Full account takeover in Wallos 4.0.0-4.9.5 is possible via OIDC authentication bypass when the application links an incoming OIDC identity to an existing local account using only the email claim, ignoring whether the IdP marked that email as verified via the `email_verified` flag. An attacker operating on a multi-tenant or open-registration IdP trusted by the target Wallos instance can claim the administrator's email, trigger the OIDC login flow, and be granted full admin access with no password or prior Wallos credentials. No public exploit has been identified at time of analysis; the attack complexity is rated High (AC:H) reflecting the IdP-configuration prerequisite.
Bearer key scope escalation in MCPHub prior to version 1.0.31 allows an authenticated API client holding a server-scoped key to silently access every server within a group, not just the one explicitly authorized. The `isBearerKeyAllowedForRequest` function performs an any-overlap check at the group level - if any server in the key's allowedServers list belongs to the requested group, the entire group is unlocked for that session with no further per-server re-validation. Exploitation requires only a valid but limited-scope bearer key and knowledge of group membership; no public exploit has been identified at time of analysis, though the CVSS 8.1 High rating reflects substantial confidentiality and integrity exposure.
Controller swapping via the unvalidated `routeName` query parameter in EasyAdminBundle (versions 4.0.0 through 4.29.15 and 5.0.0 through 5.5.0) allows any authenticated low-privilege backend user to reach Symfony routes protected solely by path-based `access_control` rules, potentially exposing restricted administrative functionality without the appropriate role. An attacker who holds any EasyAdmin backend credential and knows a target route name can append `?routeName=target_route` to the admin dashboard URL, causing EasyAdmin's `AdminRouterSubscriber` to swap in the target controller after Symfony's firewall has already cleared the original URL - silently skipping the path rule guarding that route. Vendor-released patches exist in v4.29.16 and v5.5.1; no public exploit has been identified at time of analysis.
Authentication bypass in the SiteGround Security WordPress plugin (versions ≤ 1.6.6) enables unauthenticated remote attackers to circumvent two-factor authentication protections and obtain fully authenticated WordPress sessions. Classified as CWE-290 (Authentication Bypass by Spoofing), this network-exploitable flaw carries a CVSS 8.1 score with full high impact across confidentiality, integrity, and availability, moderated only by elevated attack complexity (AC:H). No public exploit code or CISA KEV listing has been identified at time of analysis.
Vertical privilege escalation in XueZhiSi XZS Open Source Exam System (versions <= 3.9.0) allows an authenticated teacher account (role=2) to permanently delete administrator accounts (role=3) via the POST /api/teacher/user/delete/{id} REST endpoint. The three-step delete sequence - getUserById(id), setDeleted(true), updateByIdFilter() - executes without any role-based authorization check on the target resource, enabling a lower-privileged user to destroy privileged accounts irreversibly. No public exploit code or CISA KEV listing exists; EPSS sits at 0.15%, reflecting minimal observed activity at time of analysis.
OS command injection in Pardus Boot Repair versions 1.0.7 through before 1.0.8 allows a local attacker to execute arbitrary OS commands with the elevated privileges under which the tool operates. The vulnerability stems from improper neutralization of shell metacharacters in user-supplied input passed to OS commands within this boot repair utility developed by TÜBİTAK BİLGEM. No public exploit code or active exploitation has been identified at time of analysis, but the full C/I/A impact and privilege-elevating nature of the tool make this a serious local escalation risk for Pardus Linux deployments.
Cross-tenant tool execution in MCPHub before v1.0.30 allows any authenticated non-admin user to invoke tools on MCP servers owned by other tenants, bypassing the ownership enforcement that correctly gates list views and configuration edits. Because each registered MCP server runs with the capabilities and credentials of its owner - filesystem access, cloud API keys, HTTP-fetch tools - an attacker with any valid session can exfiltrate victim-owned secrets (demonstrated: /etc/passwd, user secrets) and trigger SSRF against internal services using the victim server's context. No public exploit code is independently circulating at time of analysis, but the GitHub advisory documents the attack technique, and the low complexity makes exploitation straightforward for any authenticated account holder.
