Missing authorization checks in the Jetpack VideoPress WordPress plugin versions 3.6 and earlier let an authenticated Subscriber-level account perform actions that should be limited to higher-privileged users, giving a low-privileged attacker the ability to modify data (integrity impact only, with no confidentiality or availability effect per the assessed CVSS vector CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N, base score 6.5). Sites are exposed if they run an affected plugin version and allow the attacker to obtain a Subscriber account, which is trivial on installations with open user registration enabled; fully unauthenticated attackers cannot exploit the flaw. No public exploit code has been identified at time of analysis and the issue is not confirmed actively exploited (no CISA KEV listing), so this is a moderate-priority hardening item rather than an emergency, though the absence of a named vulnerable endpoint in the published advisory makes the true reachable surface hard to bound.
Authenticated SQL injection in WP Booking System - Booking Calendar versions up to and including 2.1.0.1 allows subscriber-level attackers to extract sensitive database information via the 'current_month' parameter. The vulnerability is a regression: a capability check added in 2.0.19.11-2.0.19.14 to fix CVE-2024-50425 was removed in version 2.1, and no nonce validation is required, so any logged-in subscriber can reach the vulnerable AJAX handler. No public exploit code or active exploitation has been identified at time of analysis, and the assessed severity is moderate (CVSS 6.5).
Time-based blind SQL injection in the WP Directory Kit plugin for WordPress (all versions up to and including 1.5.9) allows authenticated attackers holding subscriber-level access or above to append extra SQL into an existing query and read sensitive information from the site database. The issue is second-order: a subscriber stores a display_name value containing a single quote, which WordPress preserves verbatim, and the payload only fires later when WdkCachedUserEditor::update_listings_user_editor() re-reads that cached value into the SQL sink without escaping or prepared-statement parameterization. Rated CVSS 6.5 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N), the impact is confidentiality-only and blind, so exfiltration is slow and generates measurable request volume; no public exploit code has been identified at time of analysis and there is no confirmed active exploitation (CISA KEV).
Authorization bypass in the Academy LMS - AI Course Builder, Quizzes, Certificates & eLearning WordPress plugin (all versions up to and including 4.0.3) allows any user who holds an instructor role for at least one course to permanently delete lesson comments and their replies belonging to courses they do not instruct, including comments authored by administrators. Exploitation requires an authenticated account with instructor-level access (CVSS PR:L), and the attacker supplies their own valid course_id to pass the plugin's flawed instructor check while targeting comment IDs from other courses; the abuse results in irreversible content destruction (integrity impact High, confidentiality and availability unaffected per the assessed vector). No public exploit code has been identified at time of analysis, the issue is not listed as confirmed actively exploited (CISA KEV), and the assessed severity is moderate (CVSS 6.5) rather than an emergency, primarily because the instructor-account prerequisite confines the threat to semi-trusted internal users.
Unauthenticated content injection in the Kutethemes 'Boutique' WordPress theme at version 2.3.3 and earlier lets remote attackers reach a shortcode-handling path and inject arbitrary content into affected sites. No authentication or user interaction is required (CVSS:3.1/AV:N/AC:L/PR:N/UI:N), so any internet-facing WordPress installation with this commercial theme active is exposed by default; the attack surface is bounded to sites running this specific theme. Impact is assessed as limited content injection and partial data exposure (C:L/I:L/A:N) rather than server compromise, and no public exploit code has been identified at time of analysis, so the practical risk is concentrated in unpatched, theme-deployed sites.
Trusted-credential abuse in CodePeople2 Sell Downloads (WordPress plugin) up to version 1.2.3 allows unauthenticated remote attackers to bypass origin verification and access or modify limited data, such as download or order metadata. The flaw, tracked as CVE-2026-94590, has a CVSS score of 6.5 and is not known to be actively exploited; no public exploit code has been identified. Only WordPress sites with this specific, low-prevalence plugin active are affected, making the real-world risk moderate and low-priority.
Broken access control in the Tutor LMS WordPress plugin before 4.1.1 lets an authenticated user with instructor-level privileges reassign the parent of arbitrary posts on the site, allowing them to absorb other instructors' course content into their own courses and to orphan legitimate published content so it becomes unreachable. The root issue is an insecure direct object reference (CWE-639) in the plugin's course content ordering handler, which never verifies that the posts named in the request belong to a course the requester manages. No public exploit code has been identified at time of analysis, and the practical risk is confined to multi-instructor deployments that hand instructor roles to semi-trusted or self-registered users; the vendor has released a fix in Tutor LMS 4.1.1.
