Authentication bypass and account takeover in N-able N-central through version 2026.3.1 stem from an incomplete remediation of CVE-2026-18556, leaving an alternate authentication path exploitable by unauthenticated remote attackers. The vendor's CVSS 4.0 submission includes E:A (Attacked), indicating active exploitation is occurring against this incomplete patch. Despite high attack complexity (AC:H), the absence of privilege requirements and the high-value nature of RMM platforms - which provide lateral movement to thousands of managed endpoints - makes this a critical priority for MSP operators.
Unauthenticated administrator account creation in the POUCO Import Users WordPress plugin (versions through 1.0.0) lets remote attackers register a fully privileged admin user and take over the site. The plugin exposes AJAX actions for account creation/update without capability or nonce checks and blindly trusts an attacker-supplied role value, so any visitor can escalate to administrator. Publicly available exploit code exists (reported by WPScan), though the EPSS score is low (0.15%, 5th percentile) and it is not on the CISA KEV list.
Unauthenticated SQL injection in AcyMailing WordPress plugin (versions before 10.11.1) allows remote attackers to read sensitive data from the underlying database and perform limited data modification without any credentials. Reported by WPScan and assigned CVSS 8.2, the flaw is network-exploitable with no user interaction required. A publicly available proof-of-concept exists; however, EPSS sits at 0.19% (8th percentile), indicating minimal observed exploitation activity at time of analysis despite the public PoC, and the vulnerability is not listed in the CISA KEV catalog.
Account takeover via unauthenticated password reset in the Lenxel WP WordPress theme (all versions through 1.0.31) allows any unauthenticated remote attacker to seize control of any WordPress account, including site administrators, by submitting a crafted reset request without owning or being authorized for the target account. The theme's reset action validates only a WordPress CSRF nonce - obtainable by any visitor loading the reset page - while performing no ownership or authorization check against the account being reset. No confirmed active exploitation (not in CISA KEV), though a public POC exists via WPScan and SSVC rates the technical impact as total; EPSS remains very low at 0.12% (2nd percentile), consistent with the niche theme footprint.
Complete authentication bypass in the login-social WordPress plugin (≤1.0.4) enables unauthenticated remote attackers to reset any user's password without a valid reset key and to forge login sessions using unverified third-party identity data, giving attackers full administrator access and site takeover capability. Any WordPress site running this plugin is exposed regardless of configuration, as both failures reside in the plugin's core authentication flows. A publicly available exploit exists per WPScan; EPSS sits at 0.19% (9th percentile), suggesting exploitation is targeted rather than widespread at this time, though the public PoC lowers the technical barrier considerably.
Simply Schedule Appointments WordPress plugin before 1.6.12.6 exposes all site appointment records to unauthenticated users through a bulk operation endpoint lacking object-level authorization, enabling mass personal data (PII) disclosure across the entire WordPress installation. On premium editions, the same unauthenticated path allows permanent deletion of all appointment records, adding a destructive integrity and availability impact not reflected in the published CVSS score. A public proof-of-concept exists per WPScan, and the SSVC framework rates this as automatable with no active CISA KEV listing; EPSS at 0.19% suggests limited observed exploitation to date but does not negate the ease of scripted mass harvesting.
Unauthenticated exposure of OAuth credentials in the Gallery for Google Photos WordPress plugin (all versions before 1.2.1) allows any remote attacker to retrieve the stored Google access and refresh tokens of the connected account without authentication. Because refresh tokens are long-lived and self-renewing, a successful retrieval grants persistent, long-term access to the linked Google account well beyond any single session. A publicly available exploit exists per WPScan, though EPSS remains low (0.16%, 6th percentile), suggesting exploitation is not yet widespread.
Unauthorized media file disclosure in the Product Attachment for WooCommerce WordPress plugin (all versions before 2.3.3) allows any unauthenticated internet user to download arbitrary WordPress media library files by enumerating sequential numeric attachment IDs. The plugin's file-streaming endpoint performs no authorization check whatsoever, exposing private or deliberately unlinked uploads - such as internal documents, confidential product specifications, or draft media - to the public. A publicly available proof-of-concept exists per WPScan, though EPSS sits at 0.15% (5th percentile), indicating low observed exploitation rates at time of analysis despite easy weaponization.
