Cleartext exposure of third-party API keys and authentication tokens in AI Engine WordPress plugin (before 3.6.4) allows Editor-role users to read secrets that are intended to be administrator-only. The plugin inlines sensitive configuration values into admin page JavaScript without redaction, making them readable to any authenticated user with Editor access who inspects the page source. A public proof-of-concept exists per WPScan, though EPSS remains low at 0.17% (7th percentile) and the vulnerability is not in the CISA KEV catalog.
SQL injection in the Welcart e-Commerce WordPress plugin (all versions before 2.11.32) enables authenticated users holding at minimum the Editor role - or Welcart's custom shop-management roles - to execute arbitrary SQL against the underlying WordPress database by supplying a crafted CSV file through the plugin's import feature. A publicly available proof-of-concept exploit exists (reported by WPScan), meaningfully lowering the bar for abuse by any account with sufficient role access. No active exploitation is confirmed in CISA KEV at time of analysis, but the combination of a public POC and high database impact (confidentiality and integrity both rated High) makes patching urgent for multi-editor or multi-manager WordPress deployments.
Cross-site request forgery in the Google Authenticator WordPress plugin before version 0.56 allows an unauthenticated attacker to overwrite a logged-in user's TOTP secret by tricking them into loading a malicious page. The forged request silently replaces the victim's two-factor secret with one the attacker controls, enabling the attacker to generate valid OTPs and lock the legitimate account owner out. A public proof-of-concept is available via WPScan; no active exploitation is confirmed in CISA KEV, and EPSS of 0.11% (2nd percentile) aligns with SSVC's 'not automatable' designation.
Process-terminating denial of service in node-re2 (npm package `re2`) up to and including v1.25.0 allows an attacker to kill the entire Node.js process or worker thread with a single crafted request. The native add-on's `WrappedRE2::Replace` calls `.ToLocalChecked()` on a V8 `MaybeLocal` without first verifying it is non-empty; when a global replace uses the `$'` (post-match) or `` $` `` (pre-match) template on ~40,000+ matching characters, the O(input²) output exceeds V8's 536,870,888-character limit, the `MaybeLocal` is empty, and the unchecked call triggers `v8::Utils::ReportApiFailure` → native `abort()` (SIGABRT, exit 134). Unlike the built-in regex engine, which raises a catchable `RangeError`, this crash cannot be intercepted by JavaScript `try/catch`, domains, or `uncaughtException` handlers, making a single malformed request capable of taking down the entire service. A public proof-of-concept is included in the GitHub Security Advisory; no CISA KEV listing was present at time of analysis.
Stored XSS with privilege bypass in the EONSR AEO Agent WordPress plugin (versions through 3.7.9) allows unauthenticated remote attackers to inject persistent arbitrary JavaScript into published posts, attributed to administrators, that executes in the browser of any site visitor including administrators. The REST API route responsible for post creation performs no authorization check and explicitly disables HTML sanitization before saving content, making this a trivially exploitable unauthenticated write-then-persist attack chain. A publicly available exploit has been published by WPScan; no active exploitation has been confirmed in CISA KEV at time of analysis.
Stored Cross-Site Scripting in the Nexter Blocks WordPress plugin before 5.0.2 allows any authenticated user with file upload capability (Author role by default) to upload a malicious SVG file containing embedded JavaScript that executes in any victim's browser upon accessing the file. A publicly available proof-of-concept exists per WPScan, though EPSS at 0.15% (5th percentile) and absence from CISA KEV indicate low observed exploitation to date. The NVD-assigned CVSS PR:N conflicts with the description's clear authentication requirement - defenders should treat this as an authenticated vulnerability, which meaningfully narrows real-world exposure.
File inclusion in TinyAGI 0.0.20 exposes server-side files to remote unauthenticated attackers through the buildSystemPrompt function in packages/server/src/routes/agents.ts. Exploitation requires no privileges or user interaction, and a publicly available proof-of-concept exists via GitHub issue #283. No patch has been released - the vendor has not responded to the responsible disclosure despite being notified through the project's issue tracker.