Stored cross-site scripting in Premium Packages - Sell Digital Products Securely (wpdm-premium-packages) through version 7.2.6 lets authenticated attackers with subscriber-level access or above inject arbitrary web scripts into checkout billing fields such as phone, state, taxid, and email, which are then rendered in the customer dashboard without adequate escaping. The issue is rated CVSS 6.4 Medium and requires an account on the target WordPress site, but exploitation does not require administrative privileges; script execution occurs when a higher-privileged user views the poisoned billing information. No public exploit has been identified at time of analysis, and the primary fix is an upstream changeset rather than a confirmed tagged patched release.
Stored DOM-based cross-site scripting in the SureDash - Community, Courses & Member Dashboard plugin for WordPress (all versions up to and including 1.12.1) allows authenticated attackers with subscriber-level access or above to plant arbitrary script inside community post content by entity-encoding a payload in an image's 'alt' attribute. The payload evades server-side wp_kses filtering because kses allows the img/alt combination and does not normalize HTML entities within attribute values, and it only executes client-side when the bundled GLightbox library reads the .alt DOM property and writes the decoded value into innerHTML as a victim views the injected page. There is no public exploit identified at time of analysis, and exploitation demands a valid low-privilege account plus an active community/GLightbox rendering path, so this is a genuine but moderate-priority issue rather than a top-tier emergency; the vendor has released SureDash 1.12.2 to address it.
Stored cross-site scripting in the WordPress plugin Data Tables Generator by Supsystic (all versions up to and including 1.15.1) allows an authenticated attacker holding a Subscriber-level or higher account to inject arbitrary JavaScript into a table cell's 'data' value through the updateRows action, which then executes in the browser of any user who views a page rendering that table. Reachability depends on a non-default precondition: an administrator must have deliberately added the attacker's low-privilege role to the plugin's 'access_roles' setting, which is a documented feature that hands those users the dtgs_nonce needed to call the vulnerable handler, so the exploitable population is meaningfully narrower than the raw base vector implies. No public exploit code has been identified at time of analysis and there is no KEV listing.
Stored cross-site scripting in the FV Flowplayer Video Player plugin for WordPress (FolioVision, all versions up to and including 7.5.54.7212) allows an authenticated attacker holding subscriber-level privileges or higher to inject arbitrary JavaScript through an unquoted popup shortcode attribute, which then executes in the browser of any user who later views the affected author bio/archive page. Exploitation is constrained by two prerequisites: the site must have the non-default profile_videos_enable_bio option enabled, and the attacker must first obtain a low-privileged account, which open registration makes feasible but which sites that disable public registration largely close off. At CVSS 6.4 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) this is a moderate-severity issue; no public exploit code was identified at time of analysis, so it should be handled as a patch-in-normal-cycle item rather than an emergency.
Stored cross-site scripting in the WP User Frontend WordPress plugin (all versions up to and including 4.3.12) allows any authenticated user with subscriber-level access or higher to persist arbitrary JavaScript that executes when a privileged user - typically an administrator - opens the affected transactions page. The root cause is insufficient sanitization and output escaping of the 'wpuf_payment_method' parameter: attackers bypass sanitize_text_field() by appending a valid gateway keyword such as 'bank' to the HTML payload, so the filter returns only the keyword for gateway routing while the full raw malicious value is stored and later rendered unescaped in the admin transactions list. Wordfence reported the issue with a CVSS 3.1 base score of 6.4 (AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N); no public exploit code was identified at time of analysis, and there is no confirmed evidence of active exploitation (no CISA KEV listing).
Stored cross-site scripting in the Kadence Blocks - Page Builder Toolkit for Gutenberg Editor WordPress plugin affects all versions up to and including 3.7.12, allowing an authenticated attacker holding author-level privileges or higher to inject arbitrary web scripts through a block's font-family attribute that execute when a victim views the injected page. The payload path is conditional: the malicious font-family encoding bypass only activates when the non-default 'Load Google Fonts Locally' site option (kadence_blocks_font_settings['load_fonts_local']) is enabled, so default-configured sites are not exploitable through this vector. Exploitation additionally requires a victim to later access the poisoned page, and no public exploit code or confirmed active exploitation was identified at time of analysis; this is a moderate, conditionally-exploitable issue rather than a top-tier priority given the privileged account requirement, the non-default setting, and the necessary victim interaction.