Unauthenticated API abuse in the AI ChatBot for WooCommerce WordPress plugin (all versions before 4.8.4) permits any remote visitor to trigger a backend AJAX action with no authorization check or nonce validation, causing the plugin to forward requests to the site owner's stored third-party AI API credentials - generating charges billed directly to the owner's account. A publicly available exploit exists per WPScan, though EPSS sits at 0.15% (5th percentile), indicating limited current automated exploitation; this CVE is not listed in the CISA KEV catalog. When the plugin's optional knowledge-base indexing feature is enabled, the same unprotected endpoint additionally exposes indexed site content to unauthenticated retrieval, introducing a confidentiality dimension alongside the financial abuse risk.
Authentication bypass in the SMS Alert WordPress plugin before 3.9.8 allows unauthenticated remote attackers to log in as any registered user - including site administrators - by exploiting broken OTP session binding. The plugin marks a session as 'mobile verified' after an attacker validates an OTP to their own phone, then naively trusts a separately supplied, attacker-controlled phone number to resolve and authenticate the target account. A public proof-of-concept is available via WPScan; while EPSS remains low at 0.15% (5th percentile), the combination of administrative account takeover potential and available exploit code makes this a high-priority patch for affected WordPress deployments.
Missing capability check on a WordPress AJAX action in Five Star Restaurant Reservations before 2.7.23 permits any user holding the plugin's lowest booking-management role to reset the site's configured booking notification rules - a setting they are explicitly barred from accessing through the UI. Notably, the provided CVSS vector (PR:N, C:H) conflicts materially with the description, which requires an authenticated role and describes an integrity-only impact; defenders should not rely on the published score at face value. A publicly available exploit exists via WPScan, though EPSS at 0.13% (3rd percentile) indicates no meaningful opportunistic exploitation has been observed.
Stored cross-site scripting in Element Pack Addons for Elementor WordPress plugin before 8.7.13 allows contributor-level (or higher) authenticated users to inject persistent JavaScript payloads via unsanitized data attributes, which a bundled front-end library subsequently re-parses and renders in victim browsers. Any site visitor loading the compromised page executes the attacker's script in their browser session, enabling session token theft, credential harvesting, or arbitrary actions on behalf of the victim - including administrators. A public proof-of-concept exists via WPScan, though EPSS at 0.16% and SSVC exploitation status of 'none' indicate no observed widespread exploitation at time of analysis.
PHP object injection in the Event Booking Manager for WooCommerce WordPress plugin (all versions before 5.3.7) allows authenticated contributors to deserialize attacker-controlled PHP objects through event content fields. Exploitation to achieve remote code execution, arbitrary file deletion, or sensitive data retrieval depends entirely on the presence of a usable POP (Property-Oriented Programming) chain from a co-installed plugin or theme - none exists within this plugin itself. A publicly available exploit exists per WPScan (EUVD-2026-51948), and this CVE represents an incomplete remediation of prior object-injection advisories affecting the same plugin.
Unauthenticated REST API access in the webtoffee-cookie-consent WordPress plugin before 3.5.3 allows any network attacker to export or delete stored visitor consent records, create arbitrary WordPress posts, and alter the plugin's licensing state. All versions prior to 3.5.3 are affected with no special configuration required, as the missing permission callbacks expose endpoints to public access by default. A publicly available exploit exists per WPScan, though EPSS sits at 0.22% (12th percentile), indicating exploitation has not yet reached widespread automated abuse; no public exploit identified at time of analysis for active in-the-wild campaigns.
Reflected XSS in King Addons for Elementor (all versions before 51.1.76) permits unauthenticated attackers to inject and execute arbitrary JavaScript in a victim's browser by embedding a malicious payload in an unsanitized grid setting parameter reflected verbatim into an HTML attribute via an unauthenticated AJAX endpoint. The attack requires social engineering to deliver a crafted URL to a target user, with no privilege or authentication prerequisite on the server side. A publicly available exploit exists per WPScan; exploitation is not confirmed in CISA KEV, and EPSS at 0.17% (7th percentile) indicates limited observed exploitation at this time.