File inclusion via unsanitized path input in TinyAGI 0.0.20's Message API Endpoint exposes server-side files to remote unauthenticated attackers. The vulnerable surface is the `collectFiles` function in `packages/core/src/response.ts`, which accepts externally controlled file paths without adequate validation (CWE-73). Publicly available exploit code exists via GitHub issue #282, and the project maintainer had not issued a patch or response at time of disclosure - compounding risk for any internet-exposed deployments.
Missing authorization in TinyAGI 0.0.20's Message API Endpoint allows remote unauthenticated attackers to invoke the processMessage function without any access control enforcement, yielding limited but real confidentiality, integrity, and availability impact. A publicly available proof-of-concept exploit is referenced in GitHub issue #284, and the project maintainer has not responded to the responsible disclosure, leaving no patch available at time of analysis. The combination of unauthenticated network exploitability, live POC, and vendor silence makes this a material risk for any deployment exposing the endpoint to untrusted networks.
Unauthenticated remote information disclosure in heshengtao super-agent-party (up to version 0.4.1) allows remote attackers to read sensitive file content by manipulating the tool_name or tool_params arguments passed to the get_file_content function via the execute_tool_manually endpoint in server.py. The flaw requires no authentication and no user interaction, and a public proof-of-concept exploit is available on GitHub. No patch has been issued; the vendor did not respond to coordinated disclosure.
Server-side request forgery in heshengtao's super-agent-party (versions 0.4.0-0.4.1) enables remote unauthenticated attackers to coerce the application into issuing arbitrary HTTP requests to internal or otherwise restricted network destinations. The flaw exists in the sanitize_proxy_url function within server.py on the extension_proxy route, where the url argument is insufficiently validated before being acted upon. A public proof-of-concept exploit is available via GitHub Gist, lowering the barrier to exploitation; the vendor did not respond to responsible disclosure, and no patch has been released.
Server-side request forgery (SSRF) in JeecgBoot's AI RAG chat endpoint (/airag/chat/send) exposes unauthenticated remote attackers a direct path to make the application server issue arbitrary HTTP requests to internal or external network resources. All versions up to and including 3.9.2 are affected, with the flaw residing in the Anonymous Chat Attachment Parser component - meaning no login is required to trigger it. Public exploit code exists via a GitHub issue (no public exploit identified as actively exploited per CISA KEV), and no vendor-released patch is available at time of analysis.
SQL injection in SourceCodester Computer Repair Shop Management System 1.0 exposes the `/classes/Master.php?f=delete_product` endpoint to unauthenticated remote attackers who can manipulate the `id` parameter to execute arbitrary SQL against the backend database. The CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:N/UI:N) confirms no authentication or user interaction is required, and a public proof-of-concept exploit has been disclosed on GitHub. Impact is assessed as limited (VC:L/VI:L/VA:L) with no scope change to subsequent systems, though the availability of exploit code meaningfully lowers the bar for opportunistic abuse of any internet-exposed instance.
Stored Cross-Site Scripting in the Slick Slider WordPress plugin before 0.5.3 allows any authenticated user holding the Contributor role or higher to inject persistent JavaScript through an unsanitized shortcode attribute value that is rendered directly into an HTML attribute. The payload executes in the browser of any user - including administrators - who subsequently views the affected post, enabling session hijacking, credential theft, or privilege escalation. A publicly available proof-of-concept exploit exists and a vendor patch (version 0.5.3) has been released; no active exploitation has been confirmed by CISA KEV at time of analysis.
Stored Cross-Site Scripting in the Child Pages Card WordPress plugin (all versions before 1.09) allows contributors and higher-privileged authenticated users to inject persistent JavaScript payloads via unsanitized shortcode attributes. When an administrator or other privileged user views a page containing the malicious shortcode, the injected script executes in their browser, enabling session hijacking or unauthorized privileged actions. A public exploit is available via WPScan; no confirmed active exploitation (CISA KEV) has been observed, though the public PoC meaningfully lowers the barrier to abuse.
