Information disclosure in the Product Delivery Date for WooCommerce WordPress plugin before 3.3.2 allows an authenticated user with only Contributor-level access to read other customers' order details via the plugin's calendar-view AJAX actions, which are missing a capability check. Publicly available exploit code exists per WPScan, but EPSS is a low 0.15% (4th percentile) and there is no confirmed active exploitation (not listed in CISA KEV). Practical exposure is limited to WooCommerce stores that grant Contributor-or-higher accounts to untrusted or semi-trusted users, since a valid low-privilege login on the target site is required.
Improper authorization in the Smush WordPress plugin before 4.3.4 lets an administrator of a single subsite on a WordPress multisite network change a network-wide access setting that should be modifiable only by a network super-administrator. Only multisite deployments running Smush versions earlier than 4.3.4 are exposed, and the attacker must already hold the administrator role on at least one subsite (PR:H, per the supplied vector), so the issue is not reachable by unauthenticated or low-privilege users. Impact is limited to modification of a configuration value - no data disclosure or service disruption - and public exploit code exists, though EPSS is only 0.14% (3rd percentile) and there is no evidence of active exploitation; the vendor has released a fix in Smush 4.3.4.
Code injection in ImprintLab Medical-SAM-Adapter 0.1.0-alpha and 0.1.0 allows a local, low-privileged attacker to execute arbitrary code in the context of the user who loads a crafted model file. The flaw resides in the AutoBackend model-loading path (models/MobileSAMv2/ultralytics/nn/autobackend.py), where the imgsz, names, or kpt_shape metadata fields are passed into a dynamically evaluated expression without neutralization (CWE-95). Publicly available exploit code exists, and the project has not responded to the issue report; exploitation requires local access and victim interaction to load the malicious model, limiting impact to Low confidentiality, integrity, and availability.
Wheels 4.0.0 through 4.1.2 performs case-insensitive path-containment checks on case-sensitive filesystems, so a pre-existing symlink pointing to a case-distinct sibling directory can bypass canonical-path validation for zip entries, package mappings, development assets/docs, guide images, and image tags. This permits limited unauthorized file disclosure outside the intended root; a separate CLI database-dump write path can write outside the application root only when the CLI POST action, loopback access, and password gate are all satisfied, and only to an existing writable case-distinct sibling directory. The issue is fixed in Wheels 4.2.0; exploitation of the primary flaw depends on deployment on a case-sensitive filesystem with the necessary pre-existing symlink, and no public exploit was identified at time of analysis.
Use-after-free in libarchive's archive_entry_copy_mac_metadata() function allows an attacker who can influence the input an application feeds that API to crash the linked application or cause it to read uninitialized heap memory, yielding a CVSS 3.1 base score of 3.6 (AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L). The flaw is not remotely reachable by default and requires the consuming application to perform a self-copy in which the source buffer overlaps the entry's existing mac_metadata pointer; it is a genuinely low-priority memory-safety issue with impact limited to denial of service and minor information disclosure, with no integrity or code-execution outcome. No public exploit code and no confirmed active exploitation were identified at time of analysis, and Red Hat has published an upstream fix (libarchive PR #3318) alongside its advisory and Bugzilla tracking entry.
IBM i versions 7.3 through 7.6 contain an improper authorization flaw in the NFS server that allows a local, authenticated low-privilege attacker to bypass configured NFS export version restrictions. The vulnerability requires the NFS server to be configured with version-restricted exports to have any impact, and exploitation is limited to bypassing version controls with low confidentiality and integrity impact. This moderate-severity issue (assessed CVSS 5.4, AV:L) has no public exploit identified at time of analysis, and a vendor patch is available.
Path traversal in ClickMigrate's `revision` command lets a crafted migration name supplied via the `-m` argument escape the intended migrations directory and cause a `.sql` file to be created at an arbitrary path writable by the user running the tool. The flaw affects pip package `clickmigrate` versions before 1.0.3 and is only reachable when an attacker can influence the migration name passed to the command - for example an insecure CI/CD pipeline or automation that forwards untrusted input such as branch names or PR titles into `revision -m`; per the CVSS vector (AV:L, PR:L) the attacker needs a local execution path with user-level privileges rather than network access to a default install. Impact is limited to file creation in user-writable locations with no code execution, no data read or exfiltration, and no confidentiality impact (C:N/I:L/A:N), so this is a low-severity, low-priority issue; no public exploit code was identified at time of analysis and the issue is not confirmed actively exploited (CISA KEV). A vendor-released patch is available: ClickMigrate 1.0.3.
Argument injection in libblockdev's NTFS and VFAT label-setting routines lets a local, unprivileged user smuggle command-line flags into the ntfslabel and fatlabel utilities through a filesystem label that begins with a dash. The vulnerable paths (bd_fs_ntfs_set_label() and bd_fs_vfat_set_label()) are reachable without administrator authentication via the udisks2 Filesystem.SetLabel() D-Bus method, but exploitation is strictly local and the assessed impact is low integrity only - no confidentiality or availability loss and no privilege escalation. No public exploit code has been identified at time of analysis, and the low CVSS score (3.3, AV:L/PR:L/I:L) reflects the limited blast radius rather than an unexplored attack surface.
