Unauthenticated remote attackers can retrieve embedded sensitive information from WordPress sites running the WP Rollback plugin through version 3.1.2, because the plugin places sensitive data into data it sends back to the client (CWE-201). The flaw is rated CVSS 5.9 (AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N), meaning no credentials or user interaction are needed but attack complexity is high, so success depends on conditions the attacker does not control - such as the specific sensitive data being present in the affected responses or a particular plugin state. There is no public exploit code identified at time of analysis and no confirmation of active exploitation (CISA KEV); the exposure is limited to confidentiality, with no integrity or availability impact, and the exact data exposed is not described in the available advisory and should be confirmed with the vendor/Patchstack.
Read-only mode bypass in Tabularis through 0.27.0 lets prompt-injected AI agents or untrusted MCP clients execute data-modifying SQL that the run_query safety gate misclassifies as read-only, allowing side-effecting statements such as setval, nextval, or PostgreSQL query_to_xml with an embedded DELETE to alter or destroy data without triggering an approval prompt. The issue is a local, MCP-channel authorization flaw (assessed CVSS:3.1 AV:L/AC:L/PR:N/UI:R, C:N/I:H/A:H; CVSS 4.0 base 5.8) that only matters when read-only mode is relied upon as a security control against a backend exposing such functions, and the provided CVSS vector indicates no privileges are required (PR:N) while the operator still must interact with the agent (UI:P). No public exploit code was identified at time of analysis and there is no CISA KEV listing, so risk is driven by preconditions-an exposed MCP run_query connection to PostgreSQL-rather than by active exploitation.
Symlink-based workspace escape in phi 0.1.1 through 0.28.4 lets a malicious repository bypass the agent's workspace_only_writes permission gate and cause the write tool to modify files outside the workspace. The gate compares only the lexical path string, so a symlink committed in the repository that resolves outside the workspace passes validation once prompt injection steers the agent's write tool at that path; the resulting impact is integrity-only (unauthorized out-of-workspace writes) with no confidentiality or availability loss, consistent with the assessed CVSS:3.1 vector AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N and the reported CVSS 4.0 base of 5.7. Exploitation is local and requires the victim to run the agent against an attacker-influenced repository with workspace_only_writes active, making this a medium-severity sandbox escape rather than a remote threat; no public exploit code and no confirmed active exploitation (CISA KEV) were identified at time of analysis.
Information disclosure in ZTE Z80 Ultra (nubia Z80 Ultra) smartphones allows a local app to reflectively invoke a system interface that lacks the necessary access-control check and read otherwise-protected information, with no integrity or availability impact. The vendor rates this CVE-2026-108501 at CVSS 5.7 (AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N), while the independent assessment treats it as a local, unauthenticated information-disclosure issue (CVSS 3.1 AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) that requires code execution on the device via an attacker-controlled app. No public exploit code or confirmed active exploitation was identified at time of analysis, and the issue is confined to the ZTE Z80 Ultra model.
Sandbox escape in open-multi-agent's @open-multi-agent/core 1.5.0 through 1.21.2 lets an attacker write attacker-influenced files anywhere the agent process has write permission by planting a dangling symlink inside the agent workspace and using prompt injection to steer the file_write built-in tool toward that symlink path. Impact is integrity-only in the assessed vector (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N), and exploitation is gated on two preconditions combining: attacker-controlled symlink placement in the workspace plus prompt-injection influence over the agent, so this is a genuine but moderate-priority issue rather than a remote, default-configuration exploit. No public exploit code or active exploitation was identified at time of analysis, and the flaw requires local reachability with no privileges required per the assessed vector.
Information disclosure in ZTE Z80 Ultra allows a malicious or compromised third-party app installed on the device to invoke system interfaces through reflection and retrieve sensitive information, because those interfaces lack robust invocation authentication and access control. Exploitation is local and requires user interaction (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N), with confidentiality impact only and no integrity or availability effect. No public exploit identified at time of analysis; the issue is classified under CWE-269 and tagged as privilege escalation, but the assessed impact is a moderate, local-only information-disclosure flaw rather than a high-priority remote threat.
