/denylist by hiding command substitutions inside shell parameter-expansion defaults. Because the parser replaces parameter expansions with opaque placeholders before scanning for dangerous substitutions, a payload built from an allowlisted prefix carrying a nested $(...) is judged safe, auto-approved on the outer command, and executed by the shell via execa. A public PoC and technical write-up exist (reported by VulnCheck); there is no confirmed active exploitation (not in CISA KEV) and no EPSS score was provided.
Compression-amplification denial of service in the Netty network framework (versions prior to 4.1.136.Final and 4.2.16.Final) allows a remote peer to send a small zlib-compressed SPDY HEADERS block that Netty keeps inflating even after the raw header parser exceeds maxHeaderSize and marks the frame truncated in SpdyFrameCodec. The result is disproportionate CPU consumption and allocation churn (CWE-400) from a tiny input, degrading or crashing services that expose the SPDY codec. No public exploit identified at time of analysis and it is not listed in CISA KEV; impact is availability-only per CVSS 7.5 (A:H).
Memory-amplification denial of service in the Netty network framework (SPDY/3.1 codec) prior to 4.1.136.Final and 4.2.16.Final allows a remote unauthenticated peer to send a single ~2 MiB SPDY SETTINGS frame that forces the server to materialize 262,144 map entries in DefaultSpdySettingsFrame, driving heap growth and ordered-map insertion CPU cost far out of proportion to the input. Affected are Java services that enable Netty's SPDY handler and accept untrusted connections; there is no public exploit identified at time of analysis, and while CVSS is 7.5 the low EPSS-style real-world footprint is tempered by SPDY/3.1 being a deprecated, rarely-enabled protocol.
Stored cross-site scripting in the SlimStat Analytics WordPress plugin before 5.5.0 lets unauthenticated visitors inject a persistent payload through a geolocation value that fires when an administrator opens the analytics reports, enabling admin-session compromise. The flaw is only reachable when the plugin is configured to use the Cloudflare geolocation provider. Publicly available exploit code exists (reported by WPScan) and a vendor patch is available; no public exploit identified as actively exploited and it is not in CISA KEV.
Stack-based buffer overflow in the Tenda AC10 router (firmware 16.03.10.09_multi_TDE01) allows a remote, authenticated attacker to corrupt memory in the httpd/netctrl web service by supplying oversized GetValue/SetValue arguments to the fromAdvSetLanip handler at /goform/AdvSetLanip, potentially achieving code execution or a device crash. Publicly available exploit code exists (published via VulDB and a GitHub advisory), but there is no public exploit identified as actively exploited in the wild. The CVSS 4.0 base score of 7.4 reflects high confidentiality, integrity, and availability impact combined with a low-privilege requirement.
Reflected cross-site scripting in the WordPress plugin 'Tag Groups is the Advanced Way to Display Your Taxonomy Terms' before version 2.2.0 allows unauthenticated attackers to run arbitrary JavaScript in the browser of a logged-in Editor (or higher) who clicks a crafted link, because one AJAX parameter is reflected unescaped into an HTML-typed response. Publicly available exploit code exists (published by WPScan), but the flaw is not listed in CISA KEV and carries a low EPSS score (0.17%, 7th percentile), indicating no evidence of widespread active exploitation. Successful exploitation can hijack an editorial session, letting the attacker act with the victim's WordPress capabilities.
Reflected Cross-Site Scripting in the LearnPress WordPress plugin before 4.4.1 lets a remote attacker execute arbitrary JavaScript in the browser of a logged-in instructor or administrator who opens a crafted link, because a search parameter is reflected into an HTML attribute without escaping. Publicly available exploit code exists (published by WPScan), but there is no public exploit identified as being used in active attacks; EPSS is low at 0.15% (5th percentile). A vendor patch is available in version 4.4.1.
