The WPVR WordPress plugin (9.0.0 to <9.0.3) fails to perform object-level authorization when reading and updating virtual tours, so an account with contributor-level privileges or higher can read and modify tours belonging to other users. Our independent assessment rates this CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N (low severity) rather than the published 3.8 vector, because exploitation only needs an ordinary contributor account rather than high privileges; the limiting factor remains the authenticated low-privilege account requirement, with impact confined to the confidentiality and integrity of tour content. No exploitation is confirmed (not in CISA KEV), EPSS is 0.13% (3rd percentile), a public PoC reference exists but is not verified as working exploit code, and the priority signal is monitor.
Stored cross-site scripting in the Contact Form by Supsystic WordPress plugin before 1.8.0 lets users with access to the form editor save a form name containing script that executes when another user views that form. The CVSS 3.1 vector (AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N, base 3.5) requires a high-privileged authenticated account and victim interaction, so this is not remote-unauthenticated exploitation. The meaningful boundary crossing is limited to WordPress multisite, where administrators lack the unfiltered_html capability; a public PoC reference exists but is not verified as working exploit code, EPSS is 0.15% (4th percentile), the issue is not in CISA KEV, and the vendor has released a fix in 1.8.0.
Settings overwrite in the InstaWP Connect WordPress plugin before 0.1.4.2 lets an authenticated low-privileged user who has been explicitly granted access to the plugin's sync feature change plugin settings, including the setting that controls which roles may use that feature. The settings-update action verifies a nonce but performs no capability check (CWE-862), so the attacker must already hold such an account and supply a valid nonce; the role grant is not enabled by default. This is a low-priority issue (CVSS 3.1, EPSS 0.17%, decision: monitor); a public PoC reference exists but is not verified as working exploit code, and there is no CISA KEV confirmation.
Missing attempt throttling in the SMS code verification logic of ruoyi-vue-pro (through version 2026.09) allows unauthenticated remote attackers to repeatedly submit verification-code guesses for a known phone number, with the only real impact being low confidentiality exposure if a guess lands inside the code's validity window. Attack complexity is rated high and exploitability 'difficult', and the CVSS 4.0 base score is 2.9 (LOW) with a vuln.today decision label of 'monitor'; a public PoC reference exists but is not verified as working exploit code, no CISA KEV entry applies, and the vendor did not respond to the disclosure so no fixed release is confirmed.
Missing object-level ownership checks in the WPVR (WP VR) virtual tour builder plugin for WordPress before 9.0.3 allow authenticated users with contributor-level access or above to modify, reconfigure and publish virtual tours created by other authors. The flaw is an integrity-only issue on multi-author or open-registration sites: it is rated 2.7 by the CVE record and 3.1 in our assessment (both agree there is no confidentiality or availability impact), EPSS is negligible at 0.13% (3rd percentile), there is no CISA KEV listing, and the priority label is monitor. A public PoC reference exists in the WPScan entry, but it is not verified as working exploit code, and the vendor has released a fix in 9.0.3.
GiveWP before 4.19.0.1 allows authenticated users who hold donor-report (view) access, but not donor-edit access, to add, modify, or delete the stored address of any donor because the address-change handler lacks a capability check. This is a low-severity, low-priority issue despite being network-reachable, with EPSS at 0.13% (percentile 3%); a public PoC reference exists, but it is not verified as working exploit code.
Stored HTML form injection in the Qi Addons For Elementor WordPress plugin before 1.11.2 lets authenticated users with the Contributor role or above place live HTML forms - including password inputs whose form posts to an external host - into post content where WordPress would normally strip such markup. The flaw is a sanitisation-ordering weakness in the plugin's heading widget: HTML entities in the heading text are decoded after WordPress's normal filtering, so encoded markup becomes live at render time. Impact is limited and not self-executing: a victim (administrator or visitor) must view the affected post and choose to type credentials into the injected form, and the independent assessment rates overall risk as LOW real-world priority; there is no CISA KEV entry, EPSS is 0.10% (1st percentile), a public PoC reference exists but is not verified as working exploit code, and the vendor has released 1.11.2 as the fix.