Information disclosure in ZTE Z80 Ultra allows a locally installed application to read device-related information by invoking framework methods that have insufficient access control. The CVSS 3.1 vector (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N, score 5.5) means an attacker needs local access and must persuade or trick the user into installing or interacting with a malicious app, with impact limited to confidentiality; there is no integrity or availability impact and no privilege gain, despite the 'Privilege Escalation' tag. No public exploit code is identified at time of analysis, and the issue is assessed as moderate and locally scoped.
Stored cross-site scripting (XSS) in the Noptin Newsletter WordPress plugin up to version 4.3.10 allows unauthenticated attackers to inject malicious scripts that execute in the browser of a privileged user. Exploitation requires a published campaign post containing a [[subscriber.*]] merge tag and social engineering of an admin to visit a crafted preview URL; the independent assessment rates this as medium severity (CVSS 5.4) with high attack complexity and required user interaction. No public exploit identified at time of analysis.
Arbitrary shortcode execution in the Kirki - Freeform Page Builder, Website Builder & Customizer plugin for WordPress (all versions up to and including 6.3.1) lets any authenticated user with Subscriber-level access or above inject shortcodes by writing them into their own `display_name` profile field, which the plugin splices unfiltered into composed page markup and then passes through `do_shortcode()`. The flaw is exploitable as a remote, network-reachable issue requiring only a low-privileged account (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N, 5.4), rated moderate by the independent assessment; the key precondition is that a published page must exist containing a Kirki element whose dynamic content is explicitly bound to the `display_name` user field - typically a team or member-directory / users-collection page - and on sites without such a page the vulnerable code path is never reached. Where that binding does exist, the injected shortcode executes in the request of every visitor, including unauthenticated ones, so per-victim interaction is not required; no public exploit code or confirmed active exploitation was identified at time of analysis.
Authenticated subscriber-level bypass in the VideoWhisper MicroPayments WordPress plugin (versions up to and including 3.2.9) lets a low-privilege account tamper with payment and entitlement state that should require higher privileges. The CVSS 3.1 vector (AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L, base score 5.4) describes a network-reachable flaw that still requires the attacker to hold a subscriber account, which is the primary limiting factor: the target site must either allow subscriber self-registration or the attacker must already possess such an account. Impact is bounded to partial integrity and availability loss with no confidentiality exposure, and no public exploit code was identified at time of analysis.
Authorization bypass in the Hello Plus plugin for WordPress (all versions up to and including 1.7.7) allows authenticated users holding Contributor-level privileges or higher to publish their own Hello+ header/footer templates and to draft active templates belonging to higher-privileged users. The plugin's template-parts actions do not verify that the caller is authorized to publish or modify those documents, so the flaw is an integrity and availability problem rather than a data-disclosure one. Exploitation requires a valid low-privileged WordPress account, making multi-author sites and sites that allow Contributor-level self-registration the primary exposure; no public exploit code has been identified at time of analysis and there is no indication of active exploitation.
Stored cross-site scripting in the CleanTalk Anti-Spam WordPress plugin (versions up to and including 6.88) allows unauthenticated attackers to inject malicious scripts into comment fields, which then execute for any visitor viewing the affected page. Exploitation requires the attacker to first get one comment approved from their email address; default WordPress auto-approval then allows subsequent comments to store the payload without moderation. No public exploit code or active exploitation is identified at time of analysis, and the issue is rated CVSS 5.4 Medium (CWE-79).
Moderate-severity cross-site scripting (XSS) in Progress Kendo UI for Vue's chart component (@progress/kendo-vue-charts) versions 2.5.0 through 16.1.x allows an authenticated attacker with low privileges to inject malicious HTML into chart tooltip values, which executes JavaScript when a victim hovers over a data point. The default chart tooltip renders formatted point values as raw HTML without encoding, leading to potential compromise of data confidentiality and integrity. No public exploit identified at time of analysis. Exploitation requires the attacker to influence a string value bound to the chart and the victim to interact with the tooltip (UI:R).