MCPHub's SSRF guard can be circumvented by authenticated users who supply MCP server URLs containing IPv6 transition-format addresses (NAT64 64:ff9b::/96, 6to4 2002::/16, or Teredo 2001::/32) that encode private IPv4 addresses, allowing requests to internal infrastructure the guard was designed to block. Versions prior to 1.0.32 are affected; the custom isBlockedIpv6 function in src/utils/ssrf.ts omits checks for these three address families. No public exploit identified at time of analysis, and the issue is not listed in CISA KEV. Vendor-released patch is available in v1.0.32 per GitHub advisory GHSA-pr4x-3pc7-2fhw.
Tenant authorization bypass in ash_phoenix's SubdomainHook allows an authenticated user to cross tenant boundaries and access or modify data belonging to other tenants. The flaw is rooted in a LiveView lifecycle ordering error: AshPhoenix.LiveView.SubdomainHook.on_mount/4 called the consumer-defined authorization callback before Phoenix LiveView's handle_params phase had run, guaranteeing the callback always received a nil tenant and either crashed or silently permitted the request. Critically, the flawed check was never re-evaluated on subsequent in-session navigations, so the bypass persisted for the lifetime of the LiveView connection. No public exploit has been identified at time of analysis, but the bypass is systematic and total for all affected deployments using SubdomainHook with tenant-scoped authorization callbacks.
Privilege escalation in Nokia WaveSuite's CPB Log Files feature allows authenticated low-privilege users to access pages reserved for higher-privilege roles by directly navigating to their URLs, bypassing server-side role enforcement entirely. Affected versions confirmed by EUVD-2026-68372 include WaveSuite 23.6, 24.6, 24.12, and 25.6. No public exploit code exists and no active exploitation has been observed (EPSS: 0.14%, 4th percentile), though the trivial attack mechanism - crafting a direct HTTP request - makes this a meaningful risk for insider threat and compromised low-privilege account scenarios in telecom environments.
Resource exhaustion in HTML::FormFu through version 2.08 for Perl allows unauthenticated remote attackers to exhaust server memory and CPU via a crafted query string parameter. The Repeatable element's process method accepts an attacker-controlled integer from the counter_name query parameter with no upper bound, triggering deep-cloning of element subtrees that scales linearly - and with nesting, multiplicatively - with the supplied value. No public exploit is identified at time of analysis, but exploitation requires only a plain GET request with no credentials, authentication, or request body, making the attack surface trivially accessible to any internet-facing application using this feature.
Denial of service in SmallRye GraphQL allows unauthenticated remote attackers to exhaust server CPU or heap memory by submitting a GraphQL query containing a large-exponent float literal (e.g., 1e999999999) that triggers unconstrained BigInteger allocation during scalar coercion. Affected deployments include any application built on Red Hat Build of Quarkus that exposes a GraphQL endpoint via SmallRye GraphQL. No public exploit or KEV listing has been identified at time of analysis, though the attack technique is trivially constructible from the public description.
Denial-of-service in Tornado prior to 6.5.8 allows unauthenticated remote attackers to stall the entire server by sending a single POST request with millions of separator-delimited fields in an application/x-www-form-urlencoded body. Because Tornado's RequestHandler parses the body synchronously before handler dispatch using urllib.parse.parse_qs without a max_num_fields limit, a request body up to the 100 MB default max_buffer_size can consume all CPU on the single-threaded event loop and delay every concurrent connection. No public exploit or CISA KEV listing has been identified at time of analysis, but the low attack complexity (AV:N/AC:L/PR:N/UI:N) makes this trivially automatable against any exposed Tornado endpoint.
Undertow's WebSocket subsystem fails to enforce configurable upper bounds on message buffer sizes and session timeouts, which default to unlimited, allowing unauthenticated remote attackers to exhaust JVM heap memory or hold connections open indefinitely until the server crashes. Affected deployments span Red Hat JBoss EAP 7, Red Hat Fuse 7, Red Hat Build of Apache Camel for Spring Boot 4, and Undertow packages in RHEL 8, 9, and 10. No public exploit code has been identified at time of analysis, though the attack primitive requires no specialized tooling and has no complexity or authentication barrier.