Stored cross-site scripting in the Feedzy RSS Aggregator WordPress plugin (all versions up to and including 5.2.10) lets an authenticated attacker with contributor-level access or above inject arbitrary JavaScript into pages by pointing the Gutenberg Feedzy Loop Block at an attacker-controlled RSS feed whose <title> element contains malicious HTML, which is then rendered into the page without escaping. Because post_content stores only a benign reference to the external feed URL, the payload evades save-time wp_kses filtering entirely and executes for any user who views the affected page. Exploitation requires a contributor account, the Loop Block in use, and attacker control of an external feed; no public exploit code has been identified at time of analysis and the plugin is not listed in CISA KEV, so risk is bounded by these preconditions rather than by the network-facing vector (CVSS 6.4).
Stored cross-site scripting in the GiveWP donation and fundraising plugin for WordPress (versions up to and including 4.17.0) lets authenticated attackers with Contributor-level access or above plant arbitrary JavaScript through the givewp_campaign_grid shortcode's attributes, which is then rendered unsanitized into any page or preview that loads the affected content. Exploitation requires a low-privileged account able to submit shortcode-bearing content and a higher-privileged or public visitor to view it, which is why it rates only moderate (CVSS 6.4, scope-changed C:L/I:L) and is a realistically lower-priority issue; no public exploit code has been identified at time of analysis and there is no confirmed active exploitation (no CISA KEV listing). The primary impact is session/token theft or privileged action abuse against the viewing user rather than site-wide compromise.
Stored cross-site scripting in the Simple Membership WordPress plugin (versions up to and including 4.8.4) lets an attacker persist arbitrary JavaScript through the member profile 'country' field, which then executes in the browser of any user - typically an administrator - who views the affected member listing or profile page. By default the attacker must hold an authenticated account at subscriber level or above, but the vector widens to fully unauthenticated attackers whenever the plugin's 'Enable Free Membership' option is on, because that setting permits anonymous front-end registration and profile submission. Rated CVSS 6.4 (Medium) and reported by Wordfence, there is no public exploit identified at time of analysis and no confirmed active exploitation (not in CISA KEV); the fix is the vendor-released version 4.8.5.
Stored cross-site scripting (XSS) in the Retainful Email Marketing for WordPress and WooCommerce plugin (versions ≤1.0.10) allows authenticated attackers with subscriber-level access to inject malicious scripts via the 'data' parameter in the plugin's REST API, which execute when a victim views the affected page. This vulnerability requires a low-privilege account and user interaction, and no public exploit code or active exploitation has been identified. It is a moderate-severity (CVSS 6.4) issue that should be patched promptly.
Stored cross-site scripting in the Motors - Car Dealership & Classified Listings WordPress plugin (versions up to and including 1.4.123) allows authenticated attackers with Subscriber-level access to inject arbitrary web scripts via the 'stm_f_s' parameter. The CSRF nonce protecting the stm_ajax_add_a_car AJAX handler is emitted in wp_footer on every page, so any logged-in user can retrieve it, removing the usual barrier to exploitation. This is a moderate-risk issue (CVSS 6.4) and no public exploit has been identified at the time of analysis.
Stored cross-site scripting in the HivePress WordPress plugin (Business Directory, Listings & Classified Ads) affects all versions up to and including 1.7.31 and allows authenticated users with subscriber-level accounts or higher to inject arbitrary JavaScript that executes when other users view the affected listing page. Exploitation is conditional, not universal: the site must permit subscriber-level registration or listing submission, and an administrator must have configured a HivePress Text attribute whose display format places the %value% token inside an HTML attribute (for example title="%value%"), which is a documented but non-default HivePress pattern - a default configuration that renders %value% as normal element text is not exploitable. The vendor has released 1.7.32, which includes the fix for escaping field and token values; no public exploit code has been identified at time of analysis, and the flaw is not confirmed actively exploited (CISA KEV). Independent assessment rates the practical severity as moderate and conditionally exploitable, with attack complexity assessed as High (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N) rather than the published AC:L rating.