Progress KendoReact's default chart tooltip fails to HTML-encode formatted point values, enabling a low-privileged attacker who can influence chart-bound string data to inject JavaScript that executes when a victim hovers over the affected data point. This stored/influenced XSS affects @progress/kendo-react-charts versions 1.1.0 through 16.1.x and requires user interaction, with a moderate CVSS score of 5.4. No public exploit code or active exploitation is known at this time, and upgrading to 16.2.0 or later eliminates the flaw.
WordPress sites running the W3 Total Cache plugin before 2.10.6 let an authenticated user with the Author role or higher plant media-import content that, once an administrator executes the plugin's import action, copies an arbitrary server-readable file - such as wp-config.php or a backup/credential file - into a publicly served directory where it can be fetched without authentication. The defect is a path-traversal / missing file-type restriction issue (CWE-22) rated 5.4 (medium) under CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:N/A:N, yielding read-only information disclosure with no integrity or availability impact. A vendor patch is available in 2.10.6, no public exploit code has been identified at time of analysis, and because the attack cannot be completed alone - a privileged administrator must trigger the import, and the target file must be readable by the web-server process - practical priority is moderate rather than urgent.
Fluent Forms for WordPress (all versions up to and including 6.2.5) fails to verify that a user is authorized before performing several form-management actions, allowing an authenticated attacker holding Custom-level access or above to read private form submissions, change submission statuses, permanently delete submissions, and modify global plugin settings. The flaw is a missing-authorization issue (CWE-862) reachable over the network with low complexity and no user interaction once a qualifying account exists, and the assessed vector (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N, score 5.4) reflects limited confidentiality and integrity impact with no availability impact. No public exploit code has been identified at time of analysis and the issue is not confirmed as actively exploited (no CISA KEV listing); the practical exposure is concentrated in multi-user sites that provision low-privilege or custom roles.
Authenticated privilege escalation in the Academy LMS WordPress plugin through version 4.0.3 lets a user with the academy_guardian role or higher assign the academy_student role to any existing WordPress account, including their own, via the guardian add_child REST API. The flaw stems from add_role('academy_student') executing before Store::link() validates the guardian-ward relationship and not rolling back on WP_Error, so even self-links rejected by Store::link() leave the role grant in place. This yields Contributor-equivalent edit_posts unconditionally and Author-equivalent upload_files only when the student file-upload setting is enabled; CVSS is 5.4 and no public exploit has been identified at time of analysis.
Unauthenticated attackers can download exported WooCommerce order CSV files containing customer PII from sites using the WebToffee Order Export & Order Import plugin versions up to 2.7.8, but only when the wp-content/webtoffee_export/ directory lacks its .htaccess and index.php guard files-a state that can arise after uninstall/reinstall, migration, backup restore, or staging sync. The vulnerability (CWE-552) is rated moderate (assessed CVSS 3.1: AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N) because exploitation additionally requires knowledge or brute-forcing of second-precision timestamp filenames; no public exploit code has been identified at time of analysis. The vendor has released version 2.7.9, which the referenced code changes suggest addresses the issue.
Path traversal in the argocd-mcp (Argo CD MCP Server) delete_application tool through 0.9.0 allows authenticated MCP clients to smuggle single DELETE requests onto unintended Argo CD API routes, so an applicationName value such as '../repositories/' can cause deletion of repositories, clusters, or projects instead of an application. The attacker must be a valid MCP client - or an LLM manipulated by prompt injection - operating with a token that already carries the corresponding RBAC permissions, so it is authenticated (PR:L) and impact is bounded to destructive writes (I:L/A:L) with no confidentiality exposure. No CISA KEV listing or public exploit code has been flagged in the available intelligence, though a public technical writeup and the implicated source lines are referenced; CVSS 4.0 rates this 5.3 (Medium) and the independent 3.1 assessment is AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L.