Authentication bypass in the WooCommerce - Social Login plugin for WordPress (all versions up to and including 2.8.7) lets unauthenticated attackers log in as any existing user, including administrators, by forging an Apple id_token containing the victim's email address. The Apple login handler base64-decodes the JWT payload but never verifies the token signature against Apple's public keys nor validates the issuer, audience, or expiry claims, and the nonce needed to trigger the flow is publicly leaked to anonymous visitors. Reported by Wordfence and rated CVSS 9.8; no public exploit identified at time of analysis.
Meta Box WordPress plugin before 5.13.1 allows any user holding a Contributor-level role (or equivalent low-privilege account) to permanently delete arbitrary media attachments owned by other users, including administrators, due to a missing authorization check on the deletion endpoint. The root cause is CWE-862: the plugin performs the deletion operation without verifying whether the requesting user has ownership or administrative rights over the target attachment. Publicly available exploit code exists (sourced from WPScan), and while EPSS sits at a low 0.17% (6th percentile), the low attack complexity and wide availability of Contributor accounts on multi-author WordPress sites make this a realistic insider or compromised-account threat.
Stored cross-site scripting in the Event Booking Manager for WooCommerce WordPress plugin (all versions before 5.3.7) permits any authenticated user holding the Author role or higher to permanently inject arbitrary JavaScript into event timeline content. Because the plugin fails to sanitize or escape this input before storing and rendering it on public event pages, every site visitor - including administrators - who loads the affected event page executes the attacker's script in their own browser context. A publicly available proof-of-concept exists; no active exploitation is confirmed in CISA KEV, but the low barrier to entry (any Author-level account) elevates practical risk on sites permitting open or semi-open registration.
Stored XSS in the RT Mega Menu WordPress plugin (versions before 1.5.2) allows any subscriber-level authenticated user to inject persistent JavaScript into the site's public navigation, executing against every visitor who hovers over menu items - including administrators - enabling session theft and full site takeover. The AJAX endpoint that saves mega-menu configuration performs no capability check, relying solely on a nonce that any logged-in user can read from a standard admin page, making the access barrier trivially low. A public exploit is documented by WPScan, and the vendor has released version 1.5.2 as the confirmed fix; no public exploit identified at time of analysis corresponds to active widespread exploitation (no CISA KEV listing), though the public exploit code exists and the low subscriber-level barrier makes this dangerous on sites with open registration.
Stored Cross-Site Scripting in JetEngine WordPress plugin before 3.8.12 allows users holding the Contributor role or higher to inject persistent malicious scripts via unescaped post meta values rendered by plugin shortcodes, with execution occurring in the browser context of higher-privileged users including administrators. A publicly available exploit exists per WPScan, though EPSS remains low at 0.15% (5th percentile), suggesting limited observed mass exploitation at time of analysis. The scope-change characteristic (S:C in CVSS) elevates the real-world impact: successful exploitation can lead to admin session hijacking or unauthorized privileged actions despite the medium base score.
Broken object-level authorization in the Event Booking Manager for WooCommerce WordPress plugin (all versions before 5.3.7) allows any authenticated user with the Contributor role or higher to modify the title and publication status of arbitrary posts and pages sitewide - including content they do not own. The plugin's quick-edit event handler validates only a global WordPress capability (e.g., edit_posts) without confirming whether the requesting user owns the target object, enabling horizontal and vertical privilege escalation over site content. A publicly available proof-of-concept exists; however, no confirmed active exploitation has been identified and the EPSS score sits at 0.13%, indicating limited real-world adversary interest at time of analysis.
Cross-site request forgery in the Frontend File Manager Plugin for WordPress (all versions through 23.6) enables attackers to silently modify file metadata belonging to authenticated users by luring victims to attacker-controlled pages, with the corrupted metadata directly enabling unauthorized download of those files. When the plugin's guest upload feature is active, the vulnerable metadata update endpoint becomes fully unauthenticated, eliminating the need for any victim interaction and exposing every user's uploaded files to arbitrary metadata manipulation. WPScan has published a proof-of-concept, though EPSS at 0.10% (1st percentile) indicates limited observed exploitation activity to date - no public exploit identified at time of analysis reaches CISA KEV status.
