CVE Vulnerability Catalog

The Easy Invoice plugin for WordPress up to version 2.1.19 is vulnerable to Missing Authorization. It registers the easy_invoice_accept_quote and easy_invoice_decline_quote AJAX actions via wp_ajax_nopriv_ hooks, relying solely on a quote-scoped nonce rendered in the publicly accessible single quote template, combined with an off-by-default Pro option (easy_invoice_pro_restrict_quote_to_client). This allows unauthenticated attackers to accept or decline arbitrary published quotes and, depending on the configured accept action, automatically convert them into invoices (even emailing them to the client) by harvesting the per-quote nonce from the public quote page and submitting it to admin-ajax.

An out-of-bounds read and reachable assertion vulnerability in Samsung Open Source Escargot allows overread buffers and input data manipulation.

A heap-based buffer overflow vulnerability has been discovered in Samsung Open Source Escargot. The issue affects versions prior to commit ef525f337fafddecde77a3c426212a84bb20cb98.

A type confusion vulnerability in Samsung's Escargot JavaScript engine allows pointer manipulation. The issue affects versions prior to commit 779f6bedf58f334dec64b0a51ebb724b4708b84a.

An out-of-bounds read and write vulnerability has been discovered in Samsung Open Source Escargot, leading to buffer overflows. The issue affects versions prior to commit 779f6bedf58f334dec64b0a51ebb724b4708b84a.

A stack-based buffer overflow vulnerability has been discovered in Samsung's Escargot JavaScript engine. The issue affects versions prior to commit b30b63fc63b403907d8137da1c65aaa4521fe74e.

GNU Patch is vulnerable to a denial of service (DoS) due to improper validation of hunk line offsets in unified-diff input. A specially crafted patch can specify an extremely large line number, causing an infinite processing loop and excessive CPU consumption.

GNU patch is vulnerable to a NULL pointer dereference when processing a specially crafted unified-diff patch file. Improper handling of consecutive end-of-file newline markers can corrupt internal hunk data structures, causing the application to pass a NULL pointer to fwrite() during patch processing.

The DSGVO All in one for WP plugin for WordPress is vulnerable to Missing Authorization in all versions up to and including 4.9. The dsgvo_reset_policy_service_func() function lacks both capability checks and nonce verification while processing user-supplied parameters to reset plugin options. This allows authenticated attackers with Subscriber-level access and above to reset all customized privacy policy content including cookie notices, Google Analytics policies, Facebook policies, and YouTube policies to their default values.

The Blocks for ACF Fields plugin for WordPress up to version 1.6.2 contains a vulnerability allowing unauthorized data access. It lacks proper capability checks in the get_all_values() function at the /wp-json/acf-field-blocks/v1/values REST endpoint, enabling authenticated attackers with Author-level access or higher to read ACF field values from arbitrary posts, including private posts, drafts, and posts by other users.

A reflected XSS (Cross-Site Scripting) vulnerability has been discovered in BiEticaret by Inrove Software and Internet Services, due to improper input neutralization during page generation. The issue affects versions prior to v3.3.57.

A vulnerability in HCL DevOps Deploy / HCL Launch allows authenticated users to access sensitive configurations and secrets in API responses, which could be leveraged for further attacks against the system.

A vulnerability in HCL DevOps Deploy / HCL Launch allows sensitive information disclosure. The application stores potentially sensitive data in log files that can be read by a local user.

The vulnerability in HCL DevOps Deploy stems from improper CORS configuration that does not restrict domains to trusted ones. This allows an attacker to perform privileged actions and retrieve sensitive information.

A vulnerability in OSOS by Sayax Energy Technologies Inc. allows insertion of sensitive information into sent data, leading to authentication bypass. Affects versions through 09/07/2026. The vendor did not respond.

The Hydra Booking plugin for WordPress up to version 1.2.1 is vulnerable to Insecure Direct Object Reference (IDOR) in the REST endpoint /wp-json/hydra-booking/v1/booking/details/{id}. The getBookingDetails() function only checks the tfhb_manage_options capability without verifying that the requested booking belongs to the authenticated host, allowing attackers to access sensitive booking data of other hosts.

The Backup and Staging by WP Time Capsule plugin for WordPress up to version 1.22.26 is vulnerable to sensitive information exposure. An authenticated attacker with subscriber-level access or higher can download the most recently admin-decrypted SQL database backup, which contains password hashes, user credentials, and other sensitive site configuration data.

The Age Verification & Identity Verification by Token of Trust plugin for WordPress versions up to 4.0.2 allows unauthorized access to sensitive WooCommerce donation data. The handle_export_table() function is registered on the 'init' hook without capability checks, enabling unauthenticated attackers to download a CSV file containing donation details, order dates, order IDs, donation amounts, and admin-only order edit URLs. This is achieved by visiting any page with the 'tot_export_table' GET parameter set to a numeric value (0–3).

The Bookero.pl – system rezerwacji online plugin for WordPress up to version 2.2 contains a Stored Cross-Site Scripting vulnerability via the `hide_products` and `filter_products` attributes of the `bookero_products` shortcode. Insufficient input sanitization and output escaping in the `bookero_products()` function cause the raw attribute value to be concatenated directly into an inline `<script>` block without any escaping.

The Block, Suspend, Report for BuddyPress plugin for WordPress up to version 3.6.4 is vulnerable to Stored Cross-Site Scripting via the 'link' parameter due to insufficient input sanitization and output escaping.