A path traversal flaw in the designer-mcp MCP server (versions up to 2.1.0) lets a caller of the get_reference tool read files outside the bundled references directory by supplying a crafted reference name. Because the argument was concatenated directly into a path with a '.md' extension appended, exposure is limited to Markdown files and to low confidentiality impact - no write or availability effect. Exploitation requires the attacker to already hold access as a connected MCP client invoking the tool, and a public issue report (#14) referencing the flaw exists but is not verified working exploit code; there is no confirmation of active exploitation. The project ships rolling releases, so version-based guidance is unavailable and remediation is by commit c8c2951dcbed9b1710a745993f028317f10a3f10.
DOM-based cross-site scripting in Privoce Vocechat up to and including 0.9.121 allows remote attackers to run script in a victim's browser by crafting a link whose `welcome` query parameter is reflected into the widget.html page. Exploitation requires the target to open the malicious URL (CVSS 4.0 UI:P, assessed vector UI:R), and impact is confined to client-side script execution rather than server compromise. VulDB reported the issue with a public PoC document reference that is not verified as working exploit code, no CISA KEV entry applies, the vendor was contacted and did not respond, and no fixed version is listed in the available sources; scoring is 5.3 with a this_month priority.
Unrestricted file upload in TinyFileManager 2.0 through 2.6 allows a user who is already authenticated to the file manager (CVSS PR:L) to store arbitrary files through the Remote URL File Upload Module in tinyfilemanager.php without file-type or extension enforcement, which can escalate to PHP code execution if the storage location is web-served and script-executable. The vendor was contacted about the disclosure and did not respond, so no fixed release has been identified; exploitation requires valid credentials plus a deployment that exposes the remote-URL upload path. A public PoC reference exists (a linked Google Drive artifact); it is not verified as working exploit code, and there is no CISA KEV confirmation of active exploitation - the priority signal is 'this_month' rather than an emergency, consistent with the authentication gate.
Stored cross-site scripting in CloudClassroom-PHP-Project allows an attacker to submit script content through the fname argument of addnewstudent.php, which is persisted and later rendered without output encoding, executing in the browser of any user who views the affected page. The CVSS 4.0 base score is 5.3 (medium), and the impact is limited to low integrity with no confidentiality or availability effect per the assessed vector. No CISA KEV listing is present and no public working exploit has been confirmed; a public PoC reference exists but is not verified as working exploit code, and the vendor was contacted about the disclosure but did not respond, so no vendor-released patch is identified at time of analysis.
SQL injection in SourceCodester Performance Indicator System 1.0 lets a remote attacker who can authenticate to the admin area manipulate the ID argument of /opils/admin/deleteproduct.php and inject SQL, with low confidentiality, integrity, and availability impact under the assessed vector. This is a medium-severity, lower-priority issue rather than an urgent one: the priority label is this_month, and the supplied data contains no KEV confirmation. A public PoC reference exists at the linked GitHub issue, but it is not verified as working exploit code.
PHP code injection in DedeCMS up to and including 5.7.118 lets an attacker who already holds backend administrator credentials supply a crafted vtime argument to dede/update_guide.php, which is passed into a require_once call and results in attacker-influenced code being loaded and executed. The assessed vector (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) confirms remote reachability with no user interaction, but exploitation is gated on high-privilege authentication, so anonymous remote users cannot reach the flaw directly. A public PoC reference exists in a third-party GitHub repository; it is not verified as working exploit code, and there is no CISA KEV confirmation of active exploitation, with a vuln.today priority of this_month indicating a moderate, authentication-gated risk rather than an emergency.
Loading a malformed mmproj (multimodal projector) file into llama.cpp's Pocket-TTS audio-generation path can drive an out-of-bounds heap write through list_pockettts_state_slots in tools/mtmd/models/pockettts-gen.cpp. The exposure is narrow: it requires local access with low privileges (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) plus the operator actually loading an untrusted projector while using the non-default Pocket-TTS feature, so it is not a remote or default-inference risk. A public PoC reference exists but is not verified as working exploit code, there is no KEV listing, and the reviewed decision label is monitor; vendor build b11796 (commit 0a1ef309) is the documented fix, and on current master and b11871 the same malformed input trips a release-active GGML_ASSERT and aborts instead of corrupting the heap, while the by-construction hardening PR #29360 remains open.