Missing capability check in the SEO Redirection Plugin for WordPress (versions before 9.19) exposes authenticated AJAX endpoints to any logged-in user, regardless of role. A subscriber-level account - the lowest WordPress user tier - can invoke the unprotected action to enumerate all configured 301 redirect rules, revealing source and destination URLs that may disclose internal site architecture, campaign tracking patterns, or sensitive path structures. No public exploitation in the wild has been confirmed by CISA KEV, but a proof-of-concept is publicly available per WPScan, raising the probability of opportunistic abuse against unpatched sites.
Denial-of-service in Mermaid's radar-beta diagram renderer allows an attacker who can supply diagram input to trigger unbounded CPU and memory consumption by setting the `ticks` parameter to an arbitrarily large integer. Affected npm package versions >= 11.6.0 and < 11.16.1 perform no upper-bound validation on the `ticks` value, causing the JavaScript process - whether a browser tab or a server-side renderer - to freeze indefinitely until the OS terminates it due to OOM. A proof-of-concept is publicly available in the advisory. No KEV listing exists and no EPSS score is provided.
Infinite-loop denial of service in Mermaid's XY chart renderer allows any party that can supply diagram input to crash the JavaScript process or browser tab. The `setXAxisRangeData()` function in npm/mermaid enters an unbounded loop when an x-axis range is defined with identical start and end values, growing an array until memory is exhausted or a `RangeError: Invalid array length` is thrown. A proof-of-concept is publicly embedded in the GitHub security advisory (GHSA-2v8p-3f2j-5mp7), making exploitation trivial; no CISA KEV listing has been issued.
Request smuggling primitive in h2 (pip/h2) versions 4.4.0 and below enables network-accessible attackers to craft HTTP/2 header blocks containing duplicate Host headers that the library forwards verbatim to consuming applications. When a consumer downgrades the HTTP/2 request to HTTP/1.1 - a common pattern in reverse proxy and gateway architectures - the resulting HTTP/1.1 request carries two Host header lines, violating RFC 7230 and creating an ambiguity that downstream servers may interpret differently, enabling cache poisoning, security control bypass, or session hijacking. No active exploitation confirmed (not in CISA KEV); no public exploit code identified at time of analysis; fix is available in v4.4.1.
Unauthorized retrieval of other customers' payment receipt images is possible in PeproDev WooCommerce Receipt Uploader (≤ 2.8.0) because the plugin's token-based attachment access mechanism never validates that a requested attachment ID belongs to the order the token was issued for. Unauthenticated network attackers can forge or repurpose a token - trivially obtained by placing any order - to iterate over attachment IDs and exfiltrate payment receipts uploaded by unrelated customers, potentially exposing financial documents containing banking details or PII. A publicly available proof-of-concept exists per WPScan reporting (EUVD-2026-53719); no CISA KEV listing indicates widespread active exploitation has not been confirmed, though SSVC rates the attack as automatable.
ProfileGrid WordPress plugin (all versions before 6.0.0.0) exposes group member lists and member identifiers to unauthenticated visitors due to a handler registered without any authorization checks, completely bypassing the plugin's member-visibility settings for private and closed groups. Any unauthenticated visitor who can reach the WordPress site can enumerate group members and their identifiers across all group types, including those the site owner intended to restrict. A publicly available exploit exists per WPScan, and the SSVC classification flags this as automatable - though EPSS at 0.14% (4th percentile) indicates exploitation has not become widespread despite the low barrier to entry.
tourmaster WordPress plugin (all versions before 5.4.9) exposes exported customer booking and order data via a fixed, predictable file path inside its publicly accessible web directory, with no authentication or access control enforcing download restrictions. Any unauthenticated network attacker who knows or can derive the static export file URL can retrieve personally identifiable information - names, contact details, and booking records - after an administrator has triggered an export. A publicly available proof-of-concept exists per WPScan, and exploitation is fully automatable (SSVC), though EPSS sits at 0.14% and no CISA KEV listing exists at time of analysis.
