Hardcoded static credentials in Cisco Secure Firewall Management Center (FMC) Software allow an unauthenticated remote attacker to log in to the web interface using a built-in low-privileged account and access sensitive data. The flaw affects an extensive range of FMC versions from 7.0.0 through 10.0.1 and is rooted in CWE-259 (Use of Hard-coded Password). Cisco has self-elevated the Security Impact Rating to High - despite a CVSS 5.3 Medium score - explicitly because this credential foothold can be chained with other FMC vulnerabilities to escalate privileges, making the real-world risk materially higher than the base score implies. No public exploit or CISA KEV listing has been confirmed at time of analysis.
DNS rebinding in MCP Ruby SDK's StreamableHTTPTransport (mcp gem, all versions prior to 0.23.0) exposes locally running MCP servers to browser-driven tool invocation without authentication. The transport accepted HTTP requests without validating Host or Origin headers, allowing a malicious webpage to exploit short-TTL DNS re-resolution to reach the victim's loopback-bound server and call any registered MCP tool. No public exploit code is identified at time of analysis, and no CISA KEV listing exists; however, the CVSS 4.0 score of 6.9 with VC:H and SC:H reflects a meaningful confidentiality risk for developers actively using local MCP tooling alongside a browser.
Stored cross-site scripting in the PhotoSwipe WordPress plugin (all versions through 4.1.1.1) allows an authenticated Author-level user to plant a persistent JavaScript payload inside a link's title attribute, which the plugin writes unescaped into the page DOM as a lightbox caption. Any visitor - including site administrators - who clicks the link triggers payload execution in their browser, enabling session hijacking and full WordPress takeover. A publicly available proof-of-concept exists; no patched release has been identified at time of analysis.
OS command injection in OliveTin versions 3000.2.0 through 3000.16.x allows an authenticated user to execute arbitrary shell commands by supplying a crafted argument value to a Shell-mode action that uses a custom regex: argument type. The root cause is that checkShellArgumentSafety in service/internal/executor/arguments.go omitted regex: types from its unsafe-argument blocklist, permitting regex-validated values to be interpolated unsanitized into an sh -c command string via wrapCommandInShell. No active exploitation has been confirmed (no CISA KEV listing), but a public GitHub security advisory and a fix-bearing release (3000.17.0) are available.
Cookie attribute injection in undici's setCookie function allows attacker-controlled domain values or unparsed array entries to silently append, strip, or override attributes such as SameSite, HttpOnly, and Secure. Affected are all undici releases before 6.28.0, the 7.x branch before 7.29.0, and the 8.x branch before 8.9.0. In multi-tenant or reverse-proxy deployments that scope session cookies to tenant-supplied domains, this flaw enables CSRF protection bypass by downgrading or overriding the SameSite attribute, with no public exploit identified at time of analysis.
Cross-site scripting in MathLive (npm/mathlive <= 0.109.2) allows arbitrary JavaScript execution when applications render untrusted LaTeX containing \text{} or \mbox{} commands. The vulnerability bypassed a prior partial fix in version 0.104.0 that addressed attribute-bearing constructs but left text-content reflection in both the HTML (Box.toMarkup) and MathML (atom-to-math-ml.ts) rendering paths unescaped, with both outputs flowing into innerHTML sinks. A publicly available proof-of-concept exploit is documented in the GitHub advisory; no active exploitation has been confirmed in CISA KEV at time of analysis.
Uncontrolled memory growth in the MCP Ruby SDK (mcp gem) prior to 0.23.0 allows any peer process communicating via stdio to OOM-kill the host Ruby process by sending a continuous byte stream without a newline, exhausting available system memory. Both the server-side MCP::Server::Transports::StdioTransport and client-side MCP::Client::Stdio components are affected, meaning Ruby applications acting as either MCP servers or MCP clients are vulnerable. No public exploit has been identified at time of analysis, and no CISA KEV listing exists, but the attack is mechanically trivial for any process with stdio access to the target.
