Stored cross-site scripting in the MapSVG WordPress plugin (mapsvg-lite-interactive-vector-maps) through version 8.16.1 allows an authenticated low-privilege user to persist JavaScript that later executes in the browser of any higher-privileged user who views the affected map content. The issue is scored CVSS 6.5 (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L), reflecting that exploitation requires a pre-existing authenticated account with enough rights to submit or edit MapSVG input, and that the payload only fires when a victim - typically an administrator or editor - renders the page; no public exploit identified at time of analysis and there is no CISA KEV listing. Deployment risk is concentrated on sites that grant content-entry or map-editing roles to untrusted or semi-trusted users, since anonymous visitors cannot trigger the stored payload.
Stored cross-site scripting in the GeoDirectory - WP Business Directory Plugin and Classified Listings Directory for WordPress (all versions up to and including 2.8.191) allows authenticated attackers with subscriber-level access or above to inject arbitrary JavaScript into a listing's post_content that then executes in the browser of any visitor viewing that listing page. The attacker must own an already-published listing, because the GeoDir_Post_Data::can_edit() ownership check limits who can store the payload and ajax_save_post() re-applies the existing post_status on edit, so changes to a published listing bypass re-moderation and go live immediately; sites that disable open registration, disallow front-end submissions, or hold listings in moderation are substantially less exposed. This moderate-severity flaw (CVSS 6.4, CWE-79) was reported by Wordfence, and no public exploit identified at time of analysis (it is not listed in CISA KEV).
Stored cross-site scripting in the HivePress - Business Directory, Listings & Classified Ads plugin for WordPress (all versions up to and including 1.7.32) allows an authenticated attacker with subscriber-level access or above to inject arbitrary web scripts through the 'message' parameter, which are then rendered to other users. Exploitation is conditional: the site administrator must have enabled user listing submission (a non-default setting), and a victim must subsequently log in through the login form embedded on the attacker's listing page for the payload to execute in their browser. This is a medium-severity issue (CVSS 6.4, CWE-79); no public exploit code was identified at time of analysis and there is no CISA KEV confirmation of active exploitation, so it should be treated as a moderate, conditional priority rather than an emergency.
Stored cross-site scripting in the Cooked - Recipe Management plugin for WordPress (all versions up to and including 1.16.1) lets an authenticated attacker with contributor-level access or above embed arbitrary JavaScript through the [cooked-timer] shortcode, which is stored and then executed in the browser of any user - including an administrator - who later views the injected post, page, or recipe. The root cause is insufficient input sanitization and output escaping in the plugin's shortcode handling (CWE-79), and the CVSS 3.1 vector AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N places it at 6.4, a moderate-severity issue contingent on the attacker already holding a contributor+ account on a site running the vulnerable plugin. There is confirmed actively exploited status? No - no public exploit identified at time of analysis, and no CISA KEV listing; treat this as a routine patch-management priority rather than an emergency.
Stored cross-site scripting in the FiboSearch - Ajax Search for WooCommerce WordPress plugin, in all versions up to and including 1.34.2, lets an authenticated attacker with Subscriber-level access or above inject arbitrary JavaScript through the 'purchased_plan' parameter that later executes in the browser of any user viewing the affected admin page. Exploitation is gated by a non-default precondition: the site owner must have already completed the standard Freemius opt-in flow, after which a Subscriber can trigger the vulnerable handler simply by loading /wp-admin/profile.php with crafted query parameters. Scored CVSS 3.1 6.4 (AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N), the issue is confirmed fixed in 1.34.3; no public exploit code has been identified at time of analysis, and it is not listed as actively exploited.
Stored cross-site scripting in the GeoDirectory WordPress plugin (all versions up to and including 2.8.192) allows an authenticated user with Subscriber-level access to inject arbitrary JavaScript into the 'twitterusername' custom field, which is then stored and executed whenever another user - ideally a higher-privileged admin or moderator - views the affected listing page. The only input restriction on that field is a client-side HTML 'pattern' attribute, which is trivially bypassed, while server-side sanitization and output escaping are insufficient. Exploitation is confirmed to require an account with listing-creation privileges and a victim who views the injected listing; no public exploit code has been identified at time of analysis, and the overall risk is assessed as moderate priority.