Open email relay in the Estatik Real Estate Plugin for WordPress (before 4.3.3) allows unauthenticated remote attackers to send arbitrary emails through any affected WordPress site by submitting crafted property inquiry form requests with controlled recipient address, subject, body, and Reply-To header. The plugin's anti-spam check is trivially bypassed and provides no constraint on recipient routing, effectively turning victim sites into spam or phishing infrastructure. A publicly available exploit exists per WPScan; EPSS sits at 0.14% (3rd percentile) and CISA KEV does not list active exploitation, suggesting limited but plausible abuse given SSVC confirms the attack is automatable.
Unauthenticated IDOR write in PeproDev WooCommerce Receipt Uploader (all versions ≤ 2.8.0) allows any remote attacker to submit or manipulate receipt uploads without credentials or authorization checks, bypassing the WordPress nonce and capability verification that WooCommerce plugins are expected to enforce. The plugin remains unpatched as of the time of writing, and a publicly available proof-of-concept exploit exists via WPScan. Despite automation potential (SSVC: Automatable yes), EPSS sits at 0.10% (1st percentile) and CISA has not listed this in KEV, indicating limited observed real-world exploitation to date.
Out-of-bounds heap read in the node-re2 npm package (versions <= 1.26.0) exposes up to 3 bytes of adjacent heap memory per call to JavaScript when Buffer arguments ending in a truncated multi-byte UTF-8 lead byte are passed to replace() or split(). The overread is deterministic, requires no heap grooming, and a working proof-of-concept is included in the GitHub advisory. Applications that pass only strings - not Buffers - are entirely unaffected, but those that process untrusted Buffer input through re2 are at real risk of incremental heap disclosure. No CISA KEV listing was identified; this is a library-layer flaw fixed in re2@1.26.1.
Namespace isolation bypass in Traefik's Kubernetes CRD provider allows a tenant confined by RBAC to a single namespace to bind their own router to a `TraefikService` owned by a different namespace, exposing or rerouting that namespace's backend services - defeating the isolation boundary that `allowCrossNamespace=false` (the default) is meant to enforce. All Traefik v2 releases through 2.11.53, v3.0.0-3.6.24, and v3.7.0-3.7.9 are affected; patches are available at v2.11.54, v3.6.25, and v3.7.10. A proof-of-concept test harness accompanies the advisory confirming the bypass; the vulnerability has not been added to CISA KEV at time of analysis.
HTML sanitization bypass in jsoup versions 1.14.3 through 1.23.0 allows cross-site scripting when applications deploy a custom Safelist that explicitly permits raw-text elements. The parser's tag-name normalization trimmed trailing control characters (e.g., U+001E) from malformed tag names, causing a crafted element to acquire the parsing behavior of a recognized raw-text element; content intended to remain escaped text was then serialized as active markup, bypassing sanitization. jsoup's built-in Safelists are unaffected, and no public exploit or CISA KEV listing has been identified at time of analysis.
RealHomes Memberships WordPress plugin before 3.1.0 permits any authenticated user - including low-privilege Subscribers - to claim paid membership packages for free by exploiting missing payment verification, absent nonce validation, and no capability checks on the membership grant endpoint. The business impact is direct financial loss for site operators running paid real estate membership tiers. No active exploitation has been confirmed by CISA KEV, but a public exploit is available via WPScan, lowering the barrier for abuse.
Stored XSS in AIL Framework's crawler domain view (versions ≤ 7.0.0) lets a low-privileged attacker embed executable JavaScript inside crawled URL values that persist in the AIL datastore. The payload triggers within an authenticated analyst's browser session the moment they click the screenshot icon for the malicious crawler entry, granting the attacker access to session data and the ability to perform application actions as that analyst. No CISA KEV listing or public exploit code has been identified at time of analysis; the CVSS 4.0 score of 6.9 reflects high confidentiality impact tempered by required user interaction and low-privilege preconditions.