Unauthenticated remote execution of database schema migrations in Wallos prior to version 4.9.4 allows any attacker with HTTP access to trigger pending SQLite migration files against the live database by calling endpoints/db/migrate.php directly. The CVSS vector (AV:N/AC:L/PR:N/UI:N) confirms this requires zero authentication, zero complexity, and no user interaction against default-configured instances. No public exploit has been identified at time of analysis, but the trivial attack surface makes this a straightforward integrity threat to any internet-exposed Wallos deployment.
Subscriber-level privilege escalation in Fluent Forms Pro Add On Pack (versions <= 6.2.12) allows authenticated users with minimal access to gain significantly elevated permissions within a WordPress installation. Reported by Patchstack against the wp_manage_ninja plugin, the flaw stems from incorrect privilege assignment (CWE-266), meaning subscriber-role accounts can trigger functionality reserved for higher-privileged roles such as administrators. No public exploit or CISA KEV listing has been identified at time of analysis, though the network-accessible attack vector and high CVSS impact across confidentiality, integrity, and availability make this a meaningful risk for any WordPress site accepting subscriber registrations.
Unauthenticated remote file read in RESTEasy's SourceProvider component allows network attackers to exfiltrate arbitrary server-side files by exploiting an XML External Entity (XXE) flaw. The vulnerability exists because SourceProvider.writeTo() instantiates a SAXParser without disabling external entity resolution, so any endpoint that accepts application/xml and returns a Source or StreamSource type will parse attacker-controlled DOCTYPE declarations and leak file contents in the HTTP response. CVSS rates this 7.5 (High) with full confidentiality impact; no public exploit code or CISA KEV listing is identified at time of analysis, but the low-complexity unauthenticated network vector makes this a credible threat wherever RESTEasy-backed XML endpoints are exposed.
Broken access control in Fluent Forms Pro Add On Pack (versions 6.2.12 and earlier) exposes privileged plugin functionality to unauthenticated remote attackers, allowing unauthorized integrity-impacting actions without any credentials or user interaction. The CVSS 3.1 score of 7.5 (High) reflects a network-accessible, low-complexity attack path confirmed by Patchstack, the reporting vendor. No public exploit code and no CISA KEV listing have been identified at time of analysis, but the PR:N/AC:L combination makes this theoretically automatable at scale.
Unauthenticated remote access to ACL-restricted functionality in KitLogistic (all versions before v2.2.2) exposes high-confidentiality data without requiring any credentials. The root cause is CWE-862 Missing Authorization: the application does not enforce permission checks on certain endpoints, allowing any network-reachable user to retrieve sensitive logistics data. No public exploit code or active exploitation has been identified at time of analysis, but the CVSS:3.1 vector (AV:N/AC:L/PR:N/UI:N) indicates trivial, unauthenticated network exploitation against default deployments.
Unauthenticated remote attackers can arbitrarily modify wireless transmit-power settings or deny wireless service on TOTOLINK T6 firmware 4.1.5cu.748_B20211015 by sending a crafted POST to the device's CGI management interface. The setWiFiSignalCfg function is reachable without any authentication gate, a CWE-284 improper access control defect that allows an adversary to degrade or eliminate wireless connectivity for all clients on the affected device. No public exploit code or CISA KEV listing is recorded; EPSS at 0.18% (7th percentile) reflects minimal current exploitation interest despite trivially automatable attack conditions.
OIDC login CSRF in Wallos prior to 4.9.4 allows a remote unauthenticated attacker to log a victim into the attacker's own account by tricking them into visiting a crafted callback URL. The root cause is that checksession.php processes the OIDC authorization callback without validating the state parameter against the session-stored nonce generated in login.php, breaking the OIDC CSRF protection mechanism entirely. No public exploit has been identified at time of analysis, but the attack requires only that the victim use OIDC login and click a malicious link, making it low-friction for a motivated attacker.