Stored cross-site scripting in the Premium Packages - Sell Digital Products Securely WordPress plugin, affecting all versions up to and including 7.2.8, allows an authenticated attacker with subscriber-level access or above to inject arbitrary script into an order 'note' that executes when a privileged user opens the affected order-notes page in wp-admin. The payload defeats WordPress' sanitize_textarea_field() filtering because it is saved as a hex-escaped sequence such as \x3cimg onerror=...\x3e that is only reconstituted into a live HTML tag by stripcslashes() during admin-side rendering, after sanitization has already run. No public exploit code has been identified at time of analysis, and exploitation is conditional on the victim (typically an administrator) viewing the poisoned notes view, so the practical risk is moderate rather than critical; the vendor has committed an upstream code fix in the plugin's order-notes view.
Stored cross-site scripting in the Mang Board WordPress plugin (versions up to and including 2.4.4) allows authenticated attackers with subscriber-level access or higher to inject arbitrary scripts into pages via the 'content' parameter by omitting the data_type parameter in a modify request, which bypasses the HTMLPurifier sanitization branch and leaves only reversible mbw_htmlspecialchars2 encoding as a barrier. Exploitation requires only that a victim view the injected Mang Board page, resulting in in-browser script execution with limited confidentiality and integrity impact (CVSS 6.4); this is a moderate-severity issue representing a real but not emergency-level priority, and no public exploit identified at time of analysis. Sites that disable open registration meaningfully limit the attacker pool, and exploitation is specific to versions up to and including 2.4.4.
Stored cross-site scripting in the SureDash - Community, Courses & Member Dashboard WordPress plugin affects all versions up to and including 1.12.0 and lets an authenticated attacker with subscriber-level access or above inject arbitrary JavaScript through the 'display_name' parameter, which is stored and later rendered as live HTML. The payload fires when any user hovers over a comment's like counter on a community page, because the plugin's tooltip handler assigns the attacker-controlled data-tooltip-description value directly to innerHTML and the browser re-parses the decoded entity payload as markup. This is a moderate-risk authenticated stored XSS (CVSS 6.4, CWE-79) rather than an urgent emergency; exploitation requires a registered account, an active SureDash community/comment interface, and a victim performing the hover interaction, and no public exploit code or confirmed active exploitation (CISA KEV) was identified at time of analysis. An EPSS score was not included in the available intelligence, and the vendor has released version 1.12.1 which removes the condition.
Stored cross-site scripting (XSS) in the WebberZone Top 10 - Popular Posts WordPress plugin, a moderate-severity issue (CVSS 6.4), affects all versions up to and including 4.5.2 and allows an authenticated attacker with contributor-level privileges or higher to inject arbitrary web scripts via crafted block JSON. The attacker sets an undeclared is_widget flag to '1' and supplies a malicious instance_id value that is concatenated into an unescaped HTML class attribute, so the payload executes when a victim-potentially an administrator-views the injected page. No public exploit code has been identified at the time of analysis, and exploitation requires a WordPress site that permits contributor-level or higher accounts and a non-default block configuration.
Stored cross-site scripting in the Tutor LMS - eLearning and Online Course Solution WordPress plugin (all versions up to and including 4.1.0) allows an authenticated attacker with subscriber-level access or above to inject arbitrary JavaScript via the display_name parameter, which is insufficiently sanitized on input and not escaped on output. The payload is only stored and rendered when a Legal Consent record exists for the attacker's account, causing a 'View Logs' button to appear in the Consent Logs column of wp-admin/users.php; an administrator or other privileged user must then open that page for the script to execute, so exploitation is gated on consent logging being enabled and on a privileged user visiting the affected admin screen. Rated CVSS 6.4 (CWE-79), this is a moderate-severity issue with no confirmed active exploitation (not in CISA KEV) and no public exploit identified at time of analysis, though the Subscriber-level prerequisite is trivially met on sites with open user registration.
Stored cross-site scripting in the MaxFoundry Social Share Buttons plugin for WordPress, affecting all versions up to and including 1.30, allows an authenticated attacker with subscriber-level access or higher to inject arbitrary JavaScript through the 'form' parameter containing 'share_url', which then executes in the browser of any user who views the injected page. Exploitation is gated by the plugin's review-nag logic: the nonce required to reach the vulnerable save-network handler is only rendered in the DOM after a 7-day timer has elapsed since the attacker's first wp-admin visit, so a low-privilege account and a multi-day wait are both required, which is why the assessed vector raises attack complexity to High and this is treated as a moderate-priority issue rather than an emergency. No public exploit code was identified at time of analysis, and there is no confirmed active exploitation (CISA KEV).