Stored cross-site scripting in the Sonaar MP3 Audio Player - Music Player, Podcast Player & Radio plugin for WordPress (all versions up to and including 5.14.2) allows authenticated users holding contributor-level access or higher to inject arbitrary JavaScript through the plugin's shortcode attributes, which then executes in the browser of any user who later loads the affected page. The payload survives WordPress's save-time wp_kses_post sanitization because it is carried in a shortcode attribute rather than raw post HTML, so the unescaped value reaches render time intact. The flaw is authentication-gated and rated CVSS 6.4 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N), and no public exploit was identified at time of analysis; there is no CISA KEV listing for this CVE.
Stored cross-site scripting in the Download Manager WordPress plugin (all versions up to and including 3.3.71) allows an authenticated attacker holding contributor-level access or above to inject arbitrary JavaScript into pages via the 'regurl' parameter, which then executes for logged-out site visitors who load the affected page. Because the vulnerable login-form.php template branch is gated on !is_user_logged_in(), the payload only fires for anonymous traffic and never for authenticated viewers, which confines the impact despite the CVSS 6.4 score. No public exploit code has been identified and the issue is not flagged as actively exploited, so urgency is moderate and concentrated on sites that grant contributor roles or open registration to low-trust users.
Stored cross-site scripting in the GeoDirectory WordPress plugin (all versions up to and including 2.8.188) allows authenticated users with subscriber-level access or above to plant arbitrary JavaScript in listing data via the 'Contact Email' custom field, which then executes in the browser of anyone viewing the affected public single-listing page. Exploitation is not a default-configuration issue: the site administrator must first have added and configured the Contact Email custom field (htmlvar_name 'email') to render on public single-listing output and must subsequently approve the attacker's submitted listing before the payload becomes live, which is why the independent assessment rates the vector AC:H and describes this as conditionally exploitable rather than broadly reachable. There is no public exploit code or confirmed active exploitation at time of analysis, and no EPSS or KEV signal accompanies this record; residual risk is concentrated in sites that permit low-privilege registration, accept untrusted listing submissions, and expose the Contact Email field publicly.
Stored cross-site scripting in the Advanced Classifieds & Directory Pro WordPress plugin (versions up to and including 3.4.4) allows an authenticated attacker holding a 'custom-level' account or higher to inject arbitrary JavaScript through the 'phone' parameter of a listing, which then executes for any user viewing the poisoned page. Exploitation is gated behind two non-default operator choices: the 'Force Bootstrap' miscellaneous setting must be enabled and the 'ACADP Listing Address' widget must be placed in a sidebar rendered on single listing pages, so default-configured sites are not exposed. No public exploit code or confirmed in-the-wild exploitation (CISA KEV) was identified at time of analysis, and the reported CVSS 6.4 score is softened by our reassessment to AC:H given the stacked prerequisite chain.
Stored cross-site scripting in the WordPress plugin Team - Team Members Showcase (slug 'tlp-team', vendor techlabpro1) affects all versions up to and including 6.0.2 and lets authenticated attackers with contributor-level privileges or above persist arbitrary JavaScript via the 'ttp_filter_taxonomy' taxonomy-meta value of an attacker-chosen post. The script then executes in the browser of any user - including higher-privileged users such as editors or administrators - who views a page where the plugin's shortcode renders that taxonomy filter output, giving a CVSS 6.4 impact (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N). No public exploit identified at time of analysis, and there is no CISA KEV confirmation of active exploitation, so risk is concentrated on sites that grant contributor access to untrusted users; there is no unauthenticated path (PR:L).
Stored cross-site scripting in the Table Field Add-on for ACF and SCF (WordPress plugin slug advanced-custom-fields-table-field, vendor jonua) affects all versions up to and including 1.4.1-RC2, allowing an authenticated attacker with subscriber-level access or above to inject arbitrary scripts into table field values that execute when a victim views a page rendering that field. The issue carries a CVSS 3.1 base score of 6.4 (AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N), reflecting the low privilege bar and scope change typical of stored XSS inside the WordPress rendering context, though exploitation stops short of RCE and depends on a victim viewing the poisoned content. No public exploit identified at time of analysis, and no evidence of active exploitation; vendor-released patch: 1.4.1.
