Server-side request forgery in Kortix Suna 0.10.7 through 0.13.51 allows an authenticated user holding the project.connector.write permission to bypass the isPrivateIp egress guard by encoding connector base_url, OpenAPI, Postman, or MCP endpoints as IPv6 6to4 (2002::/16) or Teredo (2001:0::/32) addresses whose embedded IPv4 points at an internal host or the 169.254.169.254 cloud metadata endpoint. Exploitation reaches internal-only services and metadata and returns the fetched responses to the attacker, but impact is capped at low confidentiality and integrity with no availability loss and no scope escape beyond the connector fetch path. Publicly available exploit code exists (a technical writeup linked from the CVE record), and the issue is fully remediated in v0.13.52; there is no confirmed active exploitation (CISA KEV) for this CVE.
Sensitive information exposure in the SpeedyCache - Cache, Optimization, Performance WordPress plugin through version 1.4.2 allows an unauthenticated attacker to read the full name and email address of returning commenters by fetching a publicly cached page whose personalized comment-form prefill was written into the site-wide cache. The root problem is asymmetric handling of WordPress commenter cookies: advanced-cache.php suppresses cached delivery on the read path for requests carrying comment_author_* / comment_author_email_* cookies, but the equivalent check is missing on the write path in cache.php, so the personalized render is still stored under the public URL and can be retrieved by any cookie-less attacker who requests that same URL before the entry is regenerated. Rated CVSS 3.1 3.7 (AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N), it leaks only the identity of whichever commenter's render happened to be cached; no public exploit code was identified at time of analysis and the issue is not listed in CISA KEV.
Stored cross-site scripting in the Rank Math SEO WordPress plugin before 1.0.280 allows an account that can manage redirections (Administrators by default) to persist JavaScript in a redirection source value that then executes in the browser session of any user who opens the redirections administrative list view, including a Super Administrator on a multisite install. Exploitation requires a high-privileged authenticated account plus victim interaction (someone must open the affected admin view), and the impact is bounded to limited confidentiality and integrity loss, giving a low CVSS 3.1 base score of 3.5 (AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N); no public exploit code and no confirmed active exploitation have been identified at time of analysis.
Information disclosure in ZTE Z80 Ultra devices lets a locally installed malicious application read information through system callable functions that lack sufficient access control. This is a low-severity, low-priority local issue (CVSS 3.3) requiring user interaction, typically installing or launching the attacker's app, with only confidentiality impact and no integrity or availability effect. No public exploit identified at time of analysis.
ZTE Z80 Ultra allows a malicious third-party application installed on the device to hook exposed system APIs and read limited sensitive information, resulting in a low-severity information disclosure (CVSS 3.1 base score 3.3). The attack is local-only, requires user interaction to install the attacking app, and requires no special privileges (PR:N), with only a low confidentiality impact and no integrity or availability impact; no public exploit identified at time of analysis and no confirmed active exploitation (CISA KEV).
Local information disclosure in ZTE Z80 Ultra devices allows an installed third-party application to capture device-related data returned by system interfaces that do not adequately restrict access. The issue requires local execution and user interaction to install or run the hostile app, and it needs no elevated privileges (PR:N), resulting in a low CVSS score of 3.3 with only confidentiality impact. No public exploit code or confirmed active exploitation has been identified at time of analysis, and the risk is best treated as low priority.
Authenticated users with subscriber-level access or higher can alter site-wide semantic search configuration in the WordPress plugin AI Puffer (formerly AI Power) when an administrator has already granted their role the Knowledge Base ('sources') module through the plugin's Role Manager. The flaw affects all versions up to and including 2.4.89 and allows an attacker to change global values in the aipkit_options record - vector provider, embedding provider, embedding model, target ID, result count, and no-results text - that are otherwise administrator-only, giving a limited integrity impact with no confidentiality or availability loss. Exploitation requires a non-default role grant, so reachability is constrained; there is no public exploit and no confirmed active exploitation (no CISA KEV listing) at time of analysis, and the CVSS 3.1 vector scores this as low severity (3.1, AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N).
