CVE Vulnerability Catalog

The Ad Inserter – Ad Manager & AdSense Ads plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.8.16 due to a missing capability check in the `ai_ajax` function. This makes it possible for unauthenticated attackers to view the contents of ad blocks that an administrator has restricted to administrator-only visibility.

The Accelerate theme for WordPress is vulnerable to unauthorized data modification due to a missing capability check in the enqueue_scripts() function in all versions up to and including 1.5.3. This allows authenticated attackers with Subscriber-level access and above to install and activate the ThemeGrill Demo Importer plugin.

A denial-of-service vulnerability in CatchPulse could allow an attacker to conduct a stack buffer overrun attack, leading to a denial-of-service condition.

An improper access control check in CatchPulse's named pipe communication interface could allow an attacker to invoke CatchPulse functions. This is limited to operations that enforce more restrictive security policies.

Apache Polaris did not consistently validate storage locations supplied during table and view registration. An authenticated principal with registration permissions could cause Polaris to use the catalog's storage credentials to read a caller-selected Iceberg metadata file before verifying it was within allowed locations, potentially disclosing limited information. Polaris could also accept registration metadata with references to external locations, but this did not cause reads.

A vulnerability was found in OpenHands up to 0.62.0. The affected function is initialize_repo in OpenHands/resolver/send_pull_request.py, allowing command injection. Remote exploitation is possible. The vendor deleted the original GitHub issue, and the affected file was removed in version 1.7.0.

A SQL injection vulnerability was found in itsourcecode Hospital Management System 1.0 in /servicetype.php via the editid argument. The attack can be performed remotely. The exploit is public and may be used.

A vulnerability was found in poco-ai poco-agent up to 0.5.4. The affected function is WorkspaceManager._setup_session_persistence in executor/app/core/workspace.py of the Claude File Handler component. The issue is incomplete cleanup. The attack can be performed remotely but is highly complex and difficult to exploit. The exploit is public.

A vulnerability was found in TinyAGI 0.0.20 in the buildSystemPrompt function of packages/server/src/routes/agents.ts, allowing file inclusion. The attack can be initiated remotely. The exploit is public. The project was informed but has not responded.

A vulnerability was found in mf-yang openclaw-cn up to 0.2.1 in the assertNoSymlinkEscape function of src/agents/sandbox-paths.ts, in the apply_patch Tool component. The issue is link following. The attack can be launched remotely. The exploit is public. The project was informed but has not responded.

A vulnerability in eta-otp-lock before 1.0.4 allows invocation of a process using visible sensitive information, enabling system footprinting.

When a proxy server is configured with customUrl.enabled, the component accepts user-supplied input within forwarded HTTP headers without enforcing expected validation constraints. A malicious actor can manipulate these headers to influence the URL construction process, leading to an open redirect vulnerability. Additionally, unsanitized header values are written to application logs. An attacker can exploit this to force redirection to arbitrary malicious domains, potentially enabling phishing attacks. Furthermore, they can inject forged entries into application logs, impacting the reliability of security logs and potentially hindering incident investigation.

The system accepts authentication requests without sufficient validation to enforce tenant isolation when using Email OTP, SMS OTP, or Magic Link as first-factor authenticators. This can lead to exposure of personally identifiable information of users in different tenants.

The Ajax processor in the Carbon console fails to adequately protect state-changing operations from CSRF attacks. It uses HTTP GET, and the SameSite=Lax attribute is bypassed as it permits cookies with cross-origin top-level navigation requests. An attacker can trick an authenticated user into executing unintended actions.

When secondary user stores are configured, the implicit-association resolver incorrectly initializes from a secondary user store and bypasses the primary user store during search and uniqueness checks. This can lead to associating a subject with an unintended local account if the same lookup claim exists in both stores.

Unused authorization codes issued to deleted users are not properly invalidated or removed, allowing potential reuse. An attacker with the code and client credentials can obtain access tokens on behalf of deleted users, leading to unauthorized access.

The account locking mechanism fails when secondary user stores are inaccessible, allowing repeated authentication attempts without lockout. This leaves users in accessible stores vulnerable to brute force attacks.

The user self-signup flow in multiple WSO2 products fails to validate user-supplied input, allowing unvalidated data into user claims used by downstream processes. This can lead to various attacks like content manipulation, redirection, and data exposure.

A vulnerability in mf-yang openclaw-cn up to 0.2.1 affects the function isApprovedElevatedSender in src/auto-reply/reply/reply-elevated.ts, causing improper privilege management. Remote exploitation is possible and the exploit is public.

A vulnerability in mf-yang openclaw-cn 2026.2.5 affects an unknown part of src/agents/bash-tools.exec.ts in the Ggateway Exec Approval Flow, leading to incorrect authorization. Remote attack is possible and exploit is public.