Stored cross-site scripting in the WordPress Profile Builder plugin (CozmoLabs) affects all versions up to and including 4.0.3 and allows an authenticated subscriber-level user to inject persistent JavaScript that executes in the browsers of anyone viewing an affected page. The payload is written through the 'display_name' parameter and, critically, is stored in wp_comments.comment_author, so it survives deleting or renaming the attacker's account and continues to fire as long as the poisoned comment is rendered. Exploitation requires the target site to allow self-service registration or the attacker to already hold a low-privilege account; no public exploit identified at time of analysis, and the plugin's own vendor-reported severity is moderate (CVSS 6.4, PR:L, scope-changed).
Stored cross-site scripting in the Quick PayPal Payments: Payment Button & Form WordPress plugin (all versions up to and including 6.0.4) allows authenticated attackers holding Contributor-level access or higher to inject arbitrary JavaScript through the plugin's 'form' parameter, which then executes for every viewer of the affected post. The sanitization bypass is notable because the payload survives wp_kses_post by using a quote-breaking, angle-bracket-free construction, so injected script fires even for Editors and Administrators who routinely preview a Contributor's pending content. No public exploit code has been identified at time of analysis, and this is a moderate-severity (CVSS 6.4) issue whose practical exposure depends on whether a site permits untrusted users to register or be assigned the Contributor role.
Stored cross-site scripting in the SQL Chart Builder plugin for WordPress (elvinhaci), affecting all versions from 0 through 3.0.6, allows an authenticated subscriber-level user to persist arbitrary JavaScript that executes for anyone viewing a rendered chart. The attacker seeds a payload into a user-controlled database column - for example display_name set via /wp-admin/profile.php - and the plugin later prints that value unescaped as a chart X-axis label, so execution depends on an administrator having published a chart whose SQL query projects such a column and on a victim subsequently loading that page. No public exploit code has been identified at time of analysis and the CVE is not listed in CISA KEV, so this is a moderate-risk, not a top-priority, issue whose real-world reach is limited by that required admin-created chart configuration.
Stored cross-site scripting in the WordPress Name Directory plugin (all versions up to and including 1.34.2) allows authenticated attackers holding contributor-level privileges or higher to inject arbitrary JavaScript via the 'dir' attribute of the plugin's shortcode, which is then persisted and executed in the browser of any user who later views the affected page. The issue is a plugin-specific input sanitization and output escaping failure (CWE-79) rather than a WordPress core privilege escalation, and it is remediated in version 1.34.3. No public exploit identified at time of analysis and no CISA KEV listing; the CVSS 3.1 base score is 6.4 (AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N), reflecting moderate severity with low confidentiality and integrity impact and scope change from the plugin context into the victim's browsing session.
Stored cross-site scripting in the Tourfic - AI Powered Travel Booking, Hotel Booking & Car Rental WordPress plugin affects all versions up to and including 3.0.1, allowing an authenticated attacker with contributor-level access or above to inject arbitrary web scripts via the 'type' parameter handled by the Wishlist shortcode. The injected payload is crafted without angle-bracket characters so it survives the wp_kses_post filter applied on save, and it then executes as a live event handler in the unauthenticated (guest) rendering branch whenever any visitor loads the affected page. Rated medium severity (CVSS 6.4, AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) and reported by Wordfence; no public exploit code or CISA KEV entry was identified at time of analysis, and the practical risk is bounded by the requirement that a site grant the attacker contributor rights (for example through open registration or lax role assignment) and publish the injected content to guest-visible pages.
Stored cross-site scripting in the WPPool 'Dark Mode - Improve Accessibility with AI Powered Dark Theme' WordPress plugin (all versions up to and including 5.3.17) allows attackers holding a Contributor-level account or higher to inject arbitrary JavaScript via the 'icon_light' shortcode attribute, which then executes in the browser of any visitor who later loads the injected page. Authentication is required and the privilege gate is Contributor-and-above (CVSS vector PR:L, scope changed), so sites that tightly control or disable self-registration and editorial roles are largely insulated. No public exploit code and no confirmed active exploitation have been identified at time of analysis; EPSS and KEV data were not provided.
Authenticated users on Mattermost Server 11.7.x through 11.10.0 can quarantine posts inside direct and group messages they are not participants of by issuing a direct API call to the post-quarantine endpoint, because the server performs no DM/GM membership or authorization check before processing the request (CWE-862, Missing Authorization). The flaw is remotely reachable over the network but requires a valid low-privileged account (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L per the assessed vector), and the realistic impact is improper manipulation of the moderation/quarantine state of DM and GM posts rather than disclosure of message contents or full data compromise. There is no public exploit identified at time of analysis and no confirmed active exploitation (no CISA KEV entry); this is a moderate-severity authorization weakness that Mattermost tracks under advisory MMSA-2026-00756.