Stored cross-site scripting in AIL Framework's Chat Explorer and Forum Explorer views allows an attacker who can influence indexed dark-web content to inject arbitrary JavaScript into translation button onclick handlers, executing in the analyst's browser under the AIL security origin. Versions up to and including 7.0.0 are affected; the vulnerability stems from Jinja2 templates passing message and post identifiers through HTML escaping rather than JavaScript-safe encoding, leaving single-quote and escape-sequence injection paths open. No active exploitation has been confirmed (not in CISA KEV) and no public exploit code has been identified; exploitation requires the victim analyst to click the 'Translate to preferred language' button, limiting automated attack surface.
Session cookie theft in the DataPress (Dataverse Integration) WordPress plugin before 2.91 allows any Contributor-level user to steal session credentials from higher-privileged users such as Editors or Administrators. The plugin's template rendering feature improperly exposes the session data of users who view affected content, enabling privilege escalation via session hijacking. No public exploit code has been identified at time of analysis, but the low barrier to entry (Contributor role) makes this a realistic insider or compromised-low-privilege-account threat against WordPress sites using this plugin.
Uninitialized heap memory disclosure in FFmpeg's native TIFF decoder (libavcodec/tiff.c) exposes stale heap contents to any party able to retrieve decoded image output. Affected versions span 0.5 through 8.x; FFmpeg 9.0 carries the upstream fix. In server-side media pipelines that accept and return processed TIFF files - transcoding APIs, thumbnail generators, upload handlers - an attacker can craft a structurally valid Deflate-compressed TIFF strip that inflates short, causing the decoder to embed prior heap allocation remnants into the decoded output, potentially leaking sensitive in-process data. No active exploitation is confirmed (not in CISA KEV) and no standalone public exploit code was identified at time of analysis.
Uninitialized heap memory read in FFmpeg's native Screenpresso decoder (libavcodec/screenpresso.c) allows an attacker who can supply crafted SPV1-encoded video to recover stale heap contents - including userspace addresses and prior-frame data - from the process decoding the media. Affected versions span FFmpeg 3.0 through 8.x; version 9.0 resolves the issue via upstream commits and PR #23896. No active exploitation is confirmed in CISA KEV, and no public exploit code has been identified at time of analysis, but the information-disclosure primitive is particularly dangerous in persistent server-side decoding pipelines where heap residue from earlier operations may include sensitive material.
Heap memory disclosure in FFmpeg's native RSCC decoder (libavcodec/rscc.c) allows an attacker who can supply a crafted video file to expose residual heap contents - including data from prior heap allocations or previously decoded frames - to any downstream consumer of the decoded output. The flaw stems from rscc_decode_frame() calling av_image_copy_plane() without verifying that the number of decompressed bytes matches the declared tile geometry, allowing the unwritten suffix of the persistent ctx->inflated_buf to propagate silently into the output frame. All FFmpeg builds from 3.0 through 8.x are affected; no public exploit has been identified at time of analysis, and no KEV listing exists.
Null pointer dereference in the llama.cpp LLaMA-Android JNI wrapper's bench_1model() function allows denial of service via a crafted model file. Builds b1886 through b7445 (packaged releases 0.9.0-0.17.1) are affected; the function skips null validation on the model context pointer before dereferencing it, so supplying a malformed or truncated GGUF model file triggers a SIGSEGV that terminates the Android application process. No public exploit has been identified at time of analysis and this is not listed in CISA KEV, but the attack path is mechanically simple for anyone able to deliver a crafted model to the device.