Server-side request forgery in swagger-typescript-api <= 13.12.1 allows an attacker who controls or influences an OpenAPI spec to force the generator process to issue arbitrary HTTP GET requests to any host reachable from the generator's network - including loopback addresses, RFC-1918 ranges, and cloud instance-metadata endpoints at 169.254.169.254 - during code generation. Developers and CI/CD pipelines that process untrusted or third-party remote specs via the --url flag are directly in scope; the companion auth-token forwarding finding (filed separately by the same researcher) can escalate this from blind SSRF to direct credential exfiltration. A public proof-of-concept with step-by-step reproduction instructions was published alongside the advisory; no active exploitation has been confirmed in CISA KEV.
Unsafe tar extraction in Penelope Shell Handler (pip package penelope-shell-handler, versions prior to 0.19.3) enables a malicious or compromised remote session to write arbitrary files on the penetration tester's (operator's) machine by returning a crafted tar archive containing path-traversal entries such as `../`. The vulnerability is exclusively triggered by the Unix `download` command path and can be chained to operator-side code execution by overwriting `~/.penelope/peneloperc`, which Penelope `exec()`s on startup and on `reload`. A fully working proof-of-concept is included in the GitHub Security Advisory, demonstrating the complete file-write-to-RCE chain. No public record of active exploitation (CISA KEV) has been identified at time of analysis.
CRLF injection in undici's HTTP/1.1 dispatcher enables HTTP header injection and potential request smuggling when applications pass duck-typed blob-like bodies whose type property is populated from untrusted input. Affected are the 6.x branch before 6.28.0, all 7.x releases from 7.0.0 through 7.28.x, and all 8.x releases from 8.0.0 through 8.8.x, when callers use the request, stream, pipeline, or dispatch APIs with hand-rolled blob-shaped objects rather than native Blob instances or the fetch API. An attacker who controls the type value can append arbitrary HTTP headers to the outgoing request, potentially smuggling a second request past an upstream proxy or server. No public exploit identified at time of analysis and KEV status is not confirmed in the provided data.
Easy Appointments WordPress plugin through version 3.12.26 exposes an insecure direct object reference (IDOR) that lets any subscriber-level user overwrite the customer metadata of another user's appointment by reusing a nonce harvested from their own edit form. The shared nonce mechanism provides CSRF protection but no ownership enforcement, so an attacker can target arbitrary appointment IDs without restriction. A publicly available proof-of-concept exists (WPScan), and the vulnerability can be chained into a notification hijack: when an administrator approves an affected appointment with customer notifications enabled, the confirmation email is delivered to the attacker-controlled address rather than the legitimate customer, exposing booking details to an unauthorized party.
Information disclosure in GitLab CE/EE (all versions from 10.1.0 before 19.0.5, 19.1 before 19.1.3, and 19.2 before 19.2.1) allows an authenticated user holding only the Developer role to reach unauthorized information because internal request handling enforces insufficient access controls (CWE-201). Publicly available exploit code exists (referenced HackerOne report #3658324), but there is no public exploit identified as being used in active attacks. With a CVSS of 8.5 driven by a scope-changing confidentiality impact, this is a meaningful privilege/authorization boundary failure rather than a full remote code execution flaw.
Unbounded session growth in MCP Ruby SDK's StreamableHTTPTransport allows unauthenticated remote attackers to exhaust server process memory by repeatedly sending initialize requests. Affected versions prior to 0.23.0 defaulted to no session expiry and no concurrent session cap, meaning each initialize request created a persistent ServerSession object that was never reclaimed without an explicit client DELETE. No public exploit has been identified at time of analysis, and exploitation is not confirmed by CISA KEV, but the attack is trivially automatable given the network-accessible, unauthenticated HTTP endpoint.