Heap-based buffer overflow in libvips through version 8.18.0 lets an attacker who supplies a crafted image to the vipsload operation corrupt heap memory. The library incorrectly computes image dimensions, allowing an integer overflow (CWE-190) in the element/pel/line/image size calculation that produces an undersized allocation followed by an out-of-bounds write. There is no public exploit identified at time of analysis and it is not in CISA KEV; the issue is fixed in 8.18.1. CVSS 4.0 base score is 7.0 with high integrity and availability impact.
Path traversal in the All-in-One WP Migration and Backup WordPress plugin (versions 7.87 through 7.105) allows unauthenticated network attackers to create or append log files at arbitrary filesystem locations outside the plugin's intended storage directory. A publicly available proof-of-concept exploit exists via WPScan and the SSVC framework classifies exploitation as automatable, though EPSS at 0.16% (6th percentile) indicates limited observed opportunistic activity and no CISA KEV listing confirms active exploitation at time of analysis. The constrained write capability - log file creation and appending only, not arbitrary content injection - limits direct impact, but filesystem write access outside the web root could serve as a precursor step in chained attacks depending on server permissions.
PayPlus Payment Gateway WordPress plugin before 8.2.2 exposes an unauthenticated AJAX action that performs no authorization or order-ownership validation, allowing any remote, unauthenticated attacker to retrieve the secret order key of arbitrary WooCommerce orders. Under certain plugin configurations, the same endpoint additionally permits modification of order statuses, extending impact to data integrity. A publicly available proof-of-concept exists per WPScan reporting, though EPSS sits at only 0.13% (3rd percentile), indicating limited observed exploitation despite the SSVC Automatable=yes classification - no public exploit identified at time of analysis beyond the POC, and this CVE is not currently listed in CISA KEV.
Server-side request forgery in LimeSurvey through versions 6.17.10 and 7.0.4 exposes internal network infrastructure and cloud instance metadata to authenticated attackers via the REST API survey template endpoint. The vulnerability stems from unsanitized use of the HTTP Host header inside the getTemplateData() function, enabling the application server to be weaponized as a proxy to reach internal services and cloud metadata APIs such as AWS IMDSv1 at 169.254.169.254, potentially yielding IAM role credentials. A public proof-of-concept exploit is available via GitHub, raising the urgency of remediation despite the absence of a CISA KEV listing; no public exploit identified at time of analysis for active in-the-wild campaigns, but POC lowers the bar significantly for opportunistic exploitation.
Unauthenticated file upload in the JDownloads download-manager extension for Joomla allows a remote attacker to place an executable file (e.g. a PHP web shell) on the server and achieve full remote code execution. The flaw affects the JDownloads 4.1 line per the referenced advisory and requires no authentication or user interaction, so any internet-reachable Joomla site running the extension is exposed. There is no public exploit identified at time of analysis and it is not listed in CISA KEV, but the trivial exploitation profile makes it a high-priority patching target.
Unauthenticated file upload in the DJ-Classifieds extension for Joomla allows remote attackers to upload arbitrary files and achieve full remote code execution on the underlying web server, without any authentication or user interaction. The flaw carries a maximum CVSS 4.0 score of 10.0 and is classified as CWE-434 (unrestricted upload of dangerous file types); a third-party technical write-up (mysites.guru) exists, but no public exploit code or CISA KEV listing has been confirmed at the time of analysis. Any Joomla site running this classifieds/listings extension is exposed to complete server compromise.
Information disclosure in FileThingie 2.5.7, a single-file PHP web-based file manager, lets a remote attacker retrieve sensitive information through the ft2.php component. The flaw is documented in a third-party vulnerability-research repository, indicating exploitation details are likely public, though it is not listed in CISA KEV. The published CVSS 9.9 rating overstates impact relative to the description, which describes only information disclosure rather than full compromise.
Eval-based command injection in the Net::DNS module for Perl (versions through 1.55) lets a malicious or man-in-the-middle DNS server run arbitrary shell commands on a client that parses an EDNS EXTENDED-ERROR option. The EXTRA-TEXT field is tokenised and passed to Perl's eval with escaping for $ and @ but not backticks, so a crafted response reaching option('EXTENDED-ERROR') in array context executes attacker-supplied commands. Rated CVSS 9.8; no public exploit identified at time of analysis, though the advisory publishes a working {0:`"<command>"`} payload, EPSS is low at 0.41%, and it is not in CISA KEV.