Stored cross-site scripting in the Tourfic WordPress plugin (versions up to and including 3.0.1) allows attackers with subscriber-level or WooCommerce customer credentials to inject malicious JavaScript into comment content, which executes when victims view affected pages, REST API responses, or RSS feeds. Because WooCommerce customer registration is open without admin approval, any visitor can effectively become an attacker; the payload bypasses the plugin's own wp_kses_post() sanitization when served via the unauthenticated GET /wp-json/wp/v2/comments endpoint (content.rendered) and comment RSS feeds. No public exploit code or active exploitation has been identified at time of analysis.
Authentication bypass in Xiaozhi-esp32-server-java through 6.1.0 lets unauthenticated remote attackers request /api/device/ota with a valid MAC address and receive a device WebSocket token, enabling access to that device's channel to read private role system prompts, write conversation history, consume LLM/STT/TTS credentials, and overwrite device metadata. No public exploit was identified at time of analysis, and the assessed risk is MEDIUM rather than top-tier because the attacker must know or enumerate a provisioned device MAC and the OTA endpoint must be network-reachable; impact is bounded to a single device's WebSocket channel rather than full server compromise.
Niefy wx-api through 0.8.2 allows unauthenticated remote attackers to impersonate WeChat followers by presenting a raw openid cookie to fan-facing controllers that Apache Shiro excludes from its authentication filter chain - specifically /wxUser/getUserInfo and /wxUserTags. Anyone who already knows a victim's openid can read that fan's nickname, phone number, unionid and tag assignments, and add or remove tags on the account, giving cross-tenant fan PII exposure and unauthorized state changes. Impact is bounded to per-fan confidentiality and integrity loss with no code execution or availability effect, and exploitation is non-trivial because openids are opaque, non-sequential identifiers, so blind mass exploitation is impractical without a prior source of valid openids; this is a moderate-priority issue with no public exploit identified at time of analysis, although a public technical writeup describing the attack path and an associated cross-tenant IDOR is referenced.
Unauthenticated clients that can reach an Umbraco CMS backoffice can complete the SignalR negotiate handshake against the PreviewHub and BackofficeHub endpoints and receive the refreshed notifications those hubs broadcast, disclosing content keys for unpublished content and revealing when editors are actively working. The flaw affects Umbraco CMS releases before 17.7.1 and before 18.2.1 and is rated medium severity (vendor CVSS 4.0 base 6.3; independently assessed CVSS 3.1 AV:N/AC:H/PR:N/UI:N/C:L), with the practical leak limited to read-only metadata that only flows while editorial activity is in progress. No public exploit identified at time of analysis, and no evidence of confirmed active exploitation; the vendor has published patched releases and upstream fix commits.
An out-of-bounds read (heap over-read) in the FreeRDP Windows RAIL client (wfreerdp) versions 3.0.0 through 3.31.x can be triggered by a malicious or compromised RDP server that sends a full-length WINDOW_ORDER_FIELD_TITLE window-title update lacking NUL termination, a value that wf_rail_window_common passes directly to SetWindowTextW. This reverse (server-to-client) attack requires the victim to initiate a connection to the attacker-controlled server with RemoteApp/RAIL in use; impact is limited to window-title corruption, disclosure of adjacent heap memory, and client crashes, with no code execution or integrity impact assessed (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L). No public exploit code or confirmed active exploitation was identified at time of analysis.
Host header injection in Nezha 2.1.0 through 2.3.14 lets an attacker who can control or spoof the Host header on a victim's MCP request redirect file uploads and capture one-time download tokens that can be replayed to exfiltrate files. The flaw is in mintTransferTool, which builds the fs.download_url and fs.upload_url transfer links from the unvalidated Host header, so the observable impact is limited to low confidentiality and integrity loss rather than code execution. Exploitation is unauthenticated per the CVSS vector (PR:N) but conditional on the attacker influencing the reflected Host value - for example through a misconfigured or trusting reverse proxy, DNS rebinding, or a man-in-the-middle position on the victim's path - and on the victim actually invoking the MCP transfer tools. No public exploit code or confirmed active exploitation was identified at time of analysis, and the vendor has shipped a fix in Nezha 2.3.15.
