CVE Vulnerability Catalog

The Quiz and Survey Master (QSM) WordPress plugin before version 11.1.3 does not implement rate limiting or standard failed-login auditing on its front-end credential-check functionality. It returns distinct responses for valid and invalid accounts, allowing unauthenticated attackers to enumerate valid usernames and brute-force passwords while bypassing brute-force protection.

The User Frontend: AI Powered Frontend Post Submission, User Directory, User Profile, Membership & User Registration WordPress plugin before version 4.3.8 does not correctly verify ownership before deleting an attachment. Unauthenticated attackers can permanently delete author-less attachments such as guest uploads or plugin-installed placeholder media.

The Contact Form 7 WordPress plugin before version 2.5 does not validate the host of a user-supplied return URL before using it as the success and cancel redirect targets of a Stripe checkout. An unauthenticated attacker can redirect a victim, via a crafted link, to an arbitrary external site after the checkout flow.

The Smart Manager WordPress plugin before version 8.92.0 does not properly encode a post field before rendering it into an HTML attribute in its management grid. Users with the Contributor role or above can inject JavaScript that executes in the browser session of an administrator who views the grid.

The Sina Extension for Elementor WordPress plugin before version 3.10.2 does not escape a value reconstructed from request input in one of its unauthenticated AJAX handlers before reflecting it into the HTML response. Unauthenticated attackers can execute arbitrary JavaScript in the browser of anyone who triggers a crafted request.

Simply Schedule Appointments is vulnerable to unauthenticated Stored Cross-Site Scripting in all versions up to and including 1.6.12.2. The root cause is a sanitization-ordering defect: the rendered notification content is decoded back into live HTML after it has already passed through the Simply Schedule Appointments WordPress plugin before 1.6.12.4's wp_kses_post() filter, so a double-encoded payload survives intake and is reintroduced as an executable element at render time.

The Events Calendar WordPress plugin before 6.16.5.1 does not perform an authorization check on one of its Event Aggregator import REST API routes and skips an integrity check for a particular status value, allowing unauthenticated attackers to mark existing import records as failed and to store arbitrary content in a hidden comment record.

The Document Gallery WordPress plugin before 5.1.1 does not properly sanitise and escape user input before reflecting it back in the response of an unauthenticated AJAX action, leading to a Reflected Cross-Site Scripting vulnerability which can be exploited against unauthenticated users.

The Advanced Ads WordPress plugin before version 2.0.23 does not sanitize and escape a shortcode parameter before outputting it in the page. This allows users with the Contributor role and above to inject arbitrary web scripts that execute when the affected content is viewed, including by higher-privileged users.

A flaw was found in ggml-org llama.cpp (commit e15efe0) in the transform function of common/json-schema-to-grammar.cpp, causing uncontrolled recursion during JSON-Schema-to-GBNF conversion. The attack can be initiated remotely.

A vulnerability was detected in ggml-org llama.cpp d006858/e15efe0. This affects the function _visit_pattern of the file common/json-schema-to-grammar.cpp. The manipulation results in null pointer dereference. The attack can be launched remotely.

Origin validation error in Microsoft Edge (Chromium-based). An unauthorized attacker can perform spoofing over a network.

A vulnerability in SparkJava up to version 2.9.4 allows symlink following via manipulation of the staticFiles.externalLocation function in ExternalResourceHandler.java. The attack can be performed remotely and the exploit has been publicly disclosed.

A vulnerability in openclaw-cn up to version 0.2.1 allows Server-Side Request Forgery (SSRF) via the clickViaPlaywright function in agent.act.ts. The attack can be performed remotely and the exploit has been publicly disclosed.

A vulnerability in openclaw-cn up to version 0.2.1 allows information disclosure via the assertBrowserNavigationAllowed function in navigation-guard.ts. Manipulation of the url argument leads to data leakage. The attack can be performed remotely and the exploit has been publicly disclosed.

In nanocoai NanoClaw up to version 2.0.64, a vulnerability was found in the handleAddMcpServer function of the file src/modules/self-mod/request.ts in the add_mcp_server component. Manipulation leads to improper authorization. The attack can be launched remotely. The exploit has been published. A patch is available with ID e5b928783d5c485637565eb07d2967922dfbf8d8.

In nanocoai NanoClaw up to version 2.0.64, a vulnerability was detected in the createChatSdkBridge.setup function of the file src/channels/chat-sdk-bridge.ts in the MCP Server Approval component. Manipulation results in improper authorization. The attack requires local access. The exploit is public. The project was informed but has not responded.

In NousResearch hermes-agent version 2026.6.5, a vulnerability was detected in an unknown functionality of the file hermes-agent/plugins/platforms/simplex/adapter.py in the SimpleX Gateway Authorization component. Manipulation of the contactId argument results in improper access controls. The attack can be launched remotely but is difficult to exploit (high complexity). The exploit is public. A patch is available with ID 490c486ff65b766d9de0fe0e6f26e1778aaa8fb3.

In Zephyr's userspace dynamic-objects subsystem, thread_idx_alloc() allocates a thread permission index from the global _thread_idx_map[] bitmap without holding lists_lock. On SMP systems, two user threads concurrently calling k_object_alloc(K_OBJ_THREAD) can observe the same free bit, perform the same non-atomic RMW, and return the identical tidx.

A NULL pointer dereference vulnerability was found in the func_set_flag() function in the Linux kernel tracing subsystem. When the active tracer is switched from 'function' to another (e.g., 'wakeup_rt'), the current_trace_flags field becomes NULL, and the function reads it before verifying the tracer type, causing a kernel crash.