Unauthenticated remote manipulation of static DHCP rules on TOTOLINK T6 routers running firmware 4.1.5cu.748_B20211015 is possible due to missing access controls in the setStaticDhcpRules handler at /cgi-bin/cstecgi.cgi. An attacker with network access to the router's management interface can send a crafted POST request to add or replace DHCP reservations without any authentication. No public exploit has been confirmed in CISA KEV, though researcher-coordinated disclosure references exist on GitHub, and exploitation is straightforward given zero prerequisites.
Unauthenticated DDNS configuration manipulation in TOTOLINK T6 firmware 4.1.5cu.748_B20211015 allows any network-accessible attacker to alter dynamic DNS state without credentials. The setDdnsCfg function in the CGI-based web interface (/cgi-bin/cstecgi.cgi) fails to enforce access control, making exploitation trivial via a crafted POST request. EPSS is low at 0.16% (6th percentile) and no CISA KEV listing exists, though GitHub-hosted vendor-coordination repositories suggest researcher-coordinated disclosure and likely proof-of-concept material is available.
Path traversal in MetaGPT 0.8.1's SPO extension exposes arbitrary server-side files to unauthenticated remote attackers via a crafted FILE_NAME parameter. The flaw in metagpt/ext/spo/utils/load.py allows set_file_name() and load_meta_data() to open attacker-controlled paths - including traversal sequences - without confirming the resolved path remains within the intended settings directory. A public proof-of-concept writeup exists on GitHub; no active exploitation is confirmed in CISA KEV at time of analysis.
Unauthenticated integrity compromise in TOTOLINK T6 firmware 4.1.5cu.748_B20211015 allows remote attackers to delete URL filtering rules without any credentials. The CGI endpoint /cgi-bin/cstecgi.cgi exposes the delUrlFilterRules function with no access control enforcement, meaning any network-reachable actor can silently dismantle content filtering or parental-control policies by sending a crafted POST request. No public exploit or CISA KEV listing has been identified at the time of analysis.
Unauthenticated information disclosure in TOTOLINK T6 firmware 4.1.5cu.748_B20211015 exposes cloud firmware download state data via the getCloudDownloadStatus CGI function. The CVSS vector (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) confirms fully remote, zero-interaction exploitation with no credentials required against the device's web management interface. No public exploit identified at time of analysis, though coordinated disclosure activity is documented in researcher GitHub repositories; the vulnerability is not listed in the CISA KEV catalog.
Unauthenticated deletion of port-forwarding rules is possible on TOTOLINK T6 routers running firmware 4.1.5cu.748_B20211015 due to missing access control in the delPortForwardRules function. An attacker with network access to the router's web management interface can send a crafted POST request to /cgi-bin/cstecgi.cgi and silently remove NAT port-forwarding rules without any credentials. The vulnerability carries a CVSS 7.5 High score; no public exploit code or CISA KEV listing has been confirmed at time of analysis, though GitHub CVE coordination activity signals active researcher interest.
Unauthenticated system log disclosure in TOTOLINK T6 router firmware 4.1.5cu.748_B20211015 allows any network-accessible attacker to retrieve recent system logs by sending a crafted POST request to the /cgi-bin/cstecgi.cgi endpoint. The showSyslog function implements no access control check (CWE-284), exposing operational data that may include internal IP topology, admin activity, DNS queries, and connection metadata. No public exploit has been identified at time of analysis, but the attack requires no authentication and no user interaction per CVSS:3.1 AV:N/AC:L/PR:N/UI:N.
Unauthenticated configuration modification in TOTOLINK T6 firmware 4.1.5cu.748_B20211015 allows any network-reachable attacker to alter the device's language setting by sending a crafted HTTP POST request to /cgi-bin/cstecgi.cgi without supplying credentials. The setLanguageCfg function performs no access control check before processing the request (CWE-284), meaning the endpoint is open to any host that can reach the management interface. No active exploitation is confirmed in the CISA KEV catalog, and no public exploit code has been confirmed at time of analysis, though two independent researchers have coordinated disclosure directly with TOTOLINK via GitHub.