Remote code execution in Piwigo 16.3.0 and earlier lets an unauthenticated attacker inject arbitrary PHP through the web installer, which writes unsanitized POST parameters (prefix, dbpasswd, dbhost, dbname, dbuser) into local/config/database.inc.php where they execute on every page load. The bug is a PHP 8 regression: the addslashes() guard is gated on get_magic_quotes_gpc(), removed in PHP 8.0, so escaping is silently skipped and raw input reaches PHP source. No public exploit identified at time of analysis, but the flaw is trivially weaponizable when the installer is reachable, yielding full server compromise.
Arbitrary code execution in SJCAM SJ4000-Air action cameras (firmware V1.4C and earlier), and unbranded whitelabel devices built on the same v1.4C firmware, is possible via a maliciously crafted FEX file - the Allwinner firmware/partition configuration format used by these AllwinnerTech-based devices. The flaw is classified as code injection (CWE-94) with a supplied CVSS of 9.8; no public exploit or CISA KEV listing exists at time of analysis, though a detailed reverse-engineering writeup of the device firmware is publicly referenced. The AV:N network rating in the supplied vector is inconsistent with the description's file-processing mechanism and warrants verification.
Authentication bypass in SailPoint IdentityIQ lets an unauthenticated remote attacker reach protected APIs and data because OAuth bearer tokens are improperly validated. The flaw (CWE-287) affects all IdentityIQ versions up to the patched releases 8.5p1, 8.4p4, and 8.3p5, and carries a critical CVSS of 9.8. No public exploit identified at time of analysis and EPSS is low (0.22%), but the total technical impact against an identity-governance platform makes it a high-priority patch.
SQL injection in Apache Syncope allows an administrator holding sufficient entitlements to execute arbitrary SQL through stacked queries by abusing unsanitized sort parameters, affecting the 3.0.x, 4.0.x, and 4.1.x branches up to 3.0.16, 4.0.6, and 4.1.1 respectively. Because stacked queries are supported, an attacker can go beyond data theft to modify or destroy identity data and potentially chain to further backend compromise. There is no public exploit identified at time of analysis and it is not listed in CISA KEV; note the NVD CVSS 9.8 (PR:N) contradicts the vendor description, which explicitly requires an authenticated privileged administrator.
Privilege escalation in Apache Syncope's identity-management engine lets a self-service user grant themselves defined Roles via a single REST API call, effectively promoting a low-privileged or newly self-registered account to administrator. It affects deployments running the all-Java user workflow adapter, or the Flowable adapter with a BPMN definition that does not require admin approval for self-registration or self-update, across versions 3.0.0-M0-3.0.16, 4.0.0-M0-4.0.6, and 4.1.0-M0-4.1.1. The Apache-issued advisory rates it CVSS 9.8; no public exploit identified at time of analysis and it is not on CISA KEV.
Predictable salt generation in Crypt::Password through version 0.28 for Perl weakens the security of stored password hashes by seeding salts with Perl's built-in rand() function, which is not cryptographically secure. An attacker who obtains a password hash database can more easily precompute or predict salts, reducing the cost of offline cracking. There is no public exploit identified at time of analysis, EPSS is low (0.14%, 4th percentile), and CISA SSVC records no observed exploitation.
Use-after-free in Google Chrome desktop versions prior to 150.0.7871.128 allows a remote attacker to corrupt memory and potentially achieve renderer code execution after a victim visits a crafted web page. The flaw carries a critical CVSS 9.6 owing to its network vector, low complexity, and scope-changing impact, though it requires user interaction (loading a malicious page). No public exploit has been identified at time of analysis and the EPSS probability is low (0.23%, 14th percentile).