SQL injection in PyAthena before 3.35.4 lets remote unauthenticated attackers break out of parameterized string literals in DELETE and CTAS (CREATE TABLE ... AS SELECT) statements because DefaultParameterFormatter.format() routes these to the Hive escaper, which backslash-escapes single quotes instead of doubling them. Since Athena/Trino treat backslashes as ordinary characters inside string literals, a single quote in attacker-supplied input terminates the literal early and injects arbitrary SQL, enabling data exfiltration via UNION SELECT, destructive statement execution, and attacker-controlled CTAS output. There is no public exploit identified at time of analysis, but a fixing commit and vendor advisory are public.
Denial of service in Better Auth (npm) before 1.4.2 lets an unauthenticated remote attacker poison the router's base path when baseURL is not explicitly configured. By sending the very first request after server startup with crafted X-Forwarded-Host and X-Forwarded-Proto headers, the attacker forces every subsequent auth route to return 404 for all users until restart. A working reproduction (curl commands) is published in the GHSA advisory, so publicly available exploit code exists; there is no CISA KEV listing and no public exploit identified as being used in active attacks.
Cross-tenant information disclosure in the self-hosted task manager Vikunja (0.24.0 through 2.3.0) lets a holder of any project share link read kanban bucket records - bucket titles and the full created_by user object (username, name, id) - belonging to other tenants' project views, because the task-collection endpoint loads the view from the attacker-controlled URL path without re-authorizing it. The same missing pre-authorization check yields a project/view-ID existence oracle (404 vs non-404) usable by link shares and ordinary authenticated users. No public exploit identified at time of analysis; fixed in 2.4.0.
Path normalization bypass in Better Auth before v1.4.5 allows unauthenticated remote attackers to circumvent `disabledPaths` security controls and path-based rate limits by submitting requests with extra leading slashes (e.g., `//sign-in/email` instead of `/sign-in/email`). The root cause is in the bundled rou3 router library, which collapses empty path segments before route matching, meaning security rules keyed on canonical paths never match the double-slash variants. No public exploit code has been identified at time of analysis, but the trivially low attack complexity makes exploitation straightforward on unprotected deployments.
Stored Cross-Site Scripting in the Charitable WordPress donation plugin (versions before 1.8.5.3) allows authenticated users holding a high-privilege campaign-management role to inject persistent malicious scripts via an unsanitized campaign image text field that is rendered unescaped inside an HTML attribute on the public-facing campaign page. Any site visitor who loads that page becomes a potential victim, enabling session hijacking, credential theft, or defacement against the site's front-end audience. A publicly available proof-of-concept exploit exists; however, no active exploitation has been confirmed in CISA KEV, and the EPSS score of 0.16% (6th percentile) reflects low broad-exploitation probability consistent with the high-privilege prerequisite.
Heap-based buffer overflow in FreeRDP's Windows clipboard client (versions ≤ 3.29.0) allows a malicious or compromised RDP server to write attacker-controlled data beyond the bounds of a paste consumer's heap allocation. The flaw in CliprdrStream_Read trusts the server-supplied response length (req_fsize) rather than the caller-supplied buffer bound (cb), so any OLE paste consumer such as explorer.exe that calls IStream::Read against server-offered clipboard file contents can have its heap corrupted. No active exploitation has been confirmed (not in CISA KEV), no public exploit code has been identified, and a fix is available in FreeRDP 3.30.0.
Privilege escalation in ArcadeDB before 26.7.3 allows any user holding UPDATE_SCHEMA permission to create server-wide administrator accounts by crafting malicious JavaScript triggers. The root cause is that the real LocalDatabase object is bound into trigger execution contexts with GraalVM's HostAccess.ALL policy, exposing the full Java security API - including getSecurity().createUser() - without permission checks. No public exploit has been identified at time of analysis, but a vendor-released patch is available in 26.7.3 per the GitHub security advisory GHSA-38pf-6hp2-pxww.