Unauthenticated attackers who already know a registered customer's primary phone number or email can read that customer's stored name, email, phone and internal notes from WordPress sites running the Bookly - Online Scheduling and Appointment Booking System plugin in versions up to and including 28.4. The classic booking form's Details step endpoint bookly_render_details is registered for wp_ajax_nopriv, its csrfTokenValid() check is overridden to always return true, and InfoText::getCodes() loads a persisted Customer entity keyed solely by the attacker-supplied phone or email without ever calling the plugin's customerIdentityConfirmed() predicate, so {client_name}, {client_email}, {client_phone} and {client_note} placeholders are substituted into the returned HTML. Exploitation requires a non-default site configuration (the administrator must have inserted at least one of those placeholders into the Details step's Appearance information text) and a valid victim identifier, which limits this to targeted per-victim disclosure rather than bulk enumeration; no public exploit was identified at time of analysis. The flaw is fixed in Bookly 28.5.
Authenticated SQL injection in the FireBox - WooCommerce Popup Builder, Exit Intent Popup, Email Optin & Cart Abandonment plugin for WordPress (all versions up to and including 3.1.13) lets a user holding the edit_fireboxes capability append arbitrary SQL to the plugin's Form Display Condition query and read sensitive data from the site database. Because the preserveCampaignRoleAccess() migration on sites upgraded from before 3.1.10 grants edit_fireboxes to any role that previously held edit_posts, exploitation is possible at Author level on upgraded installations, while fresh installs from 3.1.10 onward require administrator access. The issue is rated CVSS 5.3 (AC:H, PR:L, confidentiality-only) and no public exploit identified at time of analysis.
Sensitive customer records - booking names, email addresses, and phone numbers - can be pulled without authentication from any WordPress site running the Booking Calendar plugin through version 11.4.3, because the wpbc_is_show_popover_in_flex_timeline() function returns booking data without an authorization check. The flaw is reachable against default installations over the network with no privileges or user interaction (CVSS 3.1: AV:N/AC:L/PR:N/UI:N, 5.3 Medium), and its only prerequisite is that the site already holds bookings containing PII; sites with no bookings leak nothing. Impact is confined to confidentiality (C:L) with no write, code-execution, or availability effect, no public exploit code and no confirmed active exploitation were identified at time of analysis, and upgrading beyond 11.4.3 removes the exposure.
Server-side request forgery in the Jawn webhook sender of Helicone (affected through v2025.08.21-1) allows authenticated organization users to create webhooks whose public hostnames resolve - or are DNS-rebound - to loopback or internal addresses, causing the Jawn backend to issue blind POST requests to internal HTTPS services. Rated 5.3 (CVSS 4.0 AV:N/AC:L/AT:N/PR:L/UI:N with only VI:L and no confidentiality, availability, or subsequent-system impact), the vulnerability yields integrity-side effects on reachable internal endpoints rather than data readback. Exploitation requires a valid account within a Helicone organization (PR:L) plus control of a hostname that can resolve or rebind to private space; there is no public exploit identified at time of analysis and CISA KEV does not list this CVE.
Heap memory corruption in Apache DataSketches C++ (datasketches-cpp) versions 4.1.0 through 5.2.0 allows remote attackers to trigger out-of-bounds reads and writes via a crafted Count-Min sketch submitted to the deserialize() function. The flaw combines a missing preamble size check that permits up to 16 bytes over-read on truncated input, and a 32-bit integer overflow in the serialized bucket count that can wrap to zero, resulting in an empty table and subsequent heap memory corruption during updates or estimate queries. Exploitation requires an application to deserialize Count-Min sketches from untrusted sources; no public exploit code or active exploitation has been identified at time of analysis, and the vendor rates the severity as moderate.
Unauthenticated remote attackers can retrieve embedded sensitive system information from WordPress/WooCommerce sites running the YITH WooCommerce Product Add-Ons plugin through version 4.34.0. The flaw (CWE-497) is network-reachable with no privileges or user interaction required per the CVSS vector AV:N/AC:L/PR:N/UI:N, but the confidentiality impact is bounded (C:L), so exposure is limited to a specific set of sensitive data rather than a full site or database compromise, yielding a moderate CVSS 3.1 score of 5.3. No public exploit code or confirmed active exploitation was identified at time of analysis, and EPSS/KEV signals were not provided in the source data; risk is concentrated among unpatched sites with this plugin installed and active.
