Weekly Vulnerability Briefing: Edge VPN and WordPress Risks Dominate

Unauthenticated remote denial of service affecting Cisco Secure Firewall Adaptive Security Appliance (ASA) and Threat Defense (FTD) software when the Remote Access SSL VPN service is enabled and secondary authentication is configured on a tunnel group. A crafted request sent while connecting to the SSL remote access VPN triggers logic errors in secondary authentication handling that force the device to reload, disrupting all traffic through the firewall. The CVSS 3.1 score is 8.6 (AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H); no public exploit code or confirmed active exploitation is identified at time of analysis, and exposure is gated by the non-default secondary-authentication configuration plus network reachability to the VPN listener.

IBM Langflow OSS 1.0.0 through 1.12.8 allows unauthenticated remote attackers to bypass security restrictions through improper authentication, with a CVSS 9.8 vector indicating high confidentiality, integrity, and availability impact and no privileges or user interaction required. The vendor has published a patch and the vuln.today priority is act_now, though no public exploit was identified at the time of analysis. Network exposure is the main practical limiter, since instances behind VPNs, authentication proxies, or localhost-only access are less reachable.

Unauthenticated remote code execution in MLflow 3.12.0rc0 through 3.16.x lets any network caller reach the tracking server place a Python module under an allow-listed third-party scorer package and have the server import and instantiate it via the scorer invoke endpoint, executing arbitrary code in the MLflow server process. The flaw is a prefix-matching mistake in the third-party scorer allow-list combined with MLflow's own experiment, run and artifact-upload endpoints, which can be used to publish a module inside a writable scorer package directory; the shipped v3.14.0 container image, running as uid 0 with a writable site-packages tree, is fully exploitable without credentials, while basic-auth deployments require a principal able to create an experiment and run and upload artifacts (the invoke endpoint is gated only by validate_gateway_proxy, with no experiment- or scorer-level permission check). A public proof-of-concept script and a working reproduction accompany the GitHub advisory, and the vendor fixed the issue in 3.17.0.

Automated Import Products to Cart before 1.0.4 allows authenticated users with only subscriber-level permissions to read arbitrary server files, including files holding database credentials, and to delete arbitrary files. The plugin passes an unsanitized user-supplied file path into file read and delete operations (CWE-22 path traversal), giving a low-privileged account high confidentiality and integrity impact with no victim interaction; CVSS 9.9 and the vuln.today act_now label reflect a genuine high-priority issue. A public PoC reference exists but is not verified as working exploit code, and CISA SSVC records no known exploitation.

Unauthenticated arbitrary file upload in the Chat AI with Dispatcher WordPress plugin before 2.4 allows remote attackers to upload PHP files and, where uploads are stored in a web-executable location, achieve remote code execution (CVSS 9.8, AV:N/AC:L/PR:N/UI:N). The vendor has released version 2.4 to fix the issue. No confirmed active exploitation is reported (SSVC exploitation: none); a public PoC reference exists but is not verified as working exploit code, and practical exposure is bounded by the plugin's apparently niche deployment footprint.

Unauthenticated password reset in the LogixFast Auth WordPress plugin before 1.0.4 allows remote attackers to take over any account, including an administrator account, by supplying an attacker-controlled email address during the reset flow. The plugin sends the one-time reset code to the supplied address rather than the resolved account's registered email, so knowing or guessing a valid username is the main prerequisite. A public PoC reference exists; it is not verified as working exploit code, and active exploitation is not confirmed in the supplied KEV data, but the CVSS 9.8 and act_now priority warrant urgent patching to 1.0.4.

Unauthenticated OS command injection in the WAVLINK WL-WN579A3-A Initial Setup Wizard allows a remote attacker who can reach /cgi-bin/adm.cgi to execute arbitrary shell commands by supplying a crafted wlan_ssid argument to set_wzdgwMesh, with high confidentiality, integrity and availability impact (CVSS 4.0 score 9.3; assessed CVSS 3.1 AV:N/AC:L/PR:N/UI:N/C:H/I:H/A:H). The issue affects the named 2026-03-10-94f93d4 firmware and is tracked as CWE-78; a public PoC reference exists, but it is not verified as working exploit code, and no CISA KEV confirmation was provided. Exposure is mainly limited by whether the device HTTP management interface is reachable from untrusted networks, and the priority label is act_now with no vendor-released patch identified at time of analysis.

Command injection in the WAVLINK WL-WN530BE1-A router (build V251117) allows unauthenticated remote attackers to execute arbitrary shell commands on the device by sending crafted requests to /protocol.csp that reach the con_check_read_finish function with malicious group_name or IP-FROM values. Per the supplied CVSS vector (AV:N/AC:L/PR:N/UI:N), no credentials, user interaction, or non-default configuration are indicated as prerequisites, giving high confidentiality, integrity and availability impact. A public PoC reference exists (a GitHub write-up linked from the VulDB entry); it is not verified as working exploit code, and no CISA KEV listing is present in the supplied data, although the vuln.today decision label is act_now.