Unauthenticated NTP configuration manipulation in TOTOLINK T6 firmware 4.1.5cu.748_B20211015 allows any network-reachable attacker to overwrite time synchronization settings by sending a crafted POST request directly to /cgi-bin/cstecgi.cgi. The setNtpCfg handler performs no access control check before processing the request, a CWE-284 (Improper Access Control) defect that the CVSS vector confirms is exploitable with no privileges and no user interaction. No active exploitation or CISA KEV listing has been identified, though two independent researchers filed vendor coordination reports via GitHub, and the trivially low attack complexity means exploitation requires minimal skill.
Broken authentication in RegistrationMagic WordPress plugin versions up to and including 6.0.9.8 allows unauthenticated network attackers to bypass authentication controls via an alternate path or channel, achieving high confidentiality and integrity impact without any credentials or user interaction. Classified under CWE-288, the flaw enables unauthorized access to registration and submission management functionality that should be gated behind authentication. No public exploit code or CISA KEV listing has been identified at time of analysis, though the CVSS High severity and dual C:H/I:H impact classify this as a priority remediation for any WordPress deployment running the affected plugin.
DNS-rebinding protection in AshAi.Mcp.Server (ash_ai 0.8.0-0.x) is bypassable because the default origin check trusts the attacker-controlled Host and X-Forwarded-Proto headers as proxies for TLS context. A malicious web page can exploit this to issue arbitrary cross-site requests to the victim's locally running MCP server, executing MCP calls under the victim's actor credentials. No public exploit has been identified at time of analysis, but the attack path is mechanically straightforward for any attacker who can lure a developer to a malicious page while they have the MCP server running locally.
Privilege escalation in zbus_polkit before 5.1.0 stems from Subject::new_for_owner() encoding the UID as D-Bus type u (unsigned 32-bit) rather than the type i (signed 32-bit) mandated by org.freedesktop.PolicyKit1.Authority, silently nullifying any caller-supplied UID and causing polkit to fall back to a TOCTOU-vulnerable /proc PID lookup. Applications that pass SO_PEERCRED-derived UIDs specifically to defend against PID reuse receive no benefit, as the value is discarded before polkit processes the authorization subject. A local low-privileged attacker who causes an authorized process to exit and wins the PID reassignment race is granted that process's polkit authorization; no public exploit code has been identified at time of analysis.
Arbitrary file write in pnpm package manager versions before 10.34.5 and 11.0.0-11.11.0 allows an attacker who can supply a crafted `pnpm-lock.yaml` to escape the `node_modules` directory boundary and place package contents at attacker-controlled filesystem paths when a developer runs `pnpm install`. Even `--ignore-scripts` does not prevent the file-write primitive; when the project additionally enables `dangerouslyAllowAllBuilds` or a matching `allowBuilds` configuration entry, the escaped package's lifecycle scripts execute with the victim user's OS-level privileges. Vendor-released patches are available as pnpm 10.34.5 and 11.11.0; no public exploit has been identified at time of analysis.
Arbitrary file read in ILIAS's SOAP addFile method permits any authenticated low-privilege user to retrieve server-side files by supplying crafted XML with COPY-mode import entries that contain absolute attacker-controlled paths. The flaw spans three major release lines - all versions before 9.22, 10.0 through 10.9, and 11.0 through 11.2 - and is particularly damaging because the targetable files include ILIAS configuration files storing database credentials and setup passwords, enabling lateral movement to backend systems. No public exploit identified at time of analysis, though the vendor patch commit publicly documents the exact vulnerable code path, substantially reducing the effort required for independent exploit development.