Principal type confusion in Vikunja (versions 0.22.0-2.3.0) allows an authenticated low-privilege attacker to fully control any target user's API token management by exploiting a numeric ID collision between the independent link-share and user ID sequences. The `/api/v1/tokens` endpoints resolve the caller identity exclusively via the generic `web.Auth.GetID()` interface without validating whether the authenticated principal is a user or a link-share, meaning a link-share JWT whose integer ID equals a victim's user ID is accepted as that user's credential. No CISA KEV listing and no public exploit code have been identified at time of analysis, but successful exploitation yields the ability to mint new API tokens under a victim's identity with attacker-chosen permission scopes, constituting a functional account takeover at the API level.
Stack buffer over-read and stray one-byte NUL write in Zephyr RTOS's experimental OCPP 1.6 client allow a malicious or compromised OCPP central server - or an on-path attacker exploiting the commonly unencrypted ws:// transport - to crash a connected embedded device by sending a crafted WAMP RPC frame with an oversized uid or action field. The vulnerable helper extract_string_field() uses strncpy() without guaranteeing NUL-termination, causing a subsequent strchr() call to scan unbounded into adjacent stack memory; a secondary defect in extract_payload() compounds this on maximal-length frames. No active exploitation has been confirmed by CISA KEV, but SSVC classification indicates publicly available proof-of-concept code, and EPSS sits at a low 0.19% (10th percentile), consistent with a niche embedded RTOS attack surface.
Stored cross-site scripting in the Narrative Publisher WordPress plugin (≤1.0.7) lets contributor-level authenticated users inject arbitrary JavaScript into a REST-accessible post meta field that is neither access-controlled nor escaped on output. When any higher-privileged user - editor, administrator - views the affected post, the malicious script executes in their browser session, enabling session hijacking or privilege escalation to site administrator. A public proof-of-concept is available via WPScan; no KEV listing is present and the EPSS score (0.15%, 5th percentile) indicates limited opportunistic exploitation at time of analysis.
Clever Mega Menu for Visual Composer (WordPress plugin, versions through 1.0.1) allows any authenticated user with as little as Subscriber-level access to overwrite navigation menu item content and settings through an unprotected AJAX endpoint. The plugin fails to perform either a nonce check or a capability check before processing menu item metadata updates, meaning WordPress role-based access control over menu management is completely bypassed. A publicly available exploit exists via WPScan, though EPSS places exploitation probability at 0.14% (4th percentile) with no CISA KEV listing, indicating limited observed exploitation at time of analysis.
Insecure Direct Object Reference (IDOR) in the ProfileGrid WordPress plugin before 5.9.9.8 allows any authenticated user - including low-privilege Subscribers - to delete arbitrary other users' notifications by enumerating integer notification identifiers. The plugin's notification deletion endpoint fails to verify that the requested notification belongs to the authenticated requester, exposing all users' notifications to deletion by any site member. A publicly available exploit exists per WPScan, though EPSS sits at 0.13% (3rd percentile), indicating low observed exploitation activity at time of analysis.
Cache management actions in the LWS Optimize WordPress plugin before version 3.4 lack authorization checks, permitting any authenticated user - including low-privileged Subscribers - to flush the site's caches and trigger repeated, resource-intensive cache rebuilds. The vulnerability is classified as CWE-862 (Missing Authorization) and carries a CVSS 3.1 score of 4.3 (Medium), with impact limited to availability degradation rather than data exposure or modification. A publicly available proof-of-concept exists per WPScan reporting, though EPSS sits at a very low 0.13% (3rd percentile) and the vulnerability is not listed in CISA KEV, indicating limited observed exploitation interest.
Insecure Direct Object Reference in FluentBoards WordPress plugin before 1.95.3 allows any authenticated user holding member access to at least one board to silently exfiltrate task titles, descriptions, and file attachments from all other boards on the site by supplying arbitrary board item identifiers in an import request. The server performs no authorization check to verify that requested items belong to boards the invoking user is permitted to access, making any board member a potential insider threat against sensitive project data. A public proof-of-concept is available via WPScan; however, EPSS sits at 0.13% (3rd percentile) and no CISA KEV entry exists, indicating limited observed exploitation despite disclosure.
Cleartext leakage of the HA cluster token in ArcadeDB's MCP get_server_settings tool allows any authenticated MCP user to escalate to full root-level server control in all versions before 26.7.3. The exposed arcadedb.ha.clusterToken can be replayed via the X-ArcadeDB-Cluster-Token and X-ArcadeDB-Forwarded-User HTTP headers to impersonate the root user, turning a low-privilege information disclosure into a complete server compromise. No public exploit code has been identified at time of analysis, and the vulnerability is not listed in the CISA KEV catalog; however, the chained privilege escalation path significantly elevates real-world impact beyond the CWE-200 classification suggests.
