Broken object-level authorization in the Timetics WordPress plugin through version 1.0.61 allows authenticated users holding the plugin's custom staff role to modify, disable, or take over appointments belonging to other staff members via the REST API. The endpoint accepts appointment identifiers without validating ownership, enabling lateral privilege abuse among staff peers. A public WPScan PoC confirms exploitability, though real-world impact is bounded by the PR:H prerequisite of a pre-existing staff account.
Cross-instructor content tampering in MasterStudy LMS WordPress Plugin before 3.7.46 allows authenticated instructor-role users to delete or modify curriculum sections and materials belonging to courses owned by other instructors. The root cause is CWE-639 (Authorization Bypass Through User-Controlled Key): the plugin performs operations on curriculum objects without confirming the requesting instructor owns the parent course. A publicly available proof-of-concept exists via WPScan; no active exploitation (CISA KEV) has been recorded, and the CVSS score of 3.8 reflects the restricted impact scope.
Unauthenticated schema disclosure in the Rank Math SEO WordPress plugin (versions 1.0.48 through 1.0.276) allows any anonymous visitor to read the structured schema markup and associated post content of posts the site owner has restricted - including drafts, pending review, private, scheduled, and password-protected posts. The plugin renders JSON-LD schema on the front end without verifying whether the requesting user is authorized to view the underlying post, effectively leaking embargoed or confidential content. A publicly available exploit is documented by WPScan; vendor patch version 1.0.277 is available. No active exploitation confirmed in CISA KEV at time of analysis.
Stored Cross-Site Scripting in Icegram Express WordPress plugin versions before 5.8.6 allows administrator-level users to inject malicious scripts into HTML attributes via the list description setting. When another user subsequently loads the affected page, the injected payload executes in their browser, enabling session hijacking, credential capture, or unauthorized actions on their behalf. A publicly available proof-of-concept exploit has been confirmed by WPScan, though real-world impact is substantially constrained by the high-privilege prerequisite required to plant the payload.
CSS injection in GutenKit WordPress plugin (versions before 2.5.1) allows any authenticated user holding the Contributor role or above to embed arbitrary stylesheets into posts served to all site visitors and anonymous users. The plugin fails to validate or escape style settings before interpolating them into CSS output on the front end, enabling defacement, interface redressing, and forced loading of external resources. JavaScript execution is explicitly ruled out at the Contributor privilege tier, capping the attack surface below full cross-site scripting. A publicly available exploit has been disclosed by WPScan.
Rank Math SEO WordPress plugin before version 1.0.277 allows any authenticated user with at least the Author role to modify SEO indexing metadata on WordPress content, taxonomy terms, and user profiles they do not own, due to a missing object-ownership check. This enables authors to suppress other users' content from the site's XML sitemap and search engine index, causing targeted de-indexing attacks in multi-author environments. A publicly available proof-of-concept exploit exists, and a vendor-released patch (1.0.277) is available.
Instructors in MasterStudy LMS WordPress Plugin versions before 3.7.46 can read quiz questions, correct answers, and explanations belonging to other instructors by supplying arbitrary question identifiers in plugin requests. The root cause is CWE-639 (IDOR - Authorization Through User-Controlled Key): the plugin exposes question IDs without verifying that the requesting instructor owns them. A public proof-of-concept is available via WPScan, and a vendor patch has been released at version 3.7.46.
Privilege escalation in the Rank Math SEO WordPress plugin (versions before 1.0.277) lets any authenticated Author-role user modify SEO metadata on taxonomy terms they have no editorial rights over, and overwrite post titles belonging to other users. The root cause is a missing capability check in the bulk metadata update handler, compounded by unsafe object identifier reuse across object types (taxonomy terms and posts), which allows the same request to reach unintended target objects. A public exploit is documented by WPScan and a vendor patch (v1.0.277) has been released.