Stored user credentials in SH3, within the Módulo de Gestão and Módulo de Arrecadação components, are protected only by a reversible XOR-based encoding rather than a computationally expensive one-way password hash (CWE-916), so anyone able to read that credential data can reverse it back to plaintext. Only authenticated, high-privileged users (CVSS PR:H) can reach the affected data, and the vendor rates exploitability as difficult with high attack complexity; impact is limited to confidentiality of stored credentials with no integrity or availability effect, giving a low severity score (CVSS 4.0 base 2.1, independently assessed as CVSS 3.1 AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:N). A public PoC reference exists in the form of a Medium write-up; it is not verified as working exploit code, and there is no KEV listing or other indication of active exploitation. Priority is monitor.
Memory exhaustion in ImageMagick before 7.1.2-33 stems from a leak in the FPX (FlashPix) encoder, so unauthenticated remote attackers who can push crafted images through that encode path can consume process memory incrementally and degrade availability. Exposure is narrow: the leak is confined to FPX output encoding rather than general image handling, and denial of service depends on accumulating many small leaks across repeated requests, which is why the vendor vector (CVSS 4.0, 2.3) records high attack complexity, a present attack requirement and availability-only impact. No public exploit code or confirmed active exploitation was identified at time of analysis, and the vendor has released 7.1.2-33 as the fix.
OpenRemote Core before 1.31.0 allows a registered edge gateway to overwrite attributes on, or delete, assets in any realm, breaking tenant isolation. The gateway event path skips normal authorization and relies on a reversible GatewayConnector.mapAssetId transform, so an attacker with one registered, enabled gateway's service-user credentials can compute pre-image asset IDs that resolve to victim assets across tenants. Assessment signals conflict sharply - the supplied CVSS 4.0 vector scores 2.3, while the independent CVSS 3.1 assessment rates it 9.6 (critical) due to scope change and high integrity/availability impact; it is not in CISA KEV, and a public PoC reference exists but is not verified as working exploit code.
OpenRemote Manager before 1.31.0 routes incoming gateway WebSocket traffic by gateway ID alone, so a user holding WRITE:ADMIN in one realm can create a service user named after a gateway in another realm and impersonate that gateway across realm boundaries. The assessed impact is limited destructive tampering (third-party descendant assets can be created or overwritten, but existing assets cannot be read) plus the ability to establish SSH tunnels into the target gateway's local network during the initial sync handshake. This is an authenticated, high-privilege attack (CVSS 3.1 PR:H, AC:H) that additionally requires knowledge of the victim realm's exact gateway ID; no CISA KEV entry or confirmed working exploit code is available, though the vendor advisory documents a step-by-step proof-of-concept procedure, and the current decision signal is monitor rather than emergency action.
An authenticated low-privileged user of KodCloud KodExplorer up to and including version 4.55 can write arbitrary files through the Online Editor save endpoint in app/controller/editor.class.php by manipulating the path and filestr arguments, yielding an unrestricted upload restricted in scope to that user's accessible storage. Impact is limited (low confidentiality, integrity and availability) per both the CVSS 4.0 vector (5.3) and an independent CVSS 3.1 assessment of AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L; remote exploitation requires a valid account and no user interaction. The flaw was disclosed publicly with exploit details, and the vendor did not respond to early contact, so no vendor-released patch has been identified at time of analysis.
Edgeless Systems Contrast releases 1.21.0 through 1.24.1 can apply a wildcard registry pull configuration to a concrete registry domain in the imagepuller guest component, potentially exposing registry credentials, CA bundles, or mirror/pull metadata to the wrong audience. The bug only matters in deployments whose pull configuration lists both a concrete domain and its parent domain as a wildcard AND where the wildcard's credentials, CA bundle, or mirror settings are unsuitable for that concrete registry - the vendor describes such overlapping setups as very unlikely in practice. Exploitation requires low privileges and adjacent network positioning, severity is low (CVSS 4.0 base 2.1; assessed CVSS 3.1 AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N), and no public exploit code has been identified; the issue is fixed in 1.25.0 and warrants routine monitoring rather than urgent action.