Multimodal prefix-cache poisoning in SGLang through 0.5.21 lets remote unauthenticated attackers alias one image's cached KV entry onto a different image by supplying a caller-controlled mm_hashes value on the /generate endpoint, enabling cross-request image content disclosure or response corruption in shared multi-tenant deployments. The behavior was the default in affected releases because the tokenizer manager trusted GenerateReqInput.mm_hashes as the multimodal prefix-cache identity before the fix; exploitation requires the attacker to know or predict the victim's content hash, which is the main limiting factor (AC:H/AT:P), and only deployments running multimodal models with the KV/prefix cache active and serving multiple parties are meaningfully exposed. No public exploit code and no confirmed active exploitation were identified at time of analysis, and independent assessment rates this a moderate-priority multi-tenant data-integrity/disclosure flaw rather than an urgent one.
Reflected cross-site scripting in the Gwolle Guestbook WordPress plugin (all versions up to and including 5.1.1) allows unauthenticated attackers to inject arbitrary script into pages generated by the plugin's permalink handling, executing in the browser of any victim lured into clicking a crafted link. Tracked as CWE-79 and rated CVSS 6.1 (AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N), the flaw requires no authentication but is gated on victim interaction, which keeps it a medium-severity, per-victim attack requiring individual luring. No public exploit code was identified at the time of analysis, and the impact is confined to the victim's browser session (script execution in the site's origin context) rather than granting server-side access.
DOM-based cross-site scripting in the Tutor LMS eLearning and online course plugin for WordPress (versions up to and including 4.0.8) lets unauthenticated attackers inject arbitrary JavaScript that runs in a victim's browser when the crafted 'redirect_url' parameter is processed by the Topbar component's back-button handler. Because the CVSS vector carries UI:R, the attacker must convince a victim to open a specially crafted URL and trigger the back-button action - the flaw cannot be exploited passively against a server, and no public exploit code has been identified at time of analysis. Scored 6.1 (AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) and assessed as a moderate-severity client-side issue rather than a top-tier priority, it still allows session-scoped script execution and potential redirect or content-injection abuse on any WordPress site running the affected plugin version.
Denial of service and limited memory disclosure in GIMP's Bohemia Interactive (PAA) texture importer, triggered when a user opens or previews a specially crafted .paa file through the affected plug-in. An integer overflow in the image-dimension calculation during decompression causes an undersized heap buffer to be allocated, and the subsequent out-of-bounds read crashes the plug-in process and may expose fragments of heap memory (CVSS 3.1 base 6.1, AV:L/PR:N/UI:R, C:L/A:H). The attack requires the victim to deliberately load the malicious file locally, so there is no public exploit identified at time of analysis and no confirmed active exploitation (CISA KEV) - this is assessed as a moderate-severity, low-priority issue in practice.
Authenticated cross-work attachment disclosure in O2OA through 10.0.2-ce lets any low-privileged user, using the endpoint jaxrs/attachment/download/{id}/work/{workId}, read files attached to other users' process works by supplying an attachment UUID they should not be able to reach. The root cause is an IDOR (CWE-639) in x_processplatform_assemble_surface, where the download actions never confirm the requested attachment belongs to the referenced work or draft, so the confidentiality of stored documents is exposed (vector reports C:H with no integrity or availability impact). Exploitation requires a valid low-privileged session plus knowledge of a specific, non-sequentially-enumerable attachment UUID, which keeps mass exploitation impractical; no public exploit code was identified at time of analysis and there is no CISA KEV entry confirming active exploitation.
Authenticated HQL injection in Erupt through version 2.3.0 lets a user who already holds query permission on an entity with a String-keyed linkTree target escape that entity's tree-scoped data filter and read records belonging to other mapped entities. The flaw is reached by posting unescaped quote characters into the linkTreeVal parameter of POST /erupt-api/data/table/{erupt}, which allows attackers to append always-true OR clauses or boolean subqueries to the generated Hibernate query. Exploitation is not trivial: it depends on valid low-privileged credentials plus a specific data-model configuration (a String-keyed linkTree target with query permission), and the impact is limited to confidentiality - no write or availability effect - so this is best treated as a moderate-priority authorization/data-exposure issue, and no public exploit code has been identified at time of analysis.