Unauthenticated appointment injection in OpenReception appointment-booking-software prior to version 1.0.5 allows any remote caller to insert CONFIRMED appointments into arbitrary client tunnels by exploiting a missing authorization gate on the `add-to-tunnel` endpoint. The endpoint accepted any POST supplying a valid `emailHash` - used only as a tenant existence check - alongside an unrelated valid `tunnelId`, writing attacker-controlled appointment fields (ciphertext content, date, duration, agent) without a session, Authorization header, booking access token, or proof-of-work. No CISA KEV listing or public POC is identified at time of analysis, but the exploit pattern is structurally straightforward once valid identifiers are obtained.
Log injection and unauthenticated denial-of-service in OpenReception appointment-booking-software prior to version 1.0.2 expose security operations teams to forged log events indistinguishable from legitimate application output. Any unauthenticated network attacker can POST arbitrary content to the `/api/log` endpoint, inject newline-delimited fake log lines into stdout and downstream SIEM pipelines, mask malicious activity behind crafted noise, or saturate the logging pipeline at 100+ requests per second. No public exploit has been identified at time of analysis, and the vulnerability is not listed in CISA KEV, but the trivial exploitation bar (no authentication, no special conditions, default configuration) warrants prompt patching.
Arbitrary file download via path traversal in the Unlimited Elements For Elementor WordPress plugin (versions ≤ 2.0.14) allows authenticated Contributor-level users to retrieve arbitrary files from the server filesystem. Exploitation requires only low-privilege WordPress credentials and no user interaction, with high confidentiality impact - sensitive files such as wp-config.php containing database credentials are directly at risk. No public exploit or active exploitation has been confirmed at time of analysis, but the low attack complexity and broad deployment of Elementor-based WordPress sites elevates the practical urgency of patching.
Unauthorized entry disclosure in Statamic CMS exposes restricted content to any authenticated Control Panel user, regardless of their assigned role permissions. Any CP account - even one holding only the 'access cp' permission - can read entry content, custom field values, and unpublished drafts from any collection by querying the navigation pages endpoint. No data can be modified. Vendor-released patches exist for both active branches (5.74.1 and 6.24.0); no public exploit or active exploitation has been identified at time of analysis.
Unsafe method invocation via Antlers template resolution in Statamic CMS enables unauthenticated remote attackers to destroy content and stored assets on affected installations. Sites running statamic/cms below 5.74.1 or in the 6.x line below 6.24.0 are vulnerable when their templates incorporate user-supplied input into Antlers template resolution - a deployment pattern present on developer-facing or dynamic sites. No public exploit or CISA KEV listing is identified at time of analysis; the CVSS AC:H rating reflects the required site-configuration precondition, tempering real-world exposure despite the destructive impact.
Broken Authentication in Gutena Forms WordPress plugin (versions <= 1.9.0) allows unauthenticated remote attackers to bypass authentication controls, resulting in limited integrity and availability impacts against form configurations or submissions. The vulnerability is classified as CWE-288 (Authentication Bypass Using an Alternate Path or Channel) and was reported by Patchstack. No public exploit code or CISA KEV listing has been identified at time of analysis, but the low attack complexity and lack of authentication requirements make it straightforward to attempt against any exposed WordPress installation running the affected plugin.
Prototype pollution in Mermaid's architecture-beta diagram renderer (mermaid@11.5.0 through 11.16.0) allows an untrusted diagram author to write the string 'horizontal' or 'vertical' directly onto Object.prototype by supplying '__proto__' as a valid group parent identifier. All JavaScript code sharing the same runtime realm that reads or enumerates the injected property name may observe corrupted option defaults, bypassed truthiness checks, or denial-of-service conditions in the embedding application. A public proof-of-concept is included in the advisory; direct remote code execution is not achievable because the injectable value is constrained to those two strings, ruling out function or object injection.
The billing controller in Postiz (postiz-app) before v2.21.10 allows exploitation of an unauthenticated or lightly authenticated API endpoint to activate permanent top-tier paid subscriptions without financial transaction, by forging or replaying lifetime-deal redemption codes against a backend that performs no cryptographic validation or single-use enforcement. The vulnerable `/lifetime` POST endpoint passed user-supplied codes directly into the Stripe-integrated `lifetimeDeal` service with no server-side state verification, a textbook CWE-345 (Insufficient Verification of Data Authenticity) failure. No public exploit has been identified and this CVE is not listed in CISA KEV; the fix in v2.21.10 was complete endpoint removal, confirmed via the upstream GitHub commit.
