CVE Vulnerability Catalog

A vulnerability in nanocoai NanoClaw up to 2.0.64 affects the function handleCreateAgent in src/modules/agent-to-agent/create-agent.ts, causing improper privilege management. Remote exploitation is possible and exploit is public.

In the SAML broker component of Keycloak, when configured with IdP-Initiated flow, the OneTimeUse condition in SAML assertions is not enforced. This allows an attacker who captures a valid, unused assertion to replay it multiple times, potentially hijacking a user's session.

The Slider, Gallery, and Carousel by MetaSlider plugin for WordPress up to version 3.111.0 is vulnerable to Stored Cross-Site Scripting via the 'delay' Post Meta Setting due to insufficient input sanitization and output escaping. Authenticated attackers with custom-level access and above can inject arbitrary web scripts that execute when a user accesses an injected page.

The Child Pages Card WordPress plugin before version 1.09 does not sanitize and escape some of its shortcode attributes before outputting them back in a page, allowing users with the contributor role and above to perform Stored Cross-Site Scripting attacks.

The AI Engine WordPress plugin before version 3.6.4 does not redact secret configuration values before exposing them in an admin page's inline script data, allowing users with the Editor role to read the site's stored third-party API key and authentication tokens in cleartext, despite those secrets being restricted to administrators everywhere else.

The Slick Slider WordPress plugin before version 0.5.3 does not sanitize and escape a shortcode attribute value before outputting it in an HTML attribute, allowing users with the Contributor role and above to perform Stored Cross-Site Scripting attacks that execute when a user views the affected post.

The ProfileGrid WordPress plugin before version 6.0.0.0 does not perform authorization checks before returning a group's member list, and registers the handler for unauthenticated users, allowing any unauthenticated visitor to disclose the members and their identifiers of any group, including private or closed ones, bypassing the plugin's member-visibility setting.

The Welcart e-Commerce WordPress plugin before 2.11.32 does not properly sanitise a value taken from an imported CSV file before using it in a SQL statement. Users with the Editor role and above (including custom shop-management roles) can perform SQL injection attacks.

The Estatik Real Estate Plugin WordPress plugin before 4.3.3 does not properly enforce its anti-spam check or restrict the recipient routing of its property request form. This allows unauthenticated users to send emails to arbitrary recipients with arbitrary subject, body and Reply-To, effectively using the site as a mail relay for spam or phishing.

The PeproDev WooCommerce Receipt Uploader WordPress plugin through 2.8.0 does not verify that a requested attachment belongs to the order referenced by its access token. This allows unauthenticated attackers to forge a token and disclose image attachments, including other customers' uploaded payment receipts, that they do not own.

PeproDev WooCommerce Receipt Uploader WordPress plugin (slug: pepro-bacs-receipt-upload-for-woocommerce), all versions up to and including 2.8.0, is vulnerable to unauthenticated missing-authorization / IDOR write. Requires WooCommerce.

The tourmaster WordPress plugin before 5.4.9 writes its order/booking export to a fixed, predictable file inside its publicly accessible directory with no access control. This allows unauthenticated users to download the exported customers' personal information once an administrator has run an export.

The Google Authenticator WordPress plugin before 0.56 does not verify a CSRF nonce when saving its two-factor setup. This allows attackers to trick a logged-in user into overwriting their own 2FA secret with an attacker-controlled value, which enables two-factor authentication and locks the victim out of their account.

The SEO Redirection Plugin WordPress plugin before 9.19 does not perform a capability check in one of its authenticated AJAX actions. This allows any logged-in user such as a subscriber to read the site's configured 301 redirect rules, including their source and destination URLs.

The EONSR AEO Agent WordPress plugin through version 3.7.9 does not perform any authorisation check on one of its REST API routes and disables HTML sanitisation before saving the post. This allows unauthenticated attackers to create administrator-attributed published posts containing arbitrary web scripts that execute in the browser of any visitor, including administrators (Stored XSS).

The Nexter Blocks WordPress plugin before version 5.0.2 does not sanitize uploaded SVG files and allows SVG uploads for any user able to upload files (Author by default). This allows them to upload a file containing malicious JavaScript that executes when the file is accessed, leading to Stored Cross-Site Scripting.

A vulnerability in cosmicstack-labs mercury-agent up to 1.1.12 affects the function SubAgent.run in src/core/sub-agent.ts, causing improper authorization. Remote attack is possible and exploit is public.

A vulnerability in cosmicstack-labs mercury-agent up to 1.1.12 affects the function Agent.handleBgCommand in src/core/agent.ts, causing incorrect authorization. Remote attack is possible and exploit is public.

A vulnerability has been found in cosmicstack-labs mercury-agent up to 1.1.12, affecting the function PermissionManager.checkShellCommand in the file src/capabilities/permissions.ts in the run_command Handler component. Such manipulation leads to incorrect privilege assignment. The attack may be performed remotely, and the exploit has been publicly disclosed.

A flaw has been found in netease-youdao LobsterAI 2026.6.10, affecting the function parseMediaTokensFromText in the file src/renderer/services/artifactParser.ts in the MEDIA Path Handler component. This manipulation causes information disclosure. The attack is possible to be carried out remotely, and the exploit has been published.