Stored cross-site scripting in the PeproDev Ultimate Profile Solutions WordPress plugin (all versions up to and including 8.2.36) allows an authenticated attacker holding contributor-level privileges or higher to inject arbitrary JavaScript into a page via the 'button' attribute of the shortcode, which is stored without sanitization and rendered without output escaping. The payload executes in the browser of any user who later views the injected page, and because the injected content lives in persistent post data it can trigger against administrators and other privileged viewers. Rated CVSS 6.4 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N); no public exploit code has been identified at time of analysis and there is no indication of active exploitation, so this should be treated as a moderate-priority issue rather than an emergency.
Stored cross-site scripting in the Graphene theme for WordPress through version 2.9.4 allows any authenticated user holding Subscriber-level access or above to plant persistent JavaScript in the theme's 'Current location' and 'Author profile image URL' profile fields, which then executes in the browser of every user who loads a page rendering that author data - including administrators. The flaw stems from insufficient input sanitization and output escaping (CWE-79) and was reported by Wordfence; the CVSS 3.1 score is 6.4 (AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N), reflecting that the attacker needs only a low-privilege account but the injected script can run in a scope beyond the vulnerable component. There is no KEV listing and no public exploit code identified at time of analysis, and the fixes appear in the WordPress theme Trac changesets comparing 2.9.4 against 2.9.6.
Stored cross-site scripting in the GamiPress WordPress gamification plugin (all versions up to and including 7.9.4) allows any authenticated user with subscriber-level access or higher to inject arbitrary JavaScript through the 'video_id' parameter processed by the plugin's YouTube integration, which then executes in the browser of any user viewing the poisoned page. Exploitation requires a valid low-privilege account on the affected site plus a victim loading the injected content; the impact is most serious when the victim is an administrator, since the script runs in the site's origin and can be used to hijack sessions or perform privileged actions. There is no public exploit identified at time of analysis and the issue is not confirmed as actively exploited, making this a moderate-severity (CVSS 6.4) but credible priority for sites that allow open registration and use the YouTube integration.
Stored cross-site scripting in the Frontend Admin by DynamiApps WordPress plugin through version 3.28.36 lets authenticated users with Contributor-level or higher access inject arbitrary web scripts by exploiting a kses/mutation-XSS bypass in the get_dynamic_values function, which performs text-level find-and-replace on post content without HTML-aware parsing. The stored payload executes when another user views the affected page, and the CVE carries a CVSS 3.1 score of 6.4 with scope change. This is a moderate-priority issue rather than a top-tier emergency, and no public exploit identified at time of analysis; practical risk is limited to sites that grant untrusted users Contributor-or-higher roles and have the plugin active.
Stored cross-site scripting in the Avada theme for WordPress (versions up to and including 7.16.1) allows authenticated attackers with Subscriber-level access or higher to inject javascript: URLs into author social link profile fields, which execute when a victim visits the attacker's author archive page and clicks the affected social icon. Exploitation is constrained by required user interaction and by the Avada option 'Open Social Icons in a New Window' being set to Off so the browser does not block the javascript: URL in a new tab. This is a moderate-severity issue (CVSS 6.4) that does not rise to emergency priority, and no public exploit was identified at time of analysis.
Stored cross-site scripting in the Brizy - Page Builder WordPress plugin, affecting all versions up to and including 2.8.18, lets an authenticated attacker with contributor-level access or higher inject arbitrary JavaScript through the 'brizy-compiled-sections' parameter when creating or editing page content. Because the payload is persisted and rendered without adequate escaping, the script executes in the browser of any user - including higher-privileged editors or administrators - who subsequently views the injected page, and the CVSS scope-change (S:C) reflects that the code runs in the victim's session context rather than the attacker's. Rated CVSS 6.4 and reported by Wordfence, there is no public exploit code and no confirmed active exploitation (CISA KEV) at time of analysis, making this a routine patch-management priority rather than an emergency.