Authorization bypass in AshAi (ash_ai) versions 0.6.0 through pre-1.0.0 allows any authenticated tool caller to update or destroy database records it never legitimately identified, up to and including every row in a table. The flaw is in AshAi.Tool.Execution.identity_filter/3, which passes raw tool arguments directly into Ash.Query.do_filter/2; because Ash's filter DSL interprets map values as predicate expressions rather than scalar literals, a caller can inject filter logic such as {"not_eq": "<own-ref>"} to retarget bulk writes to arbitrary records. A vendor patch is available in commit 87f616d and the fix version is 1.0.0; no public exploit or CISA KEV listing exists at time of analysis.
SQL injection in WAPT Server's GET /api/v3/hosts REST API endpoint allows any remote authenticated user with read-only privileges to inject arbitrary PostgreSQL expressions via the `columns` query parameter, bypassing host-scope access controls and exfiltrating data from tables beyond the user's authorized scope. Versions 2.6.1.17834 and earlier are confirmed affected per CPE cpe:2.3:a:tranquil_it:wapt. No public exploit code or CISA KEV listing is identified at time of analysis, but the low attack complexity and minimal privilege requirement make this a realistic internal threat for any WAPT deployment; a vendor patch is available.
Credential leakage in ash_ai (versions 0.1.0 through before 1.0.0) exposes embedding provider API keys and request internals to authenticated API callers via unsanitized error messages. In AshAi.Changes.Vectorize, a failed embedding provider call caused the raw Elixir error struct - which HTTP clients commonly populate with the outbound Authorization header, request URL, and provider response body - to be passed through inspect/1 directly into a user-facing changeset error. AshJsonApi and AshGraphql serialize these changeset errors into API responses, making the full credential material readable by any caller who can trigger a provider failure. No public exploit has been identified at time of analysis, but the trigger condition (oversized or malformed vectorized content) is trivially reachable by any authenticated user of an exposed endpoint.
Cross-workspace authorization bypass in ToolJet before v3.16.208 allows workspace administrators to create, enumerate, and delete database tables belonging to workspaces they do not own. The server-side table-management API accepts an organizationId path parameter without validating it against the authenticated session's workspace scope, enabling any workspace admin to target arbitrary tenants by substituting organizationId values in API requests. No public exploit code has been identified at time of analysis, and no CISA KEV listing is present, but the attack technique is straightforward for any attacker already holding workspace admin credentials.
Memory exhaustion denial of service in @pdfme/pdf-lib before 5.5.10 allows network-accessible attackers with low-privilege PDF upload access to crash Node.js server processes or freeze browser tabs by submitting a crafted PDF embedding a FlateDecode decompression bomb. The DecodeStream.ensureBuffer() method doubles its internal buffer without any upper-bound check, enabling a kilobyte-scale compressed payload to trigger unbounded memory allocation during parsing. No active exploitation is confirmed in CISA KEV, but the GHSA advisory for GHSA-vrqm-gvq7-rrwh includes a proof-of-concept Python script that lowers the exploitation barrier.
Storage exhaustion via missing authorization preflight in Kirby CMS 5.0.0-5.5.1 allows authenticated panel users with restricted file permissions to indefinitely fill temporary upload storage. Kirby's REST API chunk upload handler in src/Api/Upload.php persisted chunk data to site/cache/.uploads before running permission checks, enabling users who lack files.create, files.replace, or users.update permissions to repeatedly submit Upload-Length headers and accumulate orphaned chunks retained for 24 hours. Repeated abuse can prevent legitimate users from uploading files or block site logic that writes to storage. No public exploit has been identified at time of analysis, and final content-path permission checks remained intact, preventing unauthorized file promotion to site content directories.
MCPHub's built-in prompt and resource management controllers expose mutating write endpoints (POST/PUT /api/prompts* and POST/PUT /api/resources*) to any authenticated user, not just admins, allowing low-privileged accounts to create, overwrite, and shadow global prompt templates and resources served to every active session. Affected versions prior to 1.0.32 attach these handlers to an authenticated router but include no admin-role gate; the DAO singletons written by these handlers take precedence over connected MCP server responses during prompt and resource resolution, meaning an attacker's injected templates silently reach all other users' LLM sessions. No public exploit code has been identified at time of analysis, but the GitHub security advisory, patch commit, and pull request are all public, materially lowering the barrier for motivated actors.