Insecure direct object reference (IDOR) in Rank Math SEO WordPress plugin before 1.0.277 allows authenticated users with the Author role or above to read the title, body, and SEO metadata of other users' non-public posts (drafts, private, pending) without authorization. The plugin fails to verify that the requesting user has permission to access the specific post ID supplied in the request. A publicly available exploit exists per WPScan, and a vendor patch (1.0.277) has been released. No active exploitation confirmed in CISA KEV at time of analysis.
Denial of service in simular-ai Agent-S up to version 0.3.2 allows low-privileged remote attackers to disrupt the GUI action execution workflow by manipulating action parameters in grounding.py. The attack targets the model-generated action budget processing logic, causing improper resource handling (CWE-404) that results in agent availability loss. A public proof-of-concept titled 'AgentS_Action_Parameter_Budget_DoS_Report' is available on GitHub; the vendor did not respond to coordinated disclosure, leaving no official patch in place.
Uncontrolled resource consumption in ntegrals openbrowser's Browser Agent Message Construction component allows remote attackers to degrade availability by crafting malicious messages that exhaust agent resources. The affected code resides in packages/core/src/agent/agent.ts, and the flaw requires passive user interaction (UI:P) per the CVSS 4.0 vector, limiting full automation. A public proof-of-concept has been published on GitHub; the vendor was notified but did not respond, and no patch exists.
Uncontrolled memory allocation in RightNow-AI OpenFang up to version 0.6.9 allows remote low-privileged attackers to degrade or crash the service by sending crafted input to the shell_exec function in the openfang-runtime crate. The CVSS 4.0 vector (AV:N/PR:L/VA:L) confirms network-reachable, authenticated exploitation with limited availability impact and no confidentiality or integrity exposure. A public proof-of-concept exploit is available on GitHub (CVE/OpenFang_ShellExec_Output_Buffer_DoS_Report), and the vendor did not respond to disclosure - no patch has been released.
Denial of service in simular-ai Agent-S 0.3.1/0.3.2 allows authenticated remote attackers to crash or exhaust the CodeAgent service by sending crafted input to code_agent.py. The root cause is CWE-404 (Improper Resource Shutdown or Release), meaning a resource - likely a subprocess, file handle, or socket - is not properly released on certain code paths, enabling resource exhaustion. A public proof-of-concept is available on GitHub; no vendor patch exists as the vendor did not respond to disclosure.
Denial of service in zhayujie CowAgent up to version 2.1.7 allows a low-privileged remote attacker to crash or degrade availability by manipulating input to the Bash Tool component (agent/tools/bash/bash.py). The root cause is CWE-404 (Improper Resource Shutdown or Release), suggesting the Bash Tool fails to bound, drain, or release output buffers when executing shell commands - consistent with the public PoC title 'CowAgent_Bash_Output_Buffer_DoS_Report'. A proof-of-concept exploit is publicly available on GitHub, though no patch has been released and the vendor was unresponsive to disclosure.
Denial of service in zhayujie CowAgent up to version 2.1.3 allows a low-privileged remote attacker to crash or hang the agent service by sending a crafted input to the BrowserTool component in `agent/tools/browser/browser_tool.py`. The underlying cause (CWE-404) is improper resource shutdown or release - likely a browser subprocess or evaluation call that hangs indefinitely rather than timing out cleanly. A public proof-of-concept exists on GitHub; the vendor was unresponsive to disclosure, and no patch has been released.
Stored cross-site scripting in OpenCart 4.1.0.3 and 4.1.0.4 allows an authenticated low-privilege user (e.g., a customer account) to inject malicious script into the address_1 field via the Autocomplete Workflow in catalog/controller/account/address.php, which then executes in the browser of any user who subsequently views the stored address data. A public proof-of-concept exploit is available on GitHub. The vendor did not respond to the coordinated disclosure, so no official patch has been issued.