Directory traversal in the WordPress plugin 'Debloat - Remove Unused CSS, Optimize JS' (all versions through 1.3.0) allows remote attackers to read arbitrary files on the server via crafted input in the 's' search parameter. According to our independent assessment, the CVSS vector is AV:N/AC:H/PR:N/UI:N (unauthenticated, no user interaction), so the trigger is a single crafted GET request to the public search endpoint - but only after a site administrator has enabled the plugin's 'Optimize CSS' feature with the default 'Inline Google Fonts' option active, which is why the attack is rated AC:H and conditional rather than universally exploitable. Impact is read-only confidentiality loss (C:H, I:N, A:N), typically exposing wp-config.php and other sensitive files subject to web-server/PHP file permissions; no public exploit code has been identified at time of analysis and there is no KEV listing, making this a moderate, conditionally-exploitable issue rather than a top-tier emergency.
Resource exhaustion in FreeRDP's rdpecam camera-redirection channel affects client builds from 3.30.0 up to (but not including) 3.32.0, where a malicious or compromised RDP server can send a StartStreamsRequest for an unadvertised camera media type with oversized dimensions, forcing large pending-sample allocations and reconfiguring the local camera through the HAL. Impact is availability-only (client memory exhaustion leading to hang or crash) with no code execution or data disclosure, and exploitation requires the victim to have camera redirection enabled and to intentionally connect to an untrusted server. Independent assessment rates this a moderate-severity denial-of-service issue rather than a top-tier priority, with high attack complexity; no public exploit identified at time of analysis.
Improper boundary validation of metadata slot values in luksmeta allows an attacker who can supply or modify a LUKS disk header to redirect wipe or load operations outside the intended metadata area, overwriting or zeroing encrypted payload data and causing persistent data loss and corrupted storage. The attack is confined to a local vector and requires high privileges - root-level write access to the raw block device, or inducing an administrator to process an attacker-supplied untrusted disk image whose header carries out-of-range slot values together with valid checksums. The impact is limited to integrity and availability, with no information disclosure; no public exploit code and no confirmed active exploitation were identified at time of analysis, and the moderate CVSS of 6.0 reflects the substantial privilege barrier rather than the severity of the data-loss outcome.
Repeated state-notification requests sent to a network-reachable rpc.statd service in nfs-utils cause memory allocated during callback processing to never be released, producing continuous memory growth that can degrade or crash the service and exhaust host resources. The flaw is remotely triggerable without authentication (CVSS:3.1/AV:N/AC:H/PR:N/UI:N) but exploitation is not trivial: a single request is insufficient because the attacker must sustain a stream of requests long enough to exhaust memory, which is why the vector carries AC:H and the impact is availability-only (C:N/I:N/A:H, base score 5.9). Exposure is limited in practice because rpc.statd only runs when NFSv3 locking services are active and is normally bound to internal or trusted networks rather than the public internet, so firewalled or default deployments are not reachable. No public exploit code has been identified at time of analysis and the issue is not in CISA KEV; this is a genuine but moderate-priority availability issue rather than a top-tier emergency, and affected services can be recovered by a restart.
Exception-detail disclosure in the Wheels CFML framework (versions 3.0.0 through 4.1.1) lets a remote, unauthenticated client receive full stack/exception details when the non-default setting allowIPBasedDebugAccess=true is enabled. Because error and debug-display flags live in shared application scope, an administrator request that changes those settings can race with an unauthorized client's erroring request, so that client may receive tag context or a serialized exception and any sensitive data inside it - confidentiality only (CVSS 5.9, CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N). Practical risk is well below what the network vector suggests: exploitation requires both the explicitly enabled non-default configuration and a narrow timing window, the race does not bypass the production gate that protects developer tools, and there is no public exploit identified at time of analysis. The issue is fixed in 4.1.2.
Information disclosure in the Wheels CFML framework through 4.1.1 allows an unauthenticated remote attacker who wins a cold-start race to redirect the application's production error-email recipient to an address they control, because the default recipient is derived from the attacker-supplied Host header instead of a configured value. Once the attacker's request initializes the application, error emails silently flow to that address for the application's lifetime, disclosing error and request metadata and - on engines and versions where scope dumps render (Lucee 7 does not render them, limiting exposure to header fields) - configuration secrets and other users' session and cookie data. Exploitation is highly conditional: it requires no explicitly configured error recipient, a configured mail server, an upstream server that accepts an arbitrary Host value, and the attacker's request coinciding with the cold start; no public exploit identified at time of analysis, and the flaw is fixed in 4.1.2.