Integer overflow in FreeRDP's audio input redirection channel (audin) across ALSA, sndio, WinMM, and OpenSL ES backends affects all versions before 3.29.0, exploitable by a malicious or compromised RDP server. The server can supply a crafted FramesPerPacket value that causes allocation size wraparound, leading to a heap-based buffer overflow on Linux/ALSA - potentially enabling code execution - or denial of service on all supported platforms. No public exploit or active exploitation (CISA KEV) has been identified at the time of analysis; vendor-released patch (3.29.0) is available.
Privilege escalation in ArcadeDB before 26.7.3 allows any authenticated MCP user to fully bypass the database authorization framework. The MCP HTTP transport layer fails to bind the authenticated principal into the engine's permission context, causing all access control checks to silently resolve as no-ops regardless of the user's actual role. Affected users can perform arbitrary DDL, schema mutations, unrestricted database writes, and execute arbitrary JavaScript via the query tool - effectively gaining root-level database access from a low-privileged account. No public exploit has been identified at time of analysis and this CVE is not listed in CISA KEV, though the impact is severe for any deployment with MCP transport enabled.
Directory traversal in the User Access Manager WordPress plugin (all versions ≤ 2.3.15) permits unauthenticated remote attackers to read arbitrary files from the server filesystem by exploiting a logic flaw in the plugin's file-serving access check. By pairing a path traversal string in the `uamgetfile` parameter with a valid public attachment ID, an attacker causes the plugin's fallback mechanism to approve access against a legitimate public attachment while streaming the attacker-chosen file path - effectively bypassing all access controls. No public exploit has been identified at time of analysis and no CISA KEV listing exists, but the zero-prerequisite exploitation conditions (CVSS AV:N/AC:L/PR:N/UI:N) mean that sensitive files such as `wp-config.php` and `.env` are exposed on any affected site with the plugin's file protection feature active.
Directory traversal in the CubeWP Framework WordPress plugin (all versions through 1.1.30) enables unauthenticated attackers to read arbitrary files accessible to the web server process via the cubewp_get_svg_content AJAX handler. The nonce mechanism that gates this endpoint is rendered ineffective because the nonce is publicly emitted into page markup whenever the CubeWP posts shortcode or widget with AJAX loading is active, allowing any guest visitor to harvest it before submitting a malicious request. No public exploit or KEV listing has been identified at time of analysis, but the CVSS 7.5 rating reflects realistic unauthenticated, low-complexity exploitability with full confidentiality impact - targeting files such as wp-config.php containing database credentials and secret keys.
Privilege escalation in Red Hat Build of Keycloak's user creation component exposes environments running Fine-Grained Admin Permissions V2 (FGAP V2) to unauthorized group assignment by scoped sub-administrators. A sub-admin holding only user-create permissions can bypass group-level authorization checks and enroll newly created users into any group - including privileged or sensitive ones - well beyond the sub-admin's delegated scope. SSVC rates technical impact as total and no public exploit has been identified, though the EPSS score of 0.24% (15th percentile) and SSVC exploitation status of 'none' indicate low immediate exploitation likelihood.
Arbitrary file write via path traversal in HuggingFace Transformers (<=5.8.0.dev0, fixed in 5.10.0) enables a supply-chain attacker to overwrite arbitrary files on a victim's filesystem. The flaw exists in `save_pretrained()` methods of `PreTrainedTokenizerBase` and `ProcessorMixin`, where dictionary keys from the `chat_template` field in a downloaded `tokenizer_config.json` are used verbatim as filenames with no path sanitization. An attacker need only publish a malicious model repository on HuggingFace Hub; exploitation is triggered when the victim calls `save_pretrained()` after loading the poisoned model. No active exploitation is confirmed (not in CISA KEV), but the attack surface spans all practitioners using the affected `save_pretrained()` path across multiple popular processor families.