Unauthorized disclosure of project import source information in GitLab CE/EE stems from a missing authorization check (CWE-863), allowing unauthenticated remote users to view sensitive metadata about how a project was originally imported. All GitLab installations running versions from 16.6 up to 19.0.4, 19.1.2, and 19.2.0 are affected. A publicly available exploit exists via a disclosed HackerOne report, though no confirmed active exploitation (CISA KEV) has been recorded at time of analysis.
Unauthenticated information disclosure in the ShinyStat Analytics WordPress plugin (versions before 1.0.17) exposes non-published WooCommerce product data - including draft, pending, and private listings - via an unprotected REST API endpoint that performs no authorization check. Any internet-accessible WordPress/WooCommerce site running an affected version is vulnerable without credentials or user interaction, consistent with the AV:N/AC:L/PR:N/UI:N CVSS vector. A publicly available proof-of-concept is documented by WPScan; no active exploitation has been confirmed in CISA KEV at time of analysis.
Order integrity bypass in the PayU CommercePro Plugin for WordPress (versions through 3.8.9) enables unauthenticated remote attackers to tamper with WooCommerce order totals, shipping details, and metadata without paying the correct amount. The plugin processes payment-gateway callbacks without verifying the cryptographic signature that PayU issues, meaning any HTTP client can forge a callback and manipulate arbitrary orders. A publicly available proof-of-concept exploit exists per WPScan; no active exploitation has been confirmed in CISA KEV at time of analysis.
Improper authorization in a GitLab CE/EE projects API endpoint allows an authenticated user holding the Maintainer role to modify protected branch configurations beyond what their role should permit, across all versions from 12.8 through 19.2.0. Maintainer-role users - commonly assigned in enterprise GitLab deployments - can exploit this to weaken or remove branch protection rules that enforce code review gates and direct-push restrictions. A publicly available exploit exists via HackerOne report 3807593; no confirmed active exploitation (CISA KEV) has been identified at time of analysis, though the POC materially lowers the bar for exploitation.
Reflected cross-site scripting in GitLab CE/EE across a vast version range (14.0 through pre-patch releases) enables an unauthenticated attacker to execute arbitrary JavaScript in a victim's browser by enticing them to open a crafted URL. The CVSS vector confirms no authentication is required on the attacker side (PR:N), user interaction is needed (UI:R), and the scope changes (S:C) - meaning the injected script runs outside the originating page's trust boundary, enabling session hijacking, credential theft, or actions performed on the victim's behalf. A publicly available exploit exists on HackerOne (report #3539833), raising the practical risk above what the moderate CVSS score of 4.7 alone suggests.
Confidential issue title disclosure in GitLab CE/EE affects all versions from 8.8 through 19.2 (pre-fix), allowing unauthenticated access to sensitive issue titles via improper authorization checks on publicly accessible merge requests. An attacker who can access a public merge request linked to a confidential issue can read the confidential issue's title without any project membership or authentication. No active exploitation confirmed in CISA KEV, but a publicly available exploit exists via HackerOne report 3708242, and EPSS data was not provided - risk is moderate given broad version impact and low exploitation complexity.
Improper access control in GitLab CE/EE exposes CI/CD test report contents to authenticated users holding only guest-role permissions, allowing unauthorized read access to data from projects they should not be able to view. Affected versions span 18.4 through pre-19.0.5, 19.1 through pre-19.1.3, and 19.2 through pre-19.2.1. Publicly available exploit code exists via a disclosed HackerOne report, though no active exploitation has been confirmed by CISA KEV at time of analysis.
Cross-connection information disclosure in Apache Traffic Server (versions 8.0.0-8.1.9, 9.0.0-9.2.14, and 10.0.0-10.1.3) allows remote unauthenticated attackers to receive data belonging to other clients because the proxy improperly reuses upstream server sessions and tunnels. Because the scope changes across trust boundaries, one client can be served another client's response data, making this a confidentiality-critical issue in a shared caching/proxy tier. There is no public exploit identified at time of analysis, and it is not listed in CISA KEV; exploitation is timing/condition dependent (CVSS AC:H).