Information disclosure in Microsoft Authentication Library (MSAL) for Node.js can expose sensitive data to an untrusted origin due to improper origin validation (CWE-346). The assessed CVSS 3.1 vector (AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) allows unauthenticated remote exploitation without user interaction, but high attack complexity means success depends on specific MSAL flows or cross-origin conditions rather than default behavior. No public exploit identified at time of analysis; a vendor patch is available through the Microsoft MSRC update guide.
Tandoor Recipes deployments prior to 2.6.10 can be driven into denial of service by an authenticated user who stores a catastrophic-backtracking regular expression in a shared-Space Automation rule, which the server then evaluates with Python's re.sub() during another user's recipe import through the api/recipe-from-source/ endpoint. Because the pattern is executed without complexity validation or any execution timeout, a single crafted rule can monopolize a Gunicorn worker until the request timeout elapses, exhausting available worker slots and making the application unavailable to legitimate users. Exploitation requires a valid authenticated account that belongs to a shared Space plus a second user importing a matching recipe (CVSS 5.7, CWE-1333, AV:N/AC:L/PR:L/UI:R with availability-only impact), no public exploit code has been identified at time of analysis, and the vendor shipped a fix in 2.6.10.
Processing a crafted MP4 file with GPAC MP4Box 2.4 can terminate the tool with SIGFPE, because the fraction-string parser gf_parse_lfrac() in src/utils/error.c divides by a zero denominator supplied by the file's metadata. Only the single MP4Box process crashes; there is no code execution and no confidentiality or integrity impact (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H, 5.5). Exploitation is local and requires the victim or an automated pipeline to open the malicious file, EPSS is a negligible 0.16% (4th percentile), and there is no public exploit identified at time of analysis - an availability-only denial-of-service with LOW priority despite the media-parser context.
Heap memory disclosure in GStreamer gst-plugins-good before 1.28.2 occurs when the isomp4 qtdemux parser processes a crafted MP4/QuickTime 'uuid' atom and reads past the end of a heap-allocated buffer. The issue has a local attack vector with user interaction (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N), so a victim must load the malformed media file in a GStreamer-based application, and impact is limited to confidentiality with no code execution or crash claimed. No public exploit code or CISA KEV active exploitation is identified at time of analysis, and EPSS is very low at 0.15% (4th percentile).
IBM i releases 7.3, 7.4, 7.5, and 7.6 can disclose sensitive information to a local attacker who already holds an authenticated low-privileged account, because file handle resolution omits necessary subtree checks and therefore fails to enforce the directory hierarchy boundary. The vendor CVSS vector rates the issue at 5.4 (network-vector, PR:L), but the independent assessment re-scopes it to a local attack (AV:L) with confidentiality-only impact, meaning an attacker needs an existing foothold on the system rather than unauthenticated remote access. There is no public exploit code identified at time of analysis and the issue is not confirmed actively exploited (not in CISA KEV); EPSS data was not provided, so risk is best treated as moderate with a low likelihood of mass exploitation and a higher payoff for an insider or post-compromise attacker seeking data outside their authorized subtree.
Incorrect DBus policy in lomiri-download-manager, the download service shipped with Ubuntu Touch (UBports), allows an unprivileged local user to invoke privileged methods on the root-owned system bus service and execute arbitrary commands as root. The affected component is the UBports lomiri-download-manager package across all released versions (CPE cpe:2.3:a:ubports:lomiri-download-manager:*), and exploitation is strictly local: it requires the attacker to already hold an unprivileged account or in-app code execution on the device, with no user interaction needed. Vendor input rates a lower CVSS 3.1 base score of 5.5 (C:H/I:N/A:N, scope unchanged), while independent analysis assesses the correctly scoped vector as CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H, reflecting full root compromise as well as unauthenticated arbitrary file read as root; no public exploit code or confirmed active exploitation was identified at time of analysis.
Local denial of service in the nfs-utils fsidd daemon affects Red Hat Enterprise Linux 6, 7, 8, 9, and 10 as well as Red Hat OpenShift Container Platform 4; an authenticated local user with access to the fsidd Unix domain socket can send a malformed request that omits required arguments, triggering a CWE-617 assertion failure and crashing the daemon. The service remains unavailable for filesystem identifier lookups until restarted, giving this a CVSS 3.1 score of 5.5 (AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H). No public exploit code has been identified at time of analysis.