Insecure Direct Object Reference in the better-auth passkey plugin (npm/@better-auth/passkey < 1.4.0) permits any authenticated user to delete arbitrary passkeys belonging to other users via the `POST /passkey/delete-passkey` endpoint. The `ctx.body.id` parameter is implicitly trusted without ownership verification, meaning a valid session - regardless of privilege level - is sufficient to enumerate and destroy other users' passkey credentials. Applications configured with `useNumberId` (auto-incrementing integer IDs) are trivially exploitable by sequential enumeration. No public exploit or CISA KEV listing confirmed at time of analysis; a vendor-released patch exists at version 1.4.0.
Simple Restrict WordPress plugin before 1.2.9 exposes restricted post and page content through the WordPress REST API due to an authorization bypass. The plugin enforces its own permission system on the front-end but falls back to a generic WordPress capability check on REST API routes, allowing any contributor-level or higher WordPress account to read content that was explicitly restricted via the plugin's access controls. No public exploit identified at time of KEV review, though a proof-of-concept is publicly available via WPScan; the EPSS of 0.13% at the 3rd percentile confirms negligible observed exploitation activity.
Local HDF5 file content disclosure in keras-team/keras versions 3.14.0 and earlier allows an attacker who can deliver a malicious model file to exfiltrate arbitrary local filesystem data from a victim's machine. Both the `KerasFileEditor` class and `keras.saving.load_weights` function fail to invoke the `safe_get_h5_group` and `safe_get_h5_dataset` helpers before traversing HDF5 group children, causing automatic dereferencing of embedded ExternalLinks and SoftLinks that point to attacker-controlled paths on the victim's filesystem. No public exploit code or CISA KEV listing has been identified at time of analysis; however, the attack mechanism is straightforward and the commit diff makes the vulnerability trivially reproducible.
Client policy enforcement in Red Hat Build of Keycloak can be bypassed by an authenticated user holding client management permissions, allowing non-compliant OAuth clients to persist in a realm despite administrator-configured security hardening. The bypass exploits improper client state evaluation during update operations: an attacker creates a public client - which passes policy validation - and then updates it to a confidential client type, skipping the re-evaluation that would normally reject a non-compliant confidential client. No public exploit code has been identified and this CVE is not listed in CISA KEV; however, the low attack complexity and broad deployment of Keycloak in enterprise IAM infrastructure elevate its practical significance.
Time-based authorization policy bypass in Red Hat Build of Keycloak permits any low-privileged authenticated user to inject a fabricated timestamp into their authorization request, causing Keycloak's Authorization Services engine to evaluate the forged value instead of the actual server clock. This fully defeats time-based access controls - such as business-hours restrictions - across affected Red Hat products including Keycloak, Single Sign-On 7, Data Grid 8, and JBoss EAP Expansion Pack. No public exploit code has been identified and this CVE is not listed in CISA KEV, but the CVSS High integrity impact accurately reflects that time-gated authorization controls are rendered entirely ineffective against any valid account holder.
PSA Crypto key slot exhaustion in Zephyr's Bluetooth Mesh subnet.c permanently leaks one key slot on every subnet key teardown when CONFIG_BT_MESH_PRIV_BEACONS is enabled (the default). Devices running Zephyr 3.6.0 through 4.4.x are affected: a provisioner or network administrator with the node's device key can trigger the leak via Config Server NetKey Delete, Key Refresh Procedure, or reprovisioning over the Bluetooth Mesh network. With the default pool of 16 PSA key slots, roughly a dozen such operations exhaust the pool, preventing subnet creation and potentially starving other on-device PSA consumers until a reboot. No public exploit or CISA KEV listing exists; real-world impact is constrained by the high-privilege and proximity requirements.
Stored cross-site scripting in Exclusive Addons for Elementor (WordPress plugin, all versions through 2.7.9.8) allows any authenticated contributor-level WordPress user to permanently inject arbitrary JavaScript into pages via the `exad_infobox_image` parameter of the infobox widget. The injected payload executes in the browser of any user who subsequently views the compromised page, including administrators, enabling session hijacking, credential theft, or malicious redirects. No public exploit code or active exploitation (CISA KEV) has been identified at time of analysis, though Wordfence's changeset reference suggests source-code-level details are publicly accessible.