Path traversal in open-iscsi allows remote MITM attackers to create root-owned files at arbitrary filesystem locations and inject lines into records by embedding RFC 3722-prohibited characters in IQN target names returned during iSNS or firmware discovery. All open-iscsi versions through commit 668ca1df9c9a1e9bdd5c999ae1d67c9c8909237e are affected across the iSNS discovery, firmware discovery, and command-line target-name paths. No public exploit code or CISA KEV listing has been identified at time of analysis; however, the CVSS 4.0 score of 6.9 with network vector and no privileges required warrants attention in enterprise storage environments where iSCSI discovery is exposed.
Denial-of-service in veraPDF-parser allows a remote unauthenticated attacker to crash or hang the PDF validation service by submitting a crafted PDF containing a Type 1 font whose /FontDescriptor /FontFile PostScript program exploits one of three unbounded resource primitives: a massive array allocation, a zero-increment for-loop, or a self-referential recursive user-dictionary lookup. All veraPDF-parser releases prior to 1.30.2 and 1.31.23 are affected across both active version branches. No public exploit code or active exploitation (CISA KEV) has been identified at time of analysis; vendor-released patches exist for both branches.
Memory and CPU exhaustion in veraPDF-parser's embedded PostScript interpreter allows remote unauthenticated attackers to crash the PDF validator by submitting a single crafted PDF. All 1.30.x releases prior to 1.30.2 and all 1.31.x releases prior to 1.31.23 of the Maven artifact org.verapdf:parser are affected. No public exploit code has been confirmed at time of analysis, but the GHSA advisory discloses the exact operator names, payload byte sequence, and affected source line numbers, making independent reproduction trivial without requiring any structural PDF framing.
Xlight FTP Server before 3.9.5 on Windows leaks the system's GetTickCount() value to unauthenticated remote attackers via the standard FTP listener. Sending a USER command with a username ending in the :adm suffix triggers an internal admin protocol code path pre-authentication, causing the server to embed Windows timing data in the FTP 331 response - no separate admin port or configuration change required. No active exploitation is confirmed (not in CISA KEV), but the attack is trivially executable against any default installation with network access to the FTP port.
Non-atomic JSON Patch application in cJSON through 1.7.19 allows an attacker who controls the patch document to silently corrupt the target JSON structure even when the API returns a failure status. The apply_patch() function in cJSON_Utils.c deletes existing target members before completing operation validation, meaning a malformed replace (missing value) or move (unresolvable destination) permanently destroys data from the in-memory document tree - defeating the RFC 6902 all-or-nothing contract that callers rely on to reject bad patches safely. No public exploit has been identified at time of analysis, but a detailed researcher disclosure and direct source code reference are publicly available, which may lower the barrier to exploitation; KEV status is not confirmed.
Memory corruption in Apache Traffic Server during HPACK/XPACK header decoding exposes affected deployments to denial of service. Versions spanning the 8.x, 9.x, and 10.x release lines are affected, with unauthenticated remote attackers able to craft malformed compressed headers that trigger an integer overflow (CWE-190), corrupting server memory. The CVSS vector (AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H) scores 5.9 Medium, reflecting that while no authentication is required, elevated attack complexity limits opportunistic mass exploitation; no public exploit has been identified at time of analysis and this vulnerability is not listed in CISA KEV.
Unanchored regular expression matching in Apache Traffic Server exposes a high-severity bypass that allows remote unauthenticated attackers to circumvent regex-based access controls, potentially leaking protected content (C:H) and enabling limited unauthorized writes (I:L). All 9.0.x through 9.2.14 and 10.0.x through 10.1.3 deployments that rely on regex-driven rules for routing, ACL, or header policy enforcement are at risk. No public exploit code has been identified at time of analysis, and CISA has not listed this in KEV, but the low-complexity, unauthenticated network attack path makes it a realistic opportunistic target for any actor aware of the flaw.
