CVE Vulnerability Catalog

The rognone plugin for WordPress up to version 0.6.2 is vulnerable to Reflected Cross-Site Scripting (XSS) via the 'a' parameter due to insufficient input sanitization and output escaping. An unauthenticated attacker can inject arbitrary scripts that execute when a user clicks a link.

The rognone plugin for WordPress up to version 0.6.2 is vulnerable to Reflected Cross-Site Scripting via the 'mode' parameter. Insufficient input sanitization and output escaping allow unauthenticated attackers to inject arbitrary scripts that execute when a victim clicks a link.

The WP Nano AD plugin for WordPress up to version 1.31 is vulnerable to Stored Cross-Site Scripting via the 'blogrole_link' parameter. Insufficient input sanitization and output escaping allow authenticated attackers with administrator-level access to inject scripts that execute on every page visit. This affects only multi-site installations and installations where unfiltered_html is disabled.

MLflow 3.9.0 with basic-auth enabled fails to enforce authorization for Gateway API endpoints: ListGatewaySecretInfos, ListGatewayEndpoints, and ListGatewayModelDefinitions. Any authenticated user, regardless of permissions, can enumerate all gateway secrets, endpoint configurations, and model definitions.

A security vulnerability has been detected in nextlevelbuilder GoClaw up to 3.11.3. The Import function in internal/http/tts_config.go of the TTS Configuration Endpoint component leads to server-side request forgery. The exploit has been disclosed publicly.

A Server-Side Request Forgery (SSRF) vulnerability was found in DedeCMS 5.7.88 in the file /plus/download.php?open=1. The base64_decode function manipulates the Link argument, allowing a remote attacker to send requests from the server to internal resources. The exploit is publicly available.

A buffer overflow vulnerability in the UPnP DeletePortMapping() command in Zyxel VMG4005-B50B firmware versions through 5.13(ABRL.5.4)C0 could allow an adjacent attacker to trigger a temporary denial-of-service (DoS) condition affecting the UPnP function of the affected device.

A buffer overflow vulnerability in the UPnP AddPortMapping() command in Zyxel VMG4005-B50B firmware versions through 5.13(ABRL.5.4)C0 could allow an adjacent attacker to trigger a temporary denial-of-service (DoS) condition affecting the UPnP function of the affected device.

The Auto Image Attributes From Filename With Bulk Updater plugin for WordPress up to version 4.9 is vulnerable to Stored XSS via attachment metadata. Attackers with Author-level access can inject arbitrary scripts that execute when a page is visited.

A SQL Injection vulnerability was found in itsourcecode Fees Management System 1.0 in the /manage_payment.php file. Manipulation of the ID argument allows remote SQL injection. The exploit is publicly available.

In MetaGPT up to version 0.8.2, the function Message.check_instruct_content in metagpt/schema.py is vulnerable to deserialization via manipulation of the mapping argument. The attack requires local access.

The AI Assistant Lifestyle application (com.transsion.aiassistantlifestyle) on Android has an XSS vulnerability in the GeniexWebView component. A remote attacker can execute arbitrary JavaScript in the WebView context via a crafted web_action_data URL parameter.

The Simple Custom Login Page plugin for WordPress up to version 1.0.3 is vulnerable to Stored XSS via color settings fields. Attackers with administrator access can inject arbitrary CSS rules that are rendered on the login page for all unauthenticated users, enabling UI-redress and phishing attacks.

A flaw has been found in SourceCodester Pizzafy Ecommerce System 1.0. An unknown function in /index.php allows remote file inclusion via the page argument. The exploit has been published.

A vulnerability was detected in SourceCodester Pizzafy Ecommerce System 1.0. An unknown function in /admin/index.php allows remote file inclusion via the page argument. The exploit is now public.

In eladmin up to version 2.7, a command injection vulnerability was found in the Application Deployment Module via the uploadPath argument in App.java. The attack is remotely exploitable. The exploit is public, and the project has not responded.

NousResearch hermes-agent up to version 2026.4.23 has a vulnerability in the _sync_anthropic_entry_from_credentials_file function in agent/credential_pool.py, leading to improper authentication. The attack requires local access.

The Slider Revolution plugin for WordPress versions 6.0.0-6.7.55 and 7.0.0-7.0.14 is vulnerable to unauthorized data modification. Lack of permission verification allows authenticated attackers with Contributor-level access or higher to deactivate any active plugin on the site.

The Slider Revolution plugin for WordPress versions 7.0.0 – 7.0.14 exposes sensitive data via the 'slider.get.full' AJAX action. Authenticated attackers with Contributor-level access or higher can extract raw social media API credentials, including Instagram OAuth token, Flickr API key, YouTube Data API key, and Facebook App ID.

A flaw was found in Fees Management System 1.0 in the file /manage_fee.php. Manipulation of the ID argument leads to SQL injection. The attack can be launched remotely, and the exploit is publicly available.