Stored cross-site scripting in the Data Tables Generator by Supsystic WordPress plugin (all versions up to and including 1.12.03) allows an authenticated attacker holding contributor-level access or higher to inject arbitrary script into a table's id attribute, which is then stored and executed in the browser of any user - including an administrator - who views the affected page. The issue is rated CVSS 6.4 with a scope change (S:C) because the injected script executes in the security context of the hosting site rather than merely the plugin, giving the attacker a path to session theft, content tampering, or administrative action on behalf of the victim. No public exploit code and no confirmed active exploitation were identified at time of analysis, and an upstream fix has been committed to the plugin repository (changeset 3608322).
Stored cross-site scripting in the Embed Any Document WordPress plugin (all versions through 2.7.13) lets authenticated users with contributor-level access or above plant arbitrary JavaScript in post content through the plugin's 'embeddoc' shortcode; the script lies dormant until any visitor - commonly a higher-privileged editor or administrator reviewing the page - loads the affected content. The issue carries a CVSS 3.1 score of 6.4 (medium), with a vector of AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N that confirms remote reachability but an authenticated (PR:L) prerequisite and a scope change indicating execution in the context of the site. No public exploit code identified at time of analysis, and real-world exposure is limited to sites that run the vulnerable plugin, permit the 'embeddoc' shortcode in author-controllable content, and grant contributor accounts to untrusted parties.
Stored cross-site scripting in the Getwid - Gutenberg Blocks plugin for WordPress (all versions up to and including 3.0.1) allows authenticated attackers with contributor-level privileges or higher to inject arbitrary web scripts through the 'data-image-points' parameter, which are then stored and executed whenever another user - an editor, administrator, or site visitor - accesses the affected page. The CVSS vector CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N confirms the attacker needs a low-privileged authenticated account but requires no victim interaction to trigger the payload beyond viewing the injected page, and the changed scope indicates the script executes in the context of the broader site rather than the attacker's own content. No public exploit code has been identified at the time of analysis and there is no indication of confirmed active exploitation (CISA KEV), so practical exposure is concentrated on sites that provision contributor accounts to untrusted users or allow open registration; a site with only a single administrator and no contributor roles faces minimal real-world risk.
Stored cross-site scripting in the Church Admin plugin for WordPress (all versions up to and including 5.1.2) lets an authenticated attacker with subscriber-level access or above inject arbitrary script through the plugin's 'email' parameter, which is neither sanitized on input nor escaped on output. The injected payload persists in the database and executes in the browser of any user who later views the affected page - typically an administrator or other privileged staff member reviewing church member records - making it a low-complexity path from a throwaway subscriber account to privileged session compromise. No public exploit code has been identified at time of analysis and the flaw is not confirmed actively exploited (no CISA KEV listing); with a CVSS base of 6.4 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) this should be treated as a patch-when-convenient issue rather than an emergency. Sites that permit open self-registration are meaningfully more exposed, since the attacker must first hold a valid low-privilege account.
Stored cross-site scripting in the Table Field Add-on for ACF and SCF (WordPress plugin, all versions up to and including 1.3.35) lets an authenticated attacker holding Contributor-level privileges or higher inject arbitrary JavaScript through table cell content, which then executes in the browser of any user who later views the affected page. The flaw is a classic CWE-79 defect: cell content is insufficiently sanitized on input and insufficiently escaped on output, so payloads persist in post data and are served back to victims. Rated CVSS 6.4 (AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) with scope change because the script runs in the security context of the site and can reach higher-privileged viewers; no public exploit code and no confirmed active exploitation were identified at time of analysis, so this is a moderate-priority hardening item rather than an emergency.
Stored cross-site scripting in the WordPress Download Manager plugin (codename065, versions up to and including 3.3.58) lets authenticated attackers with Contributor-level access or higher inject arbitrary JavaScript through the 'not_found' parameter processed by the plugin's shortcode handler; the stored script then runs in the browser of any user who views the injected page. The flaw is rooted in insufficient input sanitization and output escaping (CWE-79), has a CVSS 3.1 base score of 6.4 (AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N), and is corrected in version 3.3.59. Unauthenticated and Subscriber-only users cannot trigger it, and no public exploit code was identified at time of analysis.
Missing authorization checks in the Upcasted S3 Offload plugin (published as 'AWS S3 for WordPress Plugin - Upcasted') through version 3.1.0 let any authenticated user holding only the Subscriber role invoke plugin functionality that should be reserved for higher-privileged accounts, yielding limited confidentiality, integrity, and availability impact rather than full site takeover. The attack is network-reachable and requires no user interaction, but the PR:L rating means an attacker must first possess a valid low-privilege WordPress account - most commonly obtained through open or self-service user registration - which is the principal limiting factor on real-world exposure. There is no public exploit code identified at time of analysis and no indication of active exploitation, and the moderate CVSS score of 6.3 reflects the constrained, low-impact actions that the missing check exposes.