HTTP request smuggling in Apache Traffic Server allows unauthenticated remote attackers to interfere with how the proxy and backend servers interpret HTTP request boundaries, enabling cache poisoning and limited information disclosure. Versions 9.0.0 through 9.2.14 and 10.0.0 through 10.1.3 are confirmed affected per Apache advisory. The Scope Changed (S:C) CVSS metric reflects that exploitation crosses the proxy boundary to impact downstream backend systems. No public exploit code or CISA KEV listing has been identified at time of analysis.
Heap-based buffer overflow in Autel MaxiCharger AC Elite Home EV chargers enables arbitrary code execution by physically present, unauthenticated attackers via malformed USB packets. The device's USB packet handler copies attacker-controlled data into a fixed-length heap buffer without validating input length, allowing full control of device execution context. Reported by Zero Day Initiative (ZDI-CAN-29048 / ZDI-26-436); no public exploit code identified at time of analysis and not listed in CISA KEV.
Stack-based buffer overflow in the NFC card response handler of Autel MaxiCharger AC Elite Home EV chargers enables arbitrary code execution by a physically present attacker. The device's NFC interface fails to enforce bounds on a fixed-length stack buffer when processing card responses, allowing a maliciously crafted NFC card to overwrite stack memory and redirect execution flow to attacker-controlled code. No authentication is required to trigger the flaw - proximity to the device and a crafted NFC card are the sole prerequisites. No public exploit code has been identified at time of analysis, and the vulnerability is not listed in the CISA KEV catalog.
Server-Side Request Forgery in Pydantic AI's UI adapter layer (versions 1.65.0-1.105.0 and 2.0.0b1-2.0.0b5) allows unauthenticated network clients to redirect the application server into fetching arbitrary cloud-storage objects using the server's own credentials. UploadedFile references - carrying provider file IDs or cloud-storage URIs such as s3:// or gs:// - submitted via client message history bypass the scheme allowlist applied to ordinary file URLs and are resolved server-side using the application's IAM role, service account, or API key. No public exploit has been identified at time of analysis, and no CISA KEV listing exists, but the scope-changing confidentiality impact (CVSS S:C/C:H) warrants prompt patching for any deployment exposing the Vercel AI adapter or similar UI adapters to untrusted clients.
Arbitrary program execution in GNU Bison (confirmed in 3.8.2) is triggered when a developer or automated pipeline runs `bison --html` on an attacker-controlled grammar file. The `%define tool.xsltproc` directive - intended to specify the XSLT processor binary for HTML report generation - is accepted without any restriction and passed directly to `execvp()`, allowing complete substitution of the transformation executable. No public exploit code or active exploitation has been identified at time of analysis, but the attack surface is relevant to developer workstations, build servers, and CI/CD pipelines that process untrusted grammar files.
Path traversal in DriveLock's built-in web service exposes arbitrary files readable by the service account to any authenticated remote user. The flaw, discovered by ZDI (ZDI-CAN-28713) and disclosed as ZDI-26-288, exists because the web service on TCP port 4568 accepts user-supplied path strings and passes them directly to file operations without sanitization, allowing directory traversal sequences to escape the intended working directory. No public exploit code or active exploitation has been identified at time of analysis, and a vendor security bulletin has been published.
Arbitrary file overwrite in Develar app-builder (all versions ≤ 4.2.0 on macOS) allows an unauthenticated remote attacker to escape the ZIP extraction directory by exploiting APFS Unicode case-folding combined with symlink following in the `zipx.Unzip` routine. A crafted archive containing a symlink entry `ss` pointing to an external victim file and a subsequent regular-file entry `ß` causes the builder to follow the symlink - because APFS folds `ß` to `ss` - overwriting the target with attacker-controlled content. SSVC rates the attack automatable with no confirmed exploitation; no public exploit code has been identified at time of analysis, though CERT/CC advisory VU#293714 and ENISA EUVD-2026-50423 confirm coordinated disclosure.