Use-after-free memory corruption in Google Chrome for desktop before version 150.0.7871.128 lets a remote attacker corrupt heap memory and potentially achieve code execution or information disclosure after a victim visits an attacker-controlled page. The flaw carries a CVSS 9.6 with a scope change reflecting the browser sandbox boundary, but currently shows no public exploit and a low EPSS probability (0.22%, 12th percentile). It is not listed in CISA KEV, indicating no confirmed active exploitation at time of analysis.
Remote code execution and information disclosure in Google Chrome desktop before 150.0.7871.128 stems from a use-after-free flaw (CWE-416) that a malicious web page can trigger when a victim simply visits it. The CVSS 3.1 score of 9.6 with a scope change reflects a likely sandbox-boundary crossing, giving an attacker high impact on confidentiality, integrity, and availability. There is no public exploit identified at time of analysis and the EPSS probability is low (0.22%, 12th percentile), but browser use-after-free bugs are a historically favored exploitation target.
OS command injection in GPT-SoVITS (RVC-Boss) through release 20250606v2pro lets remote unauthenticated attackers run arbitrary commands via the Gradio web UI. The webui.py helper functions for ASR, audio slicing, denoise, and UVR5 vocal separation build shell commands with shell=True and splice user-supplied path textbox values directly into them, so shell metacharacters in a path field are executed by the host. The CVSS 4.0 score is 9.3; there is no public exploit identified at time of analysis and it is not listed in CISA KEV, but the flaw is trivially triggerable against any exposed instance.
Unrestricted file upload in Metasoft (美特软件) MetaCRM up to 6.4.0 Beta06 exposes a network-accessible, unauthenticated upload endpoint at /business/qnaire/upload.jsp that accepts arbitrary file types via the File argument, enabling potential web shell deployment on the underlying Java application server. Publicly available exploit code exists (E:P per CVSS 4.0 supplemental metric), and the vendor did not respond to responsible disclosure, leaving no official patch or advisory. No KEV listing exists, but the combination of zero-authentication requirement, public POC, and no vendor patch elevates real-world risk beyond the conservative CVSS 4.0 impact metrics suggest.
Unrestricted file upload in D-Link DNS-320 NAS firmware 1.0.2 exposes the `/web/web_file/upload.php` endpoint to unauthenticated remote attackers who can upload arbitrary file types - including PHP webshells - enabling effective remote code execution on the device. The CVSS 4.0 base vector confirms no authentication, user interaction, or special attack conditions are required (PR:N/UI:N/AC:L). A public exploit has been disclosed (CVSS 4.0 E:P modifier, corroborated by a referenced Feishu exploit document), and the DNS-320 is an end-of-life device for which no vendor patch has been identified, leaving exposed deployments persistently vulnerable.
SQL injection in Beijing Shenzhou Shihan Technology Multimedia Integrated Business Display System 8.2.2 allows remote attackers to manipulate backend database queries via the Structure_ID parameter in an admin-facing JSP endpoint. The CVSS 4.0 vector (PR:N/UI:N) indicates no authentication or user interaction is required, though the /admin/ path prefix creates meaningful uncertainty about whether access controls exist that were not reflected in the scoring. A public POC has been released and linked from the VulDB submission, lowering the bar for exploitation. No vendor-issued patch has been identified at time of analysis.
Privilege escalation to remote code execution in dotCMS 21.02 through 26.06.22-03 lets a low-privileged authenticated backend user abuse improper authorization checks in the ToolGroupResource (REST) and RoleAjax (DWR) endpoints to self-assign the administrative layout and self-grant the CMS Administrator role, then upload a crafted OSGi bundle whose BundleActivator runs arbitrary shell commands on the host. The endpoints failed to verify the caller was an admin before honoring layout- and role-assignment requests, so any backend account could bootstrap itself to full administrator. There is no public exploit identified at time of analysis, but an upstream fix (PR #36344) is available and the vendor-supplied CVSS 4.0 score is 9.4 (Critical).