Authorization bypass in the WordPress plugin AI Puffer - Chat. Create. Automate. (formerly AI Power, slug gpt3-ai-content-generator) through version 2.4.89 lets an authenticated subscriber-level user rewrite the global options aipkit_training_general_settings and aipkit_indexing_field_settings, changing chunking parameters, file upload visibility and per-post-type field indexing for the whole site. Exploitation is tightly constrained: the attacker must already hold an account (PR:L per CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N) and an administrator must have explicitly granted the 'sources' module to that lower-privileged role through the plugin's Role Manager, a non-default configuration against which the plugin is not exploitable at all, which is why attack complexity is rated High. Impact is confined to configuration integrity with no data disclosure or availability loss, no public exploit identified at time of analysis, and this is assessed as a genuinely low-priority issue.
CSV formula injection in OpenPanel through 2.3.0 lets unauthenticated remote attackers inject spreadsheet formulas into cohort-member exports by submitting tracking events to the /track endpoint with crafted profile IDs (for example =HYPERLINK(...)) that satisfy an existing cohort's membership criteria. The payload only materializes if an OpenPanel operator later exports that cohort to CSV and opens the file in a spreadsheet client that evaluates formulas and permits the resulting external fetch, so realized impact is limited to low-severity adjacent-cell data disclosure (assessed CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N). No public exploit code was identified at time of analysis and CVE-2026-108579 is not in CISA KEV; all signals point to a low real-world priority.
Server-side request forgery in Mealie 3.26.0 through 3.28.0 allows an authenticated OpenID Connect user to redirect the server's avatar-fetch routine to arbitrary ports on the configured identity provider's address, because the allowlist check validates only the provider hostname and ignores the port. The fetch fires as a server-side GET on each login, so the practical impact is limited to blind interaction and reconnaissance against services co-located on the already-trusted IdP host; the response body is not returned to the attacker. Exploitation requires Mealie to be configured for OIDC authentication (non-default for many deployments) and a valid account on the trusted IdP whose 'picture' claim the user controls, which is why this scores low (CVSS 4.0 base 2.3, independent assessment CVSS 3.1 4.x-equivalent severity). No public exploit code and no confirmed active exploitation were identified at time of analysis, and no vendor-released patch version is present in the available data.
Server-side request forgery in zotero-mcp 0.10.0 through 0.14.1 lets an unauthenticated attacker who successfully lands a prompt injection steer the connected LLM agent into calling the zotero_add_by_url tool with an attacker-chosen URL, which _fetch_embedded_metadata then fetches without any destination validation. Because redirects are followed, the resulting requests can reach loopback, RFC1918 private, or link-local addresses such as 169.254.169.254, leaking citation meta-tags and error details from internal services that are reachable from the MCP server's network position. Impact is confined to low confidentiality and integrity with no availability effect: exploitation requires the chained prompt injection to succeed (AT:P/UI:R) and an internal service to actually be reachable, and no public exploit identified at time of analysis.
IP spoofing in PairDrop through 1.11.2 lets unauthenticated remote attackers who already know a victim's public IP address join that victim's discovery room on self-hosted instances that are not deployed behind Cloudflare, so the attacker appears as a local device and can send or receive files. Impact is limited to low confidentiality and integrity loss within the discovery-room session (CVSS 2.3 / assessed 3.1 vector AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N), with no code execution or availability impact, and no public exploit identified at time of analysis. Exploitation requires three concrete conditions: a self-hosted PairDrop instance through 1.11.2 that is not correctly fronted by Cloudflare, prior knowledge of the victim's public IP, and user interaction to actually exchange files.
Authenticated users with Contributor role or higher can permanently delete media attachments owned by other users, including administrators, in Portfolio Filter Gallery versions 2.0.2 through before 2.2.1 due to a missing per-object authorization check in the plugin's attachment deletion handler. The vendor has released patch version 2.2.1; no public exploit code is identified at time of analysis. This is a low-priority, defense-in-depth issue per independent assessment, with a CVSS vector of AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N, relevant primarily to multi-author or open-registration WordPress sites.