Client policy enforcement in Keycloak is bypassable by any user holding client management privileges who exploits a group-name collision across the group hierarchy. Because the policy engine resolves group membership by display name rather than unique identifier, an attacker can create or join a group in a different part of the hierarchy that shares a name with a privileged policy group, then register or update OAuth/OIDC clients without satisfying the required security hardening profiles. No public exploit has been identified at time of analysis, and active exploitation has not been confirmed by CISA KEV.
XML External Entity injection in veraPDF-validation's PDF parsing layer allows unauthenticated remote attackers to read arbitrary local files from the server or trigger outbound server-side requests to attacker-controlled endpoints by supplying crafted PDF documents. The two vulnerable code paths - PDFAValidator.validate() and GFPDAcroForm.getdynamicRender() - both use an unconfigured DocumentBuilderFactory that permits full DTD and external entity expansion. Patches are confirmed in versions 1.30.2 and 1.31.71; no public exploit or CISA KEV listing was identified at time of analysis.
An authentication bypass in Koollab LMS allows unauthenticated attackers to take over any account, including administrator accounts, by supplying a valid user UUID to the 2FA validation endpoint without providing primary credentials. Affected version 5.3.2 (and potentially earlier versions) exposes sensitive data and permits limited modification once an account is compromised. No active exploitation or public exploit code is known at the time of analysis.
Tool call injection in Pydantic AI's UI adapters (AG-UI via Agent.to_ag_ui()/AGUIAdapter, and Vercel AI via VercelAIAdapter) enables remote unauthenticated clients to force execution of registered server-side tools with attacker-supplied arguments, bypassing the framework's message-sanitization defense. The flaw affects pydantic-ai and pydantic-ai-slim versions 1.88.0-1.107.0 and 2.0.0b1-2.4.x. No public exploit code or CISA KEV listing exists at time of analysis, but the attack is low-complexity and exploitable against default configurations of applications using either UI adapter.
Account takeover in Ente Museum Server versions through 2.0.34 is achievable by an authenticated user designated as a victim's emergency contact, bypassing the configured recovery waiting period via a crafted `approve-recovery` API request. The vulnerability requires a pre-established trust relationship - the attacker must already be configured as the victim's emergency contact - which limits opportunistic mass exploitation, consistent with the low EPSS score of 0.17%. Security researcher VokeCyber has published a public technical writeup and blog post detailing the attack; no confirmed active exploitation or KEV listing exists at time of analysis.
Response body/Content-Length desynchronization in undici's retry interceptor allows a malicious or faulty upstream server to induce HTTP response smuggling against downstream clients of proxy and gateway applications. Affected versions span undici before 6.28.0, the 7.x line before 7.29.0, and the 8.x line before 8.9.0. An upstream that deliberately returns a partial response with mismatched framing and closes the socket early can cause the retry interceptor to assemble a body of a different length than the attached Content-Length, leading downstream consumers to experience response desynchronization, connection hangs, or data corruption. No public exploit has been identified at time of analysis, and this is not listed in CISA KEV.
File integrity compromise in Joomla Content Editor (JCE) before version 2.20.2 allows authenticated users holding file management permissions to rename files to invalid names - enabling creation of hidden dot-prefixed files (e.g., .htaccess, .env) and silent overwriting of existing files at the destination path. The root cause (CWE-20) is missing validation of the user-supplied target filename in the JCE rename API endpoint. No public exploit or CISA KEV listing exists at time of analysis; EPSS at 0.14% (4th percentile) indicates very low opportunistic exploitation probability, though the ability to silently replace sensitive server-side files such as .htaccess adds practical gravity that the CVSS integrity score alone does not fully convey.