OAuth tag-scope enforcement bypass in 1MCP Agent 0.20.0 through 0.39.0 lets an authenticated client holding a valid single-tag OAuth token list and invoke tools on backend MCP servers outside its granted scopes by supplying a negated advanced tag-filter expression such as 'not <granted-tag>'. The flaw is rated medium severity (vendor CVSS 4.0 base 5.3, assessed CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N) and requires both a valid token (PR:L) and a multi-scope or multi-tenant gateway configuration using OAuth tag-scope enforcement with negation-capable filters, limiting overall impact to low confidentiality and integrity effects. There is no public exploit identified at time of analysis and no CISA KEV confirmation; exploitation depends on the attacker already holding a scoped OAuth token.
Unauthenticated arbitrary file upload in WP CV Builder plugin versions up to and including 1.3.1 allows remote attackers to write arbitrary content as .png files to the WordPress uploads directory via the 'wp_save_signature_image' function, which lacks a capability check. This integrity-only primitive requires no authentication and affects default installations, but does not directly enable code execution. No public exploit identified at time of analysis.
Incorrect authorization in the Simply Schedule Appointments WordPress plugin (all versions up to and including 1.6.11.11) allows unauthenticated attackers who possess a valid per-appointment booking token to modify admin-controlled fields on that appointment, including faking payment confirmation, reassigning the appointment to another user, and changing the service type. The weakness is a business-logic authorization flaw (CWE-863) confined to appointment records: it grants no server access, no data disclosure, and no code execution, which is why it carries a moderate CVSS score of 5.3 (integrity-only, low impact). No public exploit code has been identified at time of analysis and the issue is not in CISA KEV, though sites that rely on the plugin's payment-confirmation or service-assignment fields (for example, paid bookings) face the greatest practical exposure.
Unauthenticated information disclosure in the Booking Package WordPress plugin before 1.7.30 lets remote attackers retrieve other customers' stored reservation details and booking cancellation tokens because the data-returning endpoint omits authorization checks. Any WordPress site running the affected plugin with stored reservations is exposed over the network without credentials, though impact is confined to confidentiality and availability/integrity are unaffected (CVSS 5.3, CWE-200). No public exploit code or confirmed active exploitation was identified in the available intelligence.
Unauthenticated information disclosure in the WordPress plugin 'Accept PayPal Payments using Contact Form 7' (all versions before 4.0.7) allows any remote visitor to download the stored form submissions - name, email, telephone, postal address, message and associated payment metadata - of every person who submitted a payment form. The plugin's export routine performs no authorization check whatsoever, so exploitation requires no account, no user interaction and no non-default configuration; the only practical preconditions are that the plugin is installed and that at least one submission has been stored. Our independent assessment rates confidentiality impact as High (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) rather than the feed-supplied C:L, and no public exploit code or confirmed active exploitation has been identified at time of analysis; a vendor fix is available in version 4.0.7.
Unrestricted brute-forcing of the email-verification PIN in the Contest Gallery WordPress plugin (all versions before 33.0.1) lets unauthenticated attackers guess a short numeric code and complete front-end registration for an email address they do not own, resulting in an authenticated WordPress session that the plugin treats as verified. Exploitation requires that the plugin's public front-end registration with email verification be enabled, and the practical ceiling is the privilege level the plugin assigns to self-registered accounts - typically low-privilege - rather than administrative access, which keeps this a genuine but moderate-severity authentication weakness rather than a critical one. No public exploit code was identified at time of analysis and the flaw is not confirmed actively exploited (no CISA KEV listing); the vendor has released a fix in version 33.0.1.
Unauthenticated attackers can forge stored transaction statuses and inject the Accept PayPal Payments using Contact Form 7 plugin's status metadata onto arbitrary WordPress posts, affecting all versions of the plugin prior to 4.0.7. The flaw (CVE-2026-105989, CVSS 5.3, CWE-862 Missing Authorization) stems from an AJAX action that ships without any authorization or nonce/request-validation check, so it is reachable by remote unauthenticated requests against default installations with the plugin active; the CVSS vector (AV:N/AC:L/PR:N/UI:N) confirms no authentication or user interaction is required. Impact is confined to integrity (C:N/I:L/A:N), and no public exploit code or confirmed active exploitation has been identified at time of analysis.