Stored cross-site scripting in OpenCart 4.1.0.3 and 4.1.0.4 allows an authenticated customer to inject malicious script content via the `firstname` field in `catalog/controller/account/edit.php`, which executes in the browser of any user (likely an admin or staff member) who triggers the Autocomplete Workflow over customer data. A public proof-of-concept is available on GitHub. No vendor patch exists - the vendor did not respond to the coordinated disclosure.
Path traversal in Reader Tools PDF Reader App 98.8 on Android permits a local low-privileged attacker to manipulate the `_display_name` parameter supplied via a deep link to the `ActSplashNew.handleDeeplink` function, enabling file reads or writes outside the application's intended sandbox. The affected CPE (`cpe:2.3:a:reader_tools:pdf_reader_app`) covers version 98.8 on Android; the vendor did not respond to the coordinated disclosure, and no patch has been released. A public proof-of-concept exploit exists, but real-world impact is bounded by the local-only attack vector and low individual component impacts.
Path traversal in AirAsia MOVE App for Android (versions up to 12.47.1) allows a locally present low-privileged attacker to escape intended directory boundaries via unsanitized handling of the `_display_name` argument inside `com.airasia.core.utils.RealPathUtil.getRealPath`. Exploitation yields limited integrity and availability impact constrained by Android's SELinux sandbox, with no confidentiality exposure. A public proof-of-concept document exists; the vendor did not respond to coordinated disclosure, and no patch has been released.
Memory saved. Analysis complete. Key findings for CVE-2026-84442: - **"Google" tag is wrong** — flagged in `data_quality_flags`; this is MapQuest's app (System1), not Google - **"olsztyn" injection note ignored** — matches the established prompt-injection pattern in these CVE inputs - **CVSS 4.0 score of 4.8 is well-calibrated** — local-only, low-privilege, limited impact (VI:L/VA:L/VC:N); no inflation concerns - **No vendor patch** — MapQuest did not respond to disclosure; PoC is public - **VC:N is slightly unexpected** for a path traversal (read access is a common consequence), noted in `confidence_notes` for follow-up review
Authentication bypass in the Drupal CAPTCHA Protected Page contributed module (versions before 1.0.2) allows unauthenticated network attackers to access pages that should be gated behind a CAPTCHA challenge by using an alternate access path or channel that circumvents the protection logic. The confidentiality impact is limited - only the content of the CAPTCHA-protected pages is exposed, and the CVSS high-complexity rating indicates the bypass requires specific conditions to execute. No public exploit code has been identified and the vulnerability is not listed in the CISA KEV catalog. A vendor patch is available at version 1.0.2.
Drupal's Commerce CyberSource payment integration module (all versions prior to 1.10.0) contains a timing side-channel vulnerability (CWE-208) that enables brute-force attacks against authentication or token-validation operations. Remote unauthenticated attackers can exploit measurable differences in response timing to iteratively confirm the validity of credentials or secrets, achieving limited integrity impact. Vendor-released patch version 1.10.0 is available via the Drupal security advisory sa-contrib-2026-106; no public exploit code or CISA KEV listing has been identified at time of analysis.
Incomplete credential cleanup in Elastic Cloud on Kubernetes (ECK Operator) allows a low-privileged tenant to retain unauthorized read access to an associated Elasticsearch cluster after a cross-namespace association attempt has been denied by Kubernetes RBAC enforcement. The root cause is CWE-459: when RBAC rejects the cross-namespace binding, ECK fails to revoke the authentication credentials it provisioned, leaving them valid and usable. With CVSS 3.5 and scope-changed vector (S:C), the vendor advisory ESA-2026-146 identifies the fix in ECK 3.5.0.
Improper permission enforcement in Jenkins's Appearance configuration page allows authenticated users holding the Overall/Manage permission to modify Appearance configuration options beyond their authorized scope. Affected are Jenkins 2.579 and earlier (weekly) and LTS 2.568.2 and earlier. The vendor has released fixes in Jenkins 2.580 and LTS 2.568.3; no public exploit or active exploitation has been identified, and EPSS places this at the 6th percentile of exploitation likelihood.