Content spoofing and MCP handshake interference in the ckan-mcp-server DataStore Table UI resource let any frame that can reach the embedded iframe inject fabricated table rows and spoof JSON-RPC responses, including the ui/initialize handshake. All npm versions of @aborruso/ckan-mcp-server before 0.4.112 are affected; the inbound message listener never validates event.origin and outbound postMessage calls use targetOrigin '*', although cell values are HTML-escaped so this is display spoofing rather than script execution. Exploitation requires the table UI to be embedded by a context other than the trusted MCP Apps host and to be actively viewed by the user, so real-world priority is low; publicly available exploit code exists in the advisory's proof-of-concept files, and no active exploitation has been reported.
Missing initialization vector handling in IBM Db2 Genius Hub 1.0 allows a remote authenticated attacker holding low privileges to weaken the product's cryptographic protection and bypass security restrictions, resulting in a limited integrity impact. Exploitation is constrained by high attack complexity - the attacker must be able to observe or influence the affected ciphertext and benefit from favorable conditions such as repeated or predictable plaintext - and there is no confidentiality or availability impact. No public exploit code and no confirmed active exploitation were identified at time of analysis, and the overall risk is low (CVSS 3.1 base score 3.1).
Administrator-level users of the WP Mail Logging WordPress plugin, in all versions up to and including 1.17.0, can read complete mail-log rows belonging to other users - including recipient addresses, message subjects, full message bodies, and URLs contained in them. The flaw is that the 'email_address' parameter is passed unescaped into a SQL LIKE query during the WordPress personal-data export workflow, so an attacker with administrator privileges can retrieve additional records only when their own address contains a LIKE wildcard character (for example an underscore) that coincides with another address stored in the log. Exploitation is gated by several concrete preconditions - high privileges (CVSS PR:H), a wildcard-bearing attacker address, a matching entry in the mail log, and an administrator-triggered privacy export - and no public exploit identified at time of analysis; the assigned score is 2.7, reflecting a genuinely low-priority information-disclosure issue.
Server-side request forgery in the PingOne groups endpoint of Devolutions Server 2026.3.8.0 and earlier lets an authenticated user with low privileges supply an attacker-controlled PingOne configuration in a request parameter and cause the server to act on it, resulting in exfiltration of the stored PingOne application secret. The issue carries a CVSS base score of 2.6 (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N), is limited to a confidentiality impact on the PingOne secret, and only affects instances where the PingOne integration is configured with a stored application secret. No public exploit code has been identified at time of analysis, and a vendor patch is available.
PHP object injection in 10up Distributor before 2.3.2 allows an authenticated Contributor-level user on a connected source WordPress site to store a serialized-PHP-shaped string as post meta, which the destination site's set_meta() function in includes/utils.php then unserializes a second time, instantiating attacker-influenced objects on the receiving site. Real-world impact is heavily gated: exploitation requires a configured Distributor push/pull relationship between two sites and a usable PHP gadget (POP) chain in the destination's loaded plugins or themes, otherwise object instantiation accomplishes little. Tracked as CWE-502 with a CVSS 4.0 base score of 2.3 (independent assessment: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L) and no public exploit identified at time of analysis, this is a low-priority hardening issue rather than an urgent, actively exploited flaw.
An insecure direct object reference in Jeepay through version 3.2.9 lets an authenticated merchant user who holds the ENT_DIVISION_RECEIVER_DELETE entitlement delete profit-sharing (division) receiver records belonging to a different merchant. The flaw stems from the delete handler validating ownership against the wrong column - the caller's receiver-group ownership rather than the receiver record itself - so an attacker who owns a group whose id collides with a victim's receiver id can pass the check and remove that receiver. Exploitation requires a provisioned merchant account with the specific delete permission plus an id collision (reflected in the assessed CVSS as AC:H/AT:P), and impact is limited to deletion of receiver records with no read access to victim data; no public exploit code has been identified at time of analysis, and the issue is assessed as genuinely low priority.
Client-side page freezing in tarteaucitron.js before 1.37.0 allows an attacker to hang a visitor's browser tab by forcing the cookie-purge routine to evaluate a catastrophic-backtracking regular expression built from an unescaped cookie name. The library constructs a RegExp from each cookie name without escaping regex metacharacters, so a name planted as a cookie on a sibling subdomain, or supplied through an injected purgeBtn element's data-cookie attribute, can drive exponential backtracking when the purge action runs. Exploitation is unauthenticated per the CVSS vector (PR:N) but is heavily constrained: it requires an attacker-controlled cookie name (or DOM injection) plus the victim actually clicking the purge control, and the only consequence is a frozen page - no confidentiality or integrity impact. No public exploit code or confirmed in-the-wild exploitation was identified at time of analysis, and the issue is assessed as low priority (CVSS 4.0 base 2.3; independently assessed CVSS 3.1 AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L).
Heap out-of-bounds read in the FreeRDP Windows client (versions 3.30.0 up to but not including 3.32.0) lets a malicious or compromised RDP server feed a malformed clipboard file-transfer reply that the client misinterprets, crashing the client or corrupting an internal stream-size value. The attack is only reachable when a user connects to the hostile server and then actively pastes a remote file, so the attacker must control the server side and the victim must perform the triggering UI action; there is no public exploit identified at time of analysis and no confirmed active exploitation (CISA KEV). Scoring is low by every available signal - CVSS 4.0 base 2.3 and an independently assessed CVSS 3.1 vector of AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L - so this should not be treated as a priority patch under normal circumstances.