An unauthenticated bypass in the 'Pay With MetaMask For WooCommerce - Cryptocurrency Payment Gateway' WordPress plugin (all versions up to and including 1.7.2) lets remote attackers circumvent the plugin's authenticity/verification checks, altering limited aspects of application state without logging in, per CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N. Because the vector carries PR:N and UI:N, unauthenticated remote attackers can trigger the flaw on any site where the plugin is active, but the impact is confined to integrity only (I:L) with no confidentiality or availability effect, keeping this a moderate-severity issue rather than a critical one. No CISA KEV listing and no public exploit code were identified at time of analysis, and no EPSS signal was supplied; the affected population is limited to WordPress/WooCommerce sites running this niche cryptocurrency payment gateway.
Authenticated directory traversal in the Post Export Import with Media plugin for WordPress through 1.17.1 allows administrator-level users to read arbitrary files from the server by importing a crafted ZIP whose media_metadata.json file_path field contains traversal sequences while the destination filename uses an allowed extension. Although rated CVSS 4.9, real-world priority is materially reduced because the vector requires PR:H, meaning the attacker already holds WordPress administrator credentials; impact is read-only confidentiality disclosure with no integrity or availability effect. No public exploit code or CISA KEV confirmation was identified at time of analysis.
Arbitrary file deletion in the WordPress plugin Listdom: AI-powered Business Directory with Classifieds Ads Listings (all versions up to and including 6.1.2) lets an authenticated administrator delete files anywhere on the server by supplying a traversal path to the plugin's CSV import routine (LSD_Menus_IX_CSV::import). The practical impact is high for integrity and availability - deleting a sensitive file such as wp-config.php can drop the site into a re-installation state and enable full takeover/RCE - but the requirement for administrator-level access (CVSS PR:H) makes this a high-barrier, medium-severity issue rather than a widespread emergency. No public exploit code and no confirmed active exploitation were identified at time of analysis.
SQL injection in the 'sidx' parameter of the Smart Popup by Supsystic WordPress plugin (all versions up to and including 1.13.2) lets authenticated attackers with administrator-level privileges append arbitrary SQL statements to existing queries and extract sensitive data from the site's database. The CVSS vector confirms high privileges are required (PR:H) and impact is limited to confidentiality (C:H/I:N/A:N), and no public exploit or CISA KEV entry has been recorded - no public exploit identified at time of analysis - so despite a CVSS base score of 4.9 this is a low real-world-priority issue because an attacker must already hold the broad database and site access that administrators legitimately possess. Affected deployments are those running 1.13.2 or earlier; the vendor released 1.13.3 to remediate it.
Path traversal in slide-maker through 5.8.0 lets an attacker who can influence the deck source material cause the image-generation script generate_images_openai.py to write generated image files outside the intended output directory, creating directories and overwriting existing files at arbitrary filesystem paths. The attack is local: a victim must actually run the image-generation step on the tainted deck (UI:P / UI:R), and impact is limited to integrity of files writable by that user, with no confidentiality or availability effect, so purely trusted, self-authored decks are not at risk. No confirmed active exploitation (not in CISA KEV) and no public exploit code identified at time of analysis.
Reflected cross-site scripting in WPForms Lite through 2.0.2.1 allows an unauthenticated attacker to execute arbitrary script in a victim's browser if the site administrator previously saved a form whose description embeds a {query_var} Smart Tag inside an iframe srcdoc attribute and enabled Show Description on a public-facing page. The attacker must trick a victim into clicking a crafted link containing a malicious value for the referenced query parameter, and the flaw is rated CVSS 4.7 with high attack complexity and required user interaction. No public exploit code was identified at time of analysis and CISA KEV does not list this CVE.