SMS multi-factor authentication login-code requests in Parse Server are persisted with master privileges, letting an authenticated user who is enrolled in SMS MFA smuggle extra account fields into that request so they are written to their own record with restrictions bypassed. Successful abuse allows integrity-only changes to self-owned data, such as flipping the email-verification flag or setting values normally protected by beforeSave triggers; other users' records cannot be touched. The flaw affects only deployments using the built-in SMS MFA adapter with enrolled accounts, in versions before 8.6.104 and 9.0.0 through 9.10.5-alpha.5, and no public exploit identified at time of analysis while vendor patches are available.
SQL injection in pig-mesh pig through 4.1.0 lets an authenticated user inject SQL into ORDER BY clauses by supplying crafted `ascs`/`descs` sort parameters to endpoints that bind pagination through SqlFilterArgumentResolver. The pre-patch code relied on MyBatis-Plus SqlInjectionUtils.check, which the upstream fix's own tests show fails to block case/when expressions, hex(), arithmetic such as user_id+1, comment sequences, and backtick-quoted identifiers. A public PoC reference exists (a GitHub write-up); it is not verified as working exploit code, there is no confirmed active exploitation, and the vendor-released fix is version 4.1.1 (commit 9b6311161e346d7626c81d993044072fed2dca07).
OS command injection in dbcli mycli through 2.30.1 lets a local user who can drive the \source special command slip past the source_special_command_is_safe whitelist check and execute commands with that user's own privileges. Affected builds are mycli 2.29.0 through 2.29.4 and 2.30.0 through 2.30.1, and the disclosure states that exploit code has been made publicly available, with the CVSS 4.0 vector scoring E:P for a public proof-of-concept. Impact is bounded because the attack is local only (AV:L) and runs inside the invoking user's context (VC:L/VI:L/VA:L), making this a low-to-moderate priority issue despite the OS command injection class; no CISA KEV listing is present in the supplied data.
Repeated failed comparisons in ImageMagick's `magick compare` command (every release before 7.1.2-33) leak memory that is never released, allowing local attackers to gradually exhaust the memory of a process that runs compare against attacker-influenced images and thereby degrade availability. Each failure leaks only a small amount, so sustained or repeated failed invocations are needed before service quality drops; there is no data exposure or code execution impact. No public exploit code was identified at time of analysis, the issue is not in CISA KEV, and the vendor priority label is monitor.
Heap memory corruption in ImageMagick versions before 7.1.2-33 affects only 32-bit builds and can crash the process when a crafted image is processed by a workflow that requests convex-hull information. The assessed impact is availability only; code execution is described as potential and is not confirmed. Exploitation requires the 32-bit build plus the convex-hull path, no public exploit has been identified at time of analysis, and the vendor has released 7.1.2-33.
Cross-site scripting (CWE-79) in the Onyx chat/knowledge platform through version 5.0.0, specifically in the Craft feature's output panel rendered by web/src/app/craft/components/output-panel/PreviewTab.tsx, lets an attacker inject script that executes in the browser context of another user who views the crafted preview. Exploitation requires a low-privileged authenticated account on the Onyx instance plus a victim who renders the malicious preview, and the vendor-assessed impact is limited to integrity (no confidentiality or availability loss), which is why VulDB scored it 5.1; a public exploit disclosure accompanies the report, but it is not independently verified as working exploit code, and there is no KEV listing or evidence of active exploitation. Onyx administrators should treat this as a moderate-priority hardening item to be scheduled within the current month rather than an emergency.
ImageMagick before 6.9.13-58 and 7.x before 7.1.2-32 can bypass configured security-policy restrictions because the fix for GHSA-jjp4-3fwf-393j was incomplete. The exposure is limited to deployments that actually rely on policy.xml to block specific coders or operations and that accept attacker-supplied input; the vendor CVSS 4.0 vector is local (AV:L), high complexity (AC:H), with a present attack requirement (AT:P) and high privileges (PR:H), and low impact across confidentiality, integrity and availability. No public exploit identified at time of analysis; CISA KEV does not list it and the vuln.today decision is monitor.