Unauthenticated Cross-Site Scripting in the Email Essentials WordPress plugin by Acato (all versions through 6.0.6) allows remote attackers to inject and execute arbitrary JavaScript in a victim's browser by tricking them into visiting a crafted URL. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:R/S:C) confirms the attack is network-accessible, requires no privileges, and carries a scope change indicating the injected script runs in the victim's browser context rather than the server's. No public exploit code or CISA KEV listing has been identified at time of analysis.
Unauthenticated stored or reflected Cross-Site Scripting in the LeadConnector WordPress plugin (versions ≤ 4.0.5) allows remote attackers to inject and execute arbitrary JavaScript in a victim's browser session without any prior authentication. The CVSS vector confirms a scope change (S:C), meaning the injected script escapes the plugin's context and can affect the broader WordPress session environment. No public exploit code or active exploitation has been identified at time of analysis, but the lack of authentication barrier lowers the effort required to attempt attacks at scale against WordPress installations.
Cross-site scripting in Uncode WordPress theme versions 2.12.7 and below allows unauthenticated attackers to inject arbitrary JavaScript that executes in victims' browsers upon interaction. The CVSS scope change (S:C) indicates injected scripts run in a security context beyond the theme itself - typically the authenticated victim's browser session - enabling session hijacking, credential harvesting, or malicious redirects. No public exploit code and no active exploitation (CISA KEV) have been identified at time of analysis.
Unauthenticated cross-site scripting in the Email Subscribers & Newsletters WordPress plugin (versions ≤ 5.9.33) by Icegram allows remote, unauthenticated attackers to inject malicious scripts that execute in the browsers of users who visit affected pages. The CVSS scope-change indicator (S:C) confirms the injected payload crosses trust boundaries into the victim's browser context, enabling session hijacking, credential theft, or administrative account takeover on the affected WordPress site. No public exploit code has been identified and this CVE does not appear in the CISA KEV catalog at time of analysis.
Server-Side Request Forgery in MCPHub prior to v1.0.32 allows any authenticated non-admin user to register an arbitrary server URL, coercing the hub into issuing outbound HTTP requests with no egress filtering against loopback, RFC1918, or link-local 169.254.0.0/16 ranges. Via the OpenAPI proxy path, the full HTTP response body is reflected back to the caller, enabling exfiltration of data from internal services including cloud metadata endpoints; via SSE and streamable-HTTP transports, the requests are sent blind, enabling internal port scanning and service triggering. No public exploit identified at time of analysis, and the vulnerability is not listed in CISA KEV.
Unauthenticated XSS in miniOrange's WordPress Social Login and Register plugin (versions 7.8.2 and earlier) allows remote attackers to inject arbitrary JavaScript into a victim's browser by tricking them into following a crafted URL targeting the plugin's social login flow. The scope-changed CVSS vector (S:C) confirms cross-context impact, enabling session hijacking, credential theft, or malicious redirects against WordPress site visitors and administrators. No public exploit code has been identified and the vulnerability is not listed in CISA's KEV catalog at time of analysis.
Unauthenticated cross-site scripting in SliceWP WordPress affiliate plugin versions 1.2.10 and earlier allows a remote unauthenticated attacker to inject malicious scripts that execute in the browser context of other users, including site administrators. The scope-changed CVSS vector (S:C) indicates the injected payload crosses browser security boundaries, enabling session hijacking, credential theft, or administrative action takeover. No public exploit code or CISA KEV listing has been identified at time of analysis, though the Patchstack disclosure provides sufficient detail for exploit development by capable actors.
Unauthenticated XSS in RegistrationMagic WordPress plugin versions 6.0.9.8 and below exposes sites to script injection attacks requiring only that a victim visit a crafted URL. The CVSS scope-change metric (S:C) confirms the injected payload executes in the victim's browser security context rather than the server's, enabling session hijacking, credential theft, or administrative action on behalf of the victim. No public exploit code has been identified at time of analysis, and the vulnerability is not listed in the CISA KEV catalog.