Reflected cross-site scripting in the Fluent Forms WordPress plugin (all versions up to and including 6.2.14) allows unauthenticated attackers to inject arbitrary script into pages via a crafted query parameter that is substituted into a {get.NAME} SmartCode. Exploitation is not possible on a default install: a site administrator must first have placed a {get.*} SmartCode inside a URL-accepting attribute (such as an iframe src or anchor href) within a Custom HTML field on a published form, and a victim with a session on the site must then be tricked into clicking an attacker-supplied link. No public exploit identified at time of analysis, and the issue is a genuine-but-moderate-priority problem rather than a drop-everything emergency given the non-default configuration prerequisite and the AC:H/UI:R scoring.
Reflected DOM-based cross-site scripting in the JetFormBuilder WordPress plugin (Dynamic Blocks Form Builder) affects all versions up to and including 3.6.6, allowing unauthenticated attackers to inject arbitrary web scripts via an attacker-chosen query variable whose name matches a form preset's query_var setting. Exploitation is heavily constrained: it requires a page that embeds a form containing a text field configured with a query_var Dynamic Preset together with a data-jfb-macro or JFB_FIELD:: macro reference to that field, and it also requires the victim to click an attacker-supplied link (UI:R), which is why the assessed CVSS is 4.7 with high attack complexity despite the network vector and no authentication requirement. There is no CISA KEV listing and no public exploit identified at time of analysis; the changeset in the plugin's Trac points to an upstream fix in trunk, but a patched tagged plugin release has not been independently confirmed.
Authenticated attackers with Contributor-level access can exploit missing authorization checks in the Portfolio Filter Gallery WordPress plugin (versions before 2.2.1) to read, modify, and delete other users' galleries and site-wide gallery filters. This is a moderate-severity issue (CVSS 4.7) requiring a valid low-privileged account; no public exploit identified at time of analysis. A vendor patch is available in version 2.2.1.
Stored cross-site scripting in the Responsive Lightbox & Gallery WordPress plugin (all versions through 2.7.9) lets authenticated attackers with editor-level privileges or higher inject arbitrary web scripts through the 'comment' parameter, which then execute when a site visitor opens the lightbox on an affected image. Realistic exploitation is heavily constrained by stacked prerequisites: the plugin's 'Comments' lightbox setting must be explicitly enabled (it is off by default), a moderator must approve the injected comment, the attacker must already hold a high-privilege account, and a visitor must click the affected image - which is why this is assessed as a low-priority issue despite the network attack vector. No public exploit code has been identified at the time of analysis and the flaw is not listed in CISA KEV; the CVSS 3.1 base score is 4.4 (assessed vector AV:N/AC:H/PR:H/UI:R/S:C/C:L/I:L/A:N).
Authenticated subscribers (or any logged-in user) on WordPress sites running the AutomatorWP plugin up to and including 5.8.4 can enumerate Fluent Forms records - specifically form IDs and titles from the fluentform_forms database table - because a plugin AJAX handler performs no authorization check. The flaw is network-reachable but requires a valid low-privilege account plus the Fluent Forms plugin and AutomatorWP's Fluent Forms integration to be active, and exposure is limited to form identifiers and titles rather than submissions or configuration data (CVSS 4.3, CWE-862). There is no public exploit identified at time of analysis and the issue is not confirmed actively exploited (CISA KEV); overall this is a genuinely low-priority information-disclosure defect.
Sensitive information exposure in the WordPress Download Manager plugin (codename065) through version 3.3.71 lets an authenticated subscriber-level user harvest the administrator's full Cookie header - including wordpress_logged_in_* session cookies - by abusing the 'first_name' parameter when the administrator triggers the plugin's 'Suspend' action against the attacker's account. Because the suspension email is compiled and sent synchronously inside the administrator's own authenticated HTTP request, the site's email template engine can resolve the admin's request context (Cookie header) at send time and inject it into the outgoing message, enabling session hijack and full account takeover once the attacker reads that email. Exploitation is not fully attacker-controlled: it depends on an administrator performing the Suspend action while authenticated, so the plugin carries a CVSS 3.1 base of 4.3 (independent assessment: AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N), and no public exploit code or confirmed active exploitation was identified at time of analysis.