Stored cross-site scripting in the Events Made Easy WordPress plugin (all versions up to and including 3.2.22) lets unauthenticated attackers inject arbitrary script into the event[location_name] field, which then executes in the browser of any visitor who views the affected location map balloon. Per the CVSS 3.1 vector (AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N) the flaw is remotely reachable without credentials, but exploiting it requires an administrator to have explicitly enabled both the guest event submission feature (eme_fs[guest_submit]) and forced location creation (eme_fs[force_location_creation]) - both of which default to off - so default-configured sites are not exposed. There is no public exploit identified at time of analysis and the plugin is not in CISA KEV; the vendor addressed the issue in version 3.2.23.
Stored cross-site scripting in the WPeMatico RSS Feed Fetcher WordPress plugin (etruel) affects all versions up to and including 2.9 and allows an unauthenticated remote attacker to plant arbitrary web scripts inside imported posts. The attacker does not need a WordPress account: because the plugin strips WordPress's wp_filter_post_kses filter from content_save_pre immediately before calling wp_insert_post() whenever a campaign's last editor holds the unfiltered_html capability - a flag the plugin sets automatically for every admin-saved campaign - raw RSS markup taken from $item->get_content() is written verbatim into post_content. Exploitation therefore depends on an administrator having subscribed a campaign to an RSS feed the attacker publishes or compromises, and the injected script only fires when a visitor later opens the imported post; no public exploit code or confirmed active exploitation was identified at time of analysis, and the assessed CVSS 3.1 vector (AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N, 5.4) reflects that attacker-controlled precondition.
Arbitrary shortcode execution in the ProfilePress (formerly WP User Avatar) WordPress plugin through version 4.17.5 allows authenticated users with Subscriber-level access or higher to plant shortcode markup inside a comment, which is later rendered server-side by do_shortcode() when any visitor opens that user's front-end profile Comments tab. Because the plugin's ppress_neutralize_buffer_shortcodes() pass only strips pp-custom-html and bracket fragments containing HTML delimiters, shortcodes exposed by any other active plugin or theme remain intact and can be executed with attacker-chosen attributes, giving a low-privilege user a route to capability-gated or data-returning shortcodes and to raw HTML injection on a publicly viewable page. Rated CVSS 5.4 (AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N), the impact is bounded by which shortcodes a given site happens to have installed, and no public exploit code or confirmed active exploitation was identified at time of analysis.
Arbitrary shortcode execution in the Slim SEO WordPress plugin (all versions up to and including 4.11.1) allows an authenticated attacker holding a Subscriber-level account to store a shortcode payload in their own Biographical Info field, which the plugin subsequently passes to do_shortcode when rendering that author's description on the front end. Exploitation is gated by concrete prerequisites - an attacker-controlled low-privilege account (in practice, open user registration), a front-end request that resolves the author description without redirection (the ?author= query parameter while Slim SEO's auto_redirection setting is disabled), and the presence of other plugins whose shortcodes are worth invoking - and the resulting impact depends on which shortcodes other installed plugins expose, making this a moderate, authentication-gated code-injection issue rather than a top-priority emergency. No public exploit identified at time of analysis, and the vendor shipped a fix in 4.11.2 that strips shortcodes from the user bio.
An insecure direct object reference (IDOR/BOLA) in Tandoor Recipes prior to 2.6.10 lets an authenticated member of a shared Space read and destroy another member's pending bookmarklet import. By submitting a co-tenant's BookmarkletImport primary key to POST /api/recipe-from-source/, the attacker causes the endpoint to return the victim's stored source URL and captured page content and then unconditionally delete that pending record, yielding limited confidentiality loss and a low-impact availability/denial effect against the victim's import workflow. Exploitation requires a valid account in the same shared Space as the victim (CVSS 3.1 5.4, PR:L, no user interaction), exposing only multi-member deployments; single-user or non-shared Spaces are not affected, and no public exploit code was identified at time of analysis.
Missing FILE-privilege and secure_file_priv enforcement in MariaDB Server's optional CONNECT storage engine plugin lets an authenticated, low-privileged database user read or write files on the database host through the file-access UDFs json_file(), bson_file(), jfile_make(), bfile_make(), and jbin_file(), bypassing the access controls those functions were supposed to honor. Affected releases range from 10.6.1 up to (but excluding) the fixed builds 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2; exploitation requires the CONNECT plugin to be installed and loaded (it is not part of a default MariaDB installation) plus a valid low-privileged account able to call the affected UDFs. The practical impact is bounded by the operating-system permissions of the database service account, so reachable files are limited to those the mysqld user can already read or write; no public exploit code has been identified at time of analysis, and the flaw is rated moderate (CVSS 3.1 5.4, AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N) rather than an emergency.