Server-side request forgery in Kortix Suna 0.10.7 through 0.13.51 allows an authenticated user holding the project.connector.write permission to bypass the isPrivateIp egress guard by encoding connector base_url, OpenAPI, Postman, or MCP endpoints as IPv6 6to4 (2002::/16) or Teredo (2001:0::/32) addresses whose embedded IPv4 points at an internal host or the 169.254.169.254 cloud metadata endpoint. Exploitation reaches internal-only services and metadata and returns the fetched responses to the attacker, but impact is capped at low confidentiality and integrity with no availability loss and no scope escape beyond the connector fetch path. Publicly available exploit code exists (a technical writeup linked from the CVE record), and the issue is fully remediated in v0.13.52; there is no confirmed active exploitation (CISA KEV) for this CVE.
Reflected cross-site scripting in the Filter Everything - WordPress & WooCommerce Filters plugin (versions up to and including 1.9.6) lets unauthenticated remote attackers inject arbitrary web scripts via the flrt_elementor_load_more_anchor() output, which execute when a victim clicks a crafted link that reaches the Elementor load-more code path. The flaw is rated CVSS 6.1 (Medium) with vector AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N and requires both victim interaction (UI:R) and the Elementor-integrated load-more/AJAX filtering feature to be reachable on the target page; no public exploit identified at time of analysis.
Reflected cross-site scripting (XSS) in the Payment Plugins for Stripe WooCommerce WordPress plugin, affecting all versions up to and including 4.0.17, enables unauthenticated attackers to inject arbitrary web scripts through the '#response' URL fragment when a victim opens a crafted link. Exploitation is further conditional on the plugin's 'Generic Errors' setting being unchecked, which causes raw Stripe error strings to be reflected into the page; there is no public exploit identified at time of analysis and no CISA KEV listing. The vendor-provided CVSS 3.1 score is 6.1 (moderate), and the independent assessment raises attack complexity to High given the required non-default configuration and mandatory user interaction.
Reflected cross-site scripting (XSS) in the Form Maker by 10Web WordPress plugin (versions up to and including 1.15.48) allows unauthenticated attackers to inject arbitrary web scripts via the 'inputs' array key parameter. Exploitation requires tricking a user into clicking a crafted link while a vulnerable form page is reachable; the impact escalates if an authenticated administrator is the victim. No public exploit identified at time of analysis, and the vendor released a patch in version 1.15.49.
Reflected cross-site scripting in the Favicon Rotator plugin for WordPress (all versions up to and including 1.2.11) allows unauthenticated attackers to inject arbitrary JavaScript through any request parameter prefixed with 'fvrt_', which the plugin reflects back into a page without adequate sanitization or output escaping. Exploitation is not direct: because the CVSS vector is AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N, the attacker must deliver a crafted link and convince a victim to click it, after which the script executes only in that victim's browser, potentially stealing session data, altering page content, or acting as the victim - with an administrator victim yielding the greatest impact. This is a moderate-severity reflected XSS that warrants routine, lower-priority patching; no public exploit code was identified at time of analysis, and the vendor's 1.2.12 release addresses the flaw.
Reflected cross-site scripting in the WordPress Download Manager plugin (codename065, all versions up to and including 3.3.57) lets unauthenticated attackers inject arbitrary JavaScript that executes in a victim's browser when they load a crafted link containing a malicious payload in the 'REFERRER' parameter. The CVSS vector (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N, 6.1) confirms no authentication is required but a successful attack depends on victim interaction, making phishing or social-engineering delivery the realistic path rather than silent mass exploitation; the scope is changed (S:C), so script execution can reach beyond the plugin's own page context. No public exploit code has been identified at time of analysis and the issue is not listed in CISA KEV, so this is best treated as a moderate-severity, high-prevalence-product hygiene fix rather than an emergency.