Insecure Direct Object Reference in MasterStudy LMS WordPress Plugin (all versions through 3.7.14) allows authenticated Instructors to permanently delete media attachments belonging to any other WordPress user. The `stm_lms_delete_cover()` function accepts a caller-supplied `file_id` and passes it directly to WordPress's `wp_delete_attachment()` without verifying that the requesting user owns the referenced attachment. Because WordPress stores attachments with sequential integer IDs, an Instructor-level account holder can iterate over IDs to destroy course materials, profile images, or uploaded documents created by students, other instructors, or administrators. No public exploit has been identified at time of analysis, and this vulnerability is not listed in the CISA KEV catalog.
Cross-site scripting in the Link Library WordPress plugin (versions before 7.9.4) allows unauthenticated network-based attackers to inject malicious JavaScript that executes in the context of other users' browsers. The CVSS 4.0 vector assigns High subsequent-system impacts (SC:H/SI:H/SA:H), indicating exploitation could compromise visiting administrators and cascade to full WordPress site control. No public exploit code or CISA KEV listing has been identified at time of analysis, though Tenable reported the finding (TRA-2026-52) and a patched release (7.9.4) is available.
Stored Cross-Site Scripting in Newsletters Lite WordPress plugin versions ≤4.15 permits authenticated attackers with contributor-level access to inject arbitrary web scripts by abusing the 'link' attribute of the post_thumbnail and newsletters_post_thumbnail shortcodes. When a privileged user accesses a page containing the injected shortcode, the script executes in their session, potentially leading to session hijacking or credential theft. No active exploitation or public proof-of-concept is identified at time of analysis.
Stored cross-site scripting in Newsletters Lite WordPress plugin allows authenticated attackers with Contributor-level access or above to inject arbitrary scripts via the 'target' attribute of the [newsletters_post] shortcode. This affects versions up to 4.15 and can lead to script execution when other users view affected posts. No public exploit identified at time of analysis.
Stored Cross-Site Scripting in WowStore (all versions ≤ 4.4.24) permits authenticated contributors to plant arbitrary JavaScript into WordPress pages via the unsanitized 'currentPostId' block attribute in the Filter block, which then executes silently in the browser of any subsequent visitor - including administrators. The CVSS 6.4 score reflects Changed scope, meaning low-privilege attackers can impact higher-privilege users. No public exploit code has been identified and EPSS sits at 0.19% (9th percentile) with SSVC confirming no active exploitation, placing this in a prioritize-but-not-emergency tier.
Stored cross-site scripting in the WowStore WordPress plugin up to v4.4.24 allows authenticated attackers with contributor-level access to inject arbitrary web scripts via the 'filterMobileText' block attribute. The payload is stored inside a Gutenberg block delimiter JSON comment, bypassing wp_kses_post sanitization and executing when any user visits the affected page. No public exploit or active exploitation (KEV) identified at time of analysis; CVSS 6.4 (Medium) with EPSS risk unknown.
Stored Cross-Site Scripting in the Contact Form to Any API WordPress plugin (versions ≤ 3.0.6) allows authenticated attackers holding contributor-level access or higher to inject persistent malicious scripts via the cf7anyapi_form_field post meta field. Any user who subsequently loads a page containing the injected content will silently execute the attacker's script within their browser session, potentially exposing session tokens or enabling unauthorized actions. No active exploitation is confirmed - CISA KEV status is absent, EPSS sits at the 9th percentile (0.19%), and SSVC classifies exploitation as 'none' - indicating this is a low-urgency but real risk for multi-author WordPress deployments.
Arbitrary code execution in Autel MaxiCharger AC Elite Home EV chargers is possible for physically present attackers who supply a crafted, unsigned or improperly signed firmware update image to the device. The flaw (CWE-347) stems from the absence of cryptographic signature validation during the software update process - tagged as a JWT attack vector - meaning the update mechanism accepts attacker-controlled images without verifying their authenticity. No public exploit has been identified at time of analysis, and exploitation requires physical proximity, but a successful attack achieves full code execution in the device context with high confidentiality, integrity, and availability impact.