Authentication bypass in Red Hat OpenShift HyperShift (hosted control planes) lets a network-reachable attacker impersonate a Konnectivity agent because the proxy-server's agent-facing listener was configured without --cluster-ca-cert and without token-based agent authentication, so client certificates go unvalidated. Any remote party who can reach the Konnectivity cluster endpoint can register as an unauthenticated agent, join the routing pool, and then proxy, inspect, modify, or drop control-plane-to-node traffic. No public exploit identified at time of analysis; the issue is corrected upstream in openshift/hypershift PR #9031 by adding the missing --cluster-ca-cert flag.
Authentication/authorization bypass in the Balbooa Gridbox extension for Joomla allows an already-authenticated user to escalate to full administrative control of the CMS. CWE-288 indicates the flaw stems from an alternate-path or channel that skips proper authorization checks; there is no public exploit identified at time of analysis and it is not listed in CISA KEV. The vendor-assigned CVSS 4.0 score of 9.4 reflects the total compromise of confidentiality, integrity, and availability that admin takeover implies.
Stored and reflected cross-site scripting in ThemeXpert's JMedia media-manager extension for Joomla lets an attacker upload a malicious SVG file that, because it is served without an X-Content-Type-Options: nosniff header, is interpreted and executed as active script in the context of the site. There is no public exploit identified at time of analysis and the flaw is not on CISA KEV, but the attack is well-understood and trivially reproducible. The supplied CVSS 4.0 base score of 9.4 appears inflated for a script-injection issue, so treat the raw number with caution.
Authenticated arbitrary file upload in the ThemeXpert JMedia media-manager extension for Joomla lets an authenticated privileged user (PR:H) write executable files to the server and achieve remote code execution. Uploads accept executable content and polyglot filenames, and the extension's chmod handling fails to strip execute bits, so a planted file can be directly invoked by the web server. Rated CVSS 4.0 9.4 (Critical); no public exploit identified at time of analysis and it is not listed in CISA KEV.
ThumbPress WordPress plugin (all versions before 6.2.2) allows any authenticated subscriber-level user to deactivate the plugin by exploiting a missing capability check on an AJAX action endpoint. This disrupts the site's image-handling functionality, constituting a targeted availability and integrity attack against WordPress installations. A publicly available exploit exists per WPScan; the vulnerability is not listed in CISA KEV, so active widespread exploitation is not confirmed at time of analysis.
Cross-site request forgery in the MailerSend WordPress plugin before 1.0.8 enables an unauthenticated remote attacker to wipe the plugin's SMTP configuration and deactivate it entirely by tricking a logged-in administrator into visiting a crafted page. The plugin's configuration-delete action validates the manage_options capability but entirely omits WordPress nonce verification, making administrator sessions exploitable via social engineering. A publicly available exploit demonstrates the attack; successful exploitation silently breaks all outbound email from the affected WordPress site, impacting password resets, order notifications, and transactional messaging.
Denial of service in FreeRDP servers (versions <=3.27.1) allows unauthenticated remote attackers to crash the service by forging a malicious encrypted client random during RDP Standard Security negotiation. Because the server publishes its RSA public key, an attacker can craft a ciphertext whose decrypted plaintext spans the full RSA modulus (up to 256 bytes for RSA-2048), overflowing a fixed 32-byte heap buffer in crypto_rsa_common() by roughly 224 attacker-controlled bytes before any authentication occurs. No public exploit identified at time of analysis, and the flaw is not listed in CISA KEV; the fix landed in FreeRDP 3.28.0.
Unauthenticated information disclosure in the Network-AI (npm: network-ai) package versions 5.12.2 through 5.13.3 lets remote actors read the ApprovalInbox even when an operator has configured a checkAuth/secret, because the authorization check was never wired into the GET read routes. Exploitation exposes full approval-request content - including pending shell-command strings, file paths, justifications, and risk levels - and a hardcoded Access-Control-Allow-Origin:* header allows any website an operator visits to exfiltrate the same data cross-origin. This is an incomplete fix for GHSA-mxjx-28vx-xjjj; no public exploit is identified at time of analysis and the package is not listed in CISA KEV.