Missing authorization in the LatePoint Appointment Booking plugin for WordPress (versions up to and including 5.7.2) allows unauthenticated attackers to create approved appointments against other customers' order items by sending a non-empty params[presets][order_item_id] to the publicly reachable steps__start and steps__load_step routes. The plugin's is_bundle_scheduling() discriminator is only an !empty(order_item_id) truthiness check, so supplying any value causes the booking flow to strip out the customer and payment steps and to skip ownership, bundle-membership, paid-status, and remaining-capacity validation. Successful requests leak the targeted customer's name, email address, and order code in the booking confirmation; exploitation is limited in practice by the need to know or guess a valid order item ID of a victim. No public exploit code or confirmed active exploitation was identified at time of analysis.
Authenticated low-privilege users on WordPress/WooCommerce sites running the ALD - Dropshipping and Fulfillment for AliExpress and WooCommerce plugin (woo-alidropship) through version 2.2.4 can reach plugin functionality they are not authorized to use, because affected endpoints omit authorization/capability checks (CWE-862). Per the assessed vector (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N, base 4.3), the practical impact is limited to low-integrity modification - no confidentiality or availability loss - and exploitation requires the attacker to already hold a valid low-privilege account on the target site, so sites that do not allow untrusted user registration have sharply reduced exposure. No public exploit code or confirmed active exploitation was identified at time of analysis, and this remains a low-to-moderate priority issue rather than an emergency patch item.
SQL injection in Rank Math SEO before 1.0.280 allows an authenticated high-privilege user, such as an administrator, to inject arbitrary SQL through an unsanitized parameter, potentially reading limited data from the WordPress database. The requirement for administrator-level access (CVSS PR:H) sharply limits realistic risk; no public exploit was identified at time of analysis, and the issue is assessed as low priority despite network exploitability. A vendor patch is available in version 1.0.280.
Out-of-bounds read in Apache DataSketches C++ (datasketches-cpp) allows an attacker who controls a serialized VarOpt union image to trigger reads of up to 24 bytes past the end of the supplied buffer, causing a crash (denial of service) and potentially leaking adjacent heap memory into the deserialized union's state. Applications are exposed only if they call var_opt_union::deserialize() on data from untrusted sources; affected releases are 2.0.0-incubating through 5.2.0, and the library is not exploitable on its own. No public exploit code has been identified at time of analysis, EPSS is low at 0.24% (14th percentile), and the issue is not listed in CISA KEV, so the practical priority is moderate rather than urgent. The vendor-released fix is version 5.3.0, which also remediates four other deserialization flaws.
Out-of-bounds read in Apache DataSketches C++ versions 3.1.0 through 5.2.0 is reachable when an application deserializes a compact Theta sketch from an untrusted source, allowing unauthenticated remote attackers to crash the process (denial of service) and potentially disclose adjacent memory contents. The flaw sits in compact_theta_sketch::deserialize() and wrapped_compact_theta_sketch::wrap(), which parse header fields before verifying the input length; in the compressed format a 32-bit integer overflow defeats the length check and two decoding-controlling header fields go unvalidated, and the stream-based deserialization path is affected as well. Apache rates this issue low severity in its 5.3.0 release notes, no public exploit code has been identified at time of analysis, the vulnerability is not in CISA KEV, and EPSS is only 0.20% (9th percentile); exploitation requires the explicit, non-default precondition that the host application accept Theta sketch images from untrusted sources, so the practical priority is lower than the raw 9.1 CVSS might suggest.
Sensitive information exposure in the SpeedyCache - Cache, Optimization, Performance WordPress plugin through version 1.4.2 allows an unauthenticated attacker to read the full name and email address of returning commenters by fetching a publicly cached page whose personalized comment-form prefill was written into the site-wide cache. The root problem is asymmetric handling of WordPress commenter cookies: advanced-cache.php suppresses cached delivery on the read path for requests carrying comment_author_* / comment_author_email_* cookies, but the equivalent check is missing on the write path in cache.php, so the personalized render is still stored under the public URL and can be retrieved by any cookie-less attacker who requests that same URL before the entry is regenerated. Rated CVSS 3.1 3.7 (AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N), it leaks only the identity of whichever commenter's render happened to be cached; no public exploit code was identified at time of analysis and the issue is not listed in CISA KEV.