Path traversal in W3 Total Cache WordPress plugin (versions ≤ 2.10.2) enables remote unauthenticated attackers to manipulate files outside the intended cache directory without any credentials or user interaction. The CVSS vector (AV:N/AC:L/PR:N/UI:N) confirms zero-barrier network exploitation; the C:N/I:L/A:L impact profile indicates this traversal affects file integrity and availability rather than exposing arbitrary file reads, suggesting a write- or delete-capable traversal rather than a classic information-disclosure variant. No public exploit code and no CISA KEV listing are identified at time of analysis.
Unauthorized booking injection into private channels affects OpenReception appointment-booking-software ≤ 1.0.1 via a missing isPublic authorization check in the new-client booking path. An unauthenticated remote attacker solves a trivial 16-bit proof-of-work challenge, obtains a valid bearer token, and then supplies any private channelId in the create-new-client payload - bypassing the access control that protects the standard appointment path. When chained with companion finding V-10 (unauthenticated schedule endpoint leaking all private channel IDs), the entire attack requires only two unauthenticated HTTP sequences, no public exploit code identified at time of analysis.
Broken access control in the IT-Recht Kanzlei Legal Text Connector WordPress plugin (versions <= 1.0.13) allows unauthenticated remote attackers to perform unauthorized actions against the plugin's endpoints, resulting in low-severity integrity and availability impact. The root cause is CWE-862 (Missing Authorization), meaning the plugin fails to verify that a requestor has permission before executing sensitive operations. No public exploit has been identified at time of analysis and this vulnerability is not listed in the CISA KEV catalog.
Authorization bypass in eScriptorium through version 26.04.1 enables any authenticated remote user to overwrite other users' document parts by supplying arbitrary part primary keys to misconfigured serializer endpoints. The flaw is a Django REST Framework IDOR (CWE-639): queryset access restrictions were applied to the ManyRelatedField wrapper instead of its child_relation, rendering them completely inoperative. No public exploit code or active exploitation (CISA KEV) has been identified at time of analysis; the integrity impact is high in collaborative archival workflows where document content corruption is irreversible without backup.
Broken authentication in WP Event Solution WordPress plugin (versions ≤4.1.9) permits unauthenticated remote attackers to bypass authentication controls via an alternate path or channel (CWE-288), resulting in limited information disclosure and partial integrity impact. The CVSS vector (AV:N/AC:L/PR:N/UI:N) confirms this is exploitable over the network with no credentials and no user interaction required against any WordPress installation running the affected plugin. No public exploit code and no CISA KEV listing have been identified at time of analysis.
Stored Cross-Site Scripting in the Business Directory WordPress plugin (versions up to and including 6.4.24) allows authenticated subscribers to inject malicious scripts into directory listings or plugin-managed fields, which execute in the browsers of higher-privileged users - typically administrators - who subsequently view the affected content. The Scope change (S:C) in the CVSS vector confirms the injected payload escapes the attacker's privilege context and affects other users' browser sessions. No public exploit code or active exploitation has been identified at time of analysis, but the low attack complexity and minimal privilege requirement (subscriber account) make this straightforward to weaponize in any WordPress deployment where user registration is open.
Broken access control in Ultimate Store Kit Elementor Addons versions up to and including 3.0.5 allows unauthenticated remote attackers to perform unauthorized read and write operations against WordPress store functionality. The vulnerability stems from missing authorization checks (CWE-862) on one or more plugin endpoints or AJAX actions, enabling bypass of intended access restrictions without any credentials. No public exploit code or CISA KEV listing has been identified at time of analysis, but the zero-barrier entry (PR:N, AC:L) makes opportunistic exploitation straightforward once the specific vulnerable endpoint is identified.