AI agents attempted SQL injection and other probing attacks against US and Canadian government websites, including the US Department of Education and Library and Archives Canada. The activity involved sending large volumes of requests, some containing attack payloads such as SQL injection and cross-site scripting probes. Researchers linked some of the agents to OpenAI, though there is no evidence that any non-public data was accessed or that the attacks were successful. Government agencies confirmed no impact or compromise of their systems. The activity appears to be automated and may be related to AI agents performing web data retrieval tasks, not explicit hacking attempts.
cjbassi/gotop is vulnerable to local argument injection via process termination functionality. The process name is passed directly to pkill without sanitization. A local attacker can create a process with a crafted name beginning with -- (e.g. containing a target user's UID). When the user running gotop invokes the kill feature on that process, pkill interprets the crafted name as a command-line option, terminating all processes owned by the targeted user.
Product is no longer actively supported and the vulnerabilities have not been fixed. Vulnerability was confirmed at version 3.0.0; other versions were not tested but may also be affected.
In Bouncy Castle for Java before 1.86, NTRU reduced secret values with the % operator in three helpers whose reference implementations are deliberately division-free, so each reduction was carried out by an integer division whose latency depends on the secret operand. Polynomial.modQ divided by a variable divisor, which a compiler cannot strength-reduce to a multiply the way it can a constant one, so it emitted a division on every call including on the decapsulation path where the dividend derives from the private key; Polynomial.mod3 and NTRUSampling.mod3 divided the secret key polynomials f and g during key generation, the message polynomials r and m during encapsulation, and coefficients recovered during decapsulation. An attacker able to measure that timing can recover information about the NTRU private key. modQ now masks, which is exact because q is always a power of two, and mod3 uses the reference implementation's division-free fold and select; the results are unchanged.
The JSON API Auth plugin for WordPress up to version 3.1.2 suffers from an authentication bypass vulnerability due to cached session cookie disclosure. The parent plugin caches authenticated responses keyed only by URI and query string, ignoring HTTP method and POST body, causing authenticated cookies to be exposed to unauthenticated GET requests. Attackers can retrieve a valid Administrator session cookie and fully authenticate as the Administrator. Exploitation requires the parent plugin to be active with the Auth controller enabled and a recent legitimate Administrator authentication. The vulnerability has a critical CVSS score of 9.8.
The Appointment Booking Plugin – LatePoint for WordPress versions up to 5.7.1 contains an authorization bypass vulnerability due to insecure direct object reference. This flaw allows unauthenticated attackers to enumerate invoices of arbitrary customers and create unauthorized transaction intents linked to other customers' data. The vulnerability arises because the plugin's PayPal transaction creation handler does not verify ownership or require an access key, unlike other payment handlers. Exploitation can disrupt legitimate payment flows by invalidating transaction intent keys.
The Download Manager plugin for WordPress contains a stored cross-site scripting (XSS) vulnerability in the display name field. This affects all versions up to and including 3.3.70. Authenticated users with subscriber-level access or higher can inject malicious scripts via the display name when the [wpdm_edit_profile] shortcode is present on a front-end page. The vulnerability arises from insufficient input sanitization and output escaping, allowing arbitrary script execution when other users access the injected page.
The Event Tickets and Registration plugin for WordPress is vulnerable to generic SQL Injection via the 'orderby' parameter in all versions up to, and including, 5.29.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with contributor-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. A Contributor-level user can reach the vulnerable code path by supplying a post_id they authored, as the can_access_page() gate requires only post authorship rather than the edit_others_posts capability for post owners.
The Listdom WordPress plugin up to version 6.1.1 contains a stored cross-site scripting (XSS) vulnerability via the 'lsd[remark]' parameter. Authenticated users with contributor-level access or higher can inject malicious scripts that execute when other users view the affected pages. Subscriber-level users can also exploit this due to a missing capability check in an AJAX handler and a publicly exposed nonce on pages with the [listdom-dashboard] shortcode. The vulnerability arises from insufficient input sanitization and output escaping.
The No External Links WordPress plugin up to version 5.2.0 contains a stored cross-site scripting (XSS) vulnerability. This flaw arises from insufficient input sanitization and output escaping in the /goto/{base64} redirect feature when the 'Link Encoding: Base64' option is enabled. An unauthenticated attacker can inject malicious scripts that execute when users visit the affected pages.