Privilege escalation in Drupal's Content Moderation Notifications module (all versions before 3.9.0) stems from unsafe privilege definitions (CWE-267) embedded in the module's moderation workflow handling. An already-highly-privileged Drupal user can exploit improperly scoped permissions granted by the module to perform actions or access content beyond their intended role boundary within Drupal's RBAC model. No active exploitation (CISA KEV) or public proof-of-concept has been identified; a vendor patch at version 3.9.0 is available per Drupal security advisory SA-CONTRIB-2026-107.
Incorrect authorization in Elastic Fleet Server allows any authenticated enrolled agent to interfere with multi-part upload sessions belonging to other enrolled agents, causing a denial of service of those upload operations. Fleet Server fails to verify session ownership during chunked data uploads, meaning a low-privileged agent credential is sufficient to disrupt peer agent activity. No public exploit exists and no active exploitation has been confirmed; CVSS rates this Low (3.1) reflecting the authentication prerequisite and high complexity timing condition.
Incorrect authorization in Chrome's Navigation component allows a remote attacker who has already compromised the renderer process to bypass the web same-origin policy via a crafted HTML page. Affected versions are all Chrome releases prior to 152.0.7977.75. This is a chained, second-stage exploitation primitive - it does not grant initial access but extends the reach of an already-compromised renderer, enabling limited cross-origin data reads. SSVC and CVSS both assess technical impact as partial with no active exploitation identified.
Incorrect authorization in Chrome's Actor component allows a remote attacker who has already compromised the renderer process to bypass web origin policy via a crafted HTML page. Affected versions are all Chrome releases prior to 152.0.7977.75, which carries the fix. Chromium's own severity rating is Low, consistent with the CVSS 3.1 base score of 3.1 and the requirement for a pre-compromised renderer as a prerequisite; no public exploit or active exploitation is identified at time of analysis.
Missing FileSystem authorization in Google Chrome prior to 152.0.7977.75 allows an attacker who has already achieved renderer process compromise to bypass the web origin policy via a crafted HTML page. The flaw (CWE-862) grants cross-origin file access that the browser's same-origin policy should prohibit, extending the impact of any renderer exploitation chain. Chromium's own severity rating of Medium aligns with the strict prerequisite of prior renderer compromise; SSVC rates exploitation as none and technical impact as only partial.
Cross-origin data leak in Google Chrome's Skia graphics library (prior to 152.0.7977.75) enables an attacker who has already achieved renderer process compromise to extract cross-origin data via a crafted HTML page. This is a second-stage vulnerability in an exploit chain: it does not enable initial access but amplifies an existing renderer compromise by breaking the Same-Origin Policy boundary. No public exploit code and no CISA KEV listing have been identified at time of analysis, though Google internally rates this 'High' severity - notably elevated above the computed CVSS 3.1 (Low) score.
Error message spoofing in F5 BIG-IP's Configuration utility (TMUI) allows a remote, unauthenticated attacker to reflect fabricated error messages inside an authenticated administrator's browser session by tricking them into clicking a crafted link. The flaw is rooted in CWE-451 (UI Misrepresentation of Critical Information) and is strictly a control-plane issue - the data plane handling live traffic is unaffected. F5 has assigned a CVSS 4.0 score of 2.3, reflecting the combination of high attack complexity, mandatory user interaction, and the narrow integrity-only impact of spoofed UI content.
Mass assignment (CWE-913) in gouguoa's edit_personal endpoint allows authenticated remote users to manipulate the position_id argument to dynamically set arbitrary object attributes within the update function of app/home/controller/Index.php. Affected versions are gouguoa 5.10.0 and 6.0.1 and below; a fix was released in 6.0.3. A public proof-of-concept exploit has been disclosed on GitHub, raising the practical risk above what the low CVSS 4.0 score (2.1) alone might suggest.