OS command injection in AVideo before version 29.0 allows remote attackers to execute arbitrary commands via the Live plugin's on_publish.php endpoint. The flaw is an incomplete fix for CVE-2026-45578: the execAsync() helper re-wraps already-escaped input inside a double-quoted 'sh -c' invocation, which lets shell command substitution using $() or backticks bypass the escapeshellarg() sanitization entirely. There is no public exploit identified at time of analysis, but the network, no-privilege, no-interaction vector (CVSS 4.0 base 9.3) makes this a high-priority patch for exposed AVideo installations.
Blind SQL injection in Windu CMS 4.1 lets remote attackers inject SQL syntax through the URL path carried in an HTTP header, requiring no authentication per the PR:N vector. Because the vendor (jcd) never responded to CERT-PL disclosure, only version 4.1 is confirmed vulnerable while other releases may also be affected. No public exploit identified at time of analysis and the flaw is not in CISA KEV, but the unauthenticated network-facing nature and CWE-89 root cause make it a high-severity data-exposure risk.
Stored cross-site scripting in Chamilo LMS 1.11.38 and earlier lets any unauthenticated attacker inject persistent JavaScript through the public user registration form, which then executes in an administrator's browser when they review registrations, enabling full admin account takeover. The flaw carries a CVSS 9.3 rating driven by its scope change and high confidentiality/integrity impact; no public exploit is identified at time of analysis, though the vendor GitHub Security Advisory (GHSA-gcjp-f7jm-rrrg) confirms the issue and a fix. Because the injection point is an anonymous, self-service form, mass or opportunistic abuse is realistic once a payload is planted.
Client-side double-free (CWE-415) in FreeRDP's .rdp connection-file parser lets an attacker who tricks a victim into opening a malicious .rdp file corrupt heap memory, potentially leading to a crash or code execution in xfreerdp/sdl-freerdp/wlfreerdp. The flaw is in freerdp_client_rdp_file_apply_to_settings() (client/common/file.c), where a non-owning pointer to the settings-owned MonitorIds array is freed on a strtoul error path without clearing settings->MonitorIds, so freerdp_settings_free() frees the same buffer again at teardown. All 3.x releases through 3.27.1 are affected in the default configuration and it is fixed in 3.28.0; there is no CISA KEV listing and no public exploit identified at time of analysis, and no EPSS score was provided.
Unauthenticated comment manipulation in the Kirki WordPress plugin (versions before 6.0.12) allows remote attackers to overwrite the content of any existing comment or inject new pre-approved comments under a spoofed identity, bypassing moderation entirely. The root cause is a missing authorization check (CWE-862) on a REST API route exposed by the plugin by default. A publicly available proof-of-concept exploit exists per WPScan, and SSVC classifies the attack as automatable, increasing the likelihood of mass exploitation against unpatched sites. No CISA KEV listing is present, but the trivial attack path warrants prompt patching.
Missing authorization on the booking cancellation endpoint in the WP Travel WordPress plugin (all versions before 11.7.1) permits any unauthenticated internet visitor to cancel arbitrary bookings on affected sites. The action is exposed without capability checks or ownership verification, meaning no login or elevated role is required. A public proof-of-concept is available via WPScan; no confirmed active exploitation in CISA KEV at time of analysis, though the trivial attack complexity makes opportunistic abuse realistic.
PayPlus Payment Gateway WordPress plugin before 8.2.2 exposes an unauthenticated AJAX action that performs no authorization or order-ownership validation, enabling any remote unauthenticated actor to tamper with payment-related metadata on arbitrary WooCommerce orders across the site. A publicly available proof-of-concept exploit exists, and the SSVC framework classifies this as automatable with partial technical impact, making scripted mass-scanning of vulnerable WooCommerce shops feasible. No active exploitation is confirmed in CISA KEV, and the EPSS score of 0.13% (3rd percentile) suggests opportunistic rather than widespread exploitation at time of analysis.