Information exposure in mini-swe-agent versions 1.10.0 through 2.4.6 allows remote attackers to read sensitive environment variables, such as API keys, from the host system when the BubblewrapEnvironment sandbox is used. The sandbox fails to clear the environment (missing --clearenv), so sandboxed commands inherit the host environment. An attacker can leverage prompt injection in processed task content to direct the agent to exfiltrate these secrets over the network. Exploitation requires the use of BubblewrapEnvironment, presence of sensitive variables in the environment, and attacker-controlled task content; it is a moderate, context-dependent risk, and no public exploit has been identified at the time of analysis.
Authenticated users of OpenLIT 2.1.0 can read telemetry belonging to other projects - including captured LLM prompts and completions - by forging the x-openlit-project-id header against the trace read API, because the server trusts the client-supplied project identifier without re-checking that the caller actually owns the referenced project. Exploitation requires a valid account on the target instance plus prior knowledge of both the victim's project id and its corresponding database config id, which restricts meaningful impact to multi-tenant or shared deployments where projects cross trust boundaries; a single-tenant installation has no cross-tenant victim to reach. The effect is confidentiality-only (no modification or availability impact), and no public exploit code or confirmed active exploitation (no CISA KEV listing) was identified at time of analysis, so this is assessed as a medium-severity authorization bypass rather than an emergency.
Sub-agent spawning in the Phi AI agent (versions 0.3.0 through 0.28.4) accepts an unchecked workdir argument, allowing a spawned worker to be rooted outside the intended workspace and thereby bypass the workspace_only_writes and readonly protection modes. Untrusted or attacker-influenced content processed by the agent can carry prompt-injected instructions that trigger a spawn with an alternate working directory, resulting in unapproved file writes anywhere the user running Phi already has write permission. The flaw is rated CVSS 4.0 6.0 (CWE-863 incorrect authorization), is remotely reachable without credentials but requires passive user interaction and a pre-existing agent deployment; no public exploit identified at time of analysis, and impact is bounded to integrity (no confidentiality or availability loss) with no privilege gain beyond the invoking user.
Arbitrary file write in the Cohere Python SDK 5.11.0 through 7.2.0 arises from unvalidated tar archive extraction in the _s3_models_dir_to_tarfile helper used by the SDK's cohere_aws SageMaker integration. An attacker who can place a crafted model archive into the S3 prefix the SDK reads from can embed absolute paths or ../ traversal members that, once tarfile.extractall runs on the victim host, overwrite files outside the intended model directory. Exploitation is precondition-heavy: it requires the affected SageMaker model-archive flow to be in use, attacker write access to the victim's S3 model location, and the victim to trigger the extraction (passive user interaction); there is no public exploit identified at time of analysis and no confirmed actively exploited (CISA KEV) status. EPSS and KEV data were not provided, and the impact is scored as integrity-only (no confidentiality or availability effect), making this a medium-severity, precondition-dependent flaw.
Authenticated InnoShop 0.9.2 administrators who hold the files_create permission can read arbitrary server files and have their contents written to the publicly served media disk by abusing the AI Core MCP file_upload tool's source argument, exposing the application's .env file with APP_KEY and database credentials. Because exploitation requires a high-privilege admin account plus MCP/AI Core being enabled and reachable (CVSS 4.0 5.9; independently assessed as CVSS 3.1 AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N), this is a moderate - not high - priority issue whose realistic threat model is a malicious or compromised administrator escalating to theft of application secrets rather than an unauthenticated outsider. No public exploit code was flagged in the provided intelligence and there is no confirmation of active exploitation (not in CISA KEV), although a public technical writeup describing the stream-wrapper technique is referenced.
Unauthenticated sensitive data exposure in the WordPress plugin Swish Migrate and Backup (versions 1.4.0 and earlier) lets remote attackers retrieve data the plugin should have kept private, with the impact confined to confidentiality (CVSS 5.9, C:H/I:N/A:N). Exploitation is not trivial: the CVSS vector (AV:N/AC:H/PR:N/UI:N) marks high attack complexity, meaning a specific transient or plugin-operation condition - such as a backup or migration in progress, or an exposed backup artifact - must be met before the leak occurs, and the available data does not identify the exact trigger. At time of analysis no public exploit code has been identified, the issue was reported by Patchstack, and it is a moderate-priority information disclosure rather than a top-tier emergency; the niche deployment of this plugin further limits realistic exploitation.