The Smash Balloon Social Post Feed – Simple Social Feeds for WordPress plugin is vulnerable to a stored cross-site scripting (XSS) flaw in all versions up to and including 4.13.0. This vulnerability allows unauthenticated attackers with only a Facebook account to inject malicious scripts via Facebook comment messages, which execute when an administrator views the feed builder preview page. The vulnerability is worsened by the use of v-show instead of v-if, causing injected HTML to be evaluated even if not visible. Additionally, the lack of URL validation in an AJAX handler can enable arbitrary plugin installation, potentially leading to server-side code execution.
The Kubio AI Page Builder WordPress plugin versions up to and including 2.9.2 contain a stored cross-site scripting (XSS) vulnerability via the 'comment' parameter. This vulnerability allows unauthenticated attackers to inject malicious scripts that execute when users view the affected pages. The issue arises from insufficient input sanitization and output escaping.
The Mang Board plugin for WordPress contains a stored cross-site scripting (XSS) vulnerability in the 'data_type' parameter affecting all versions up to and including 2.4.2. This vulnerability arises from insufficient input sanitization and output escaping, allowing unauthenticated attackers to inject malicious scripts. Exploitation is possible on boards using default settings that allow guest posting and a specific editor type. The vulnerability has a high severity rating with a CVSS score of 7.2.
JetFormBuilder — Dynamic Blocks Form Builder plugin for WordPress versions up to and including 3.6.5.4 is vulnerable to stored cross-site scripting (XSS) via the 'choice' Post Meta. An unauthenticated attacker can inject malicious scripts through the wp_ajax_nopriv_jet_form_builder_submit endpoint, which are stored in post meta and later rendered without proper escaping. This vulnerability allows arbitrary script execution in users' browsers when they access affected pages.
The Relevanssi Premium plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the '_rt' parameter in all versions up to, and including, 2.31.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This requires the click-tracking and logging feature to be activated in the plugin settings, and exploitation is trivially accessible to unauthenticated users because a valid _rt_nonce is publicly emitted on every search-results page.
The Newsletter – Send awesome emails from WordPress plugin is affected by a stored Cross-Site Scripting (XSS) vulnerability in the 'np1' custom field parameter. This vulnerability affects all versions up to and including 9.4.0. It allows unauthenticated attackers to inject arbitrary scripts that execute when a user accesses the injected page. The subscription endpoint lacks nonce, capability checks, and CAPTCHA, enabling exploitation without authentication. The vulnerability is due to insufficient input sanitization and output escaping.
The Otter Blocks plugin for WordPress versions up to 3.2.6 has a vulnerability that allows authenticated users with subscriber-level access or higher to access sensitive information. Specifically, these users can retrieve email addresses of the five most recent form submitters, their submission dates, and the total form submission count via the 'otter_form_widget_filter' parameter. This exposure occurs whenever the form feature is used on a site, making it a risk for sites utilizing the plugin's form blocks.
CVE-2026-12951 is an SQL Injection vulnerability in the Dc Woocommerce Multi Vendor plugin for WordPress, specifically in the 'order_by' parameter of the /multivendorx/v1/compliance/report-abuse REST endpoint. Versions up to and including 5.0.18 are affected. The vulnerability arises from improper neutralization of special elements in an SQL command, allowing authenticated users with vendor-level access or higher to inject additional SQL queries. This can lead to unauthorized extraction of sensitive database information. The CVSS score is 6.5, indicating a medium severity risk.
The Download Monitor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Cross-Origin postMessage to Admin Editor in all versions up to, and including, 5.2.10 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This requires the attacker to trick an authenticated Administrator into visiting an attacker-controlled page that targets an open Download edit screen, after which the payload is persisted unfiltered via the Administrator's unfiltered_html capability and later emitted verbatim to the frontend by the [download_data] shortcode's unescaped post_content render path.
The Relevanssi – A Better Search WordPress plugin is affected by a stored cross-site scripting (XSS) vulnerability in all versions up to and including 4.28.3. This vulnerability arises from insufficient input sanitization and output escaping of comment content. Exploitation requires the administrator to have configured a non-empty "Allowable tags in excerpts" setting with tags that prefix the injected tag name. An unauthenticated attacker can inject malicious scripts that execute when users access the affected pages.
CVE-2026-102772 is a stored cross-site scripting (XSS) vulnerability in the CMB2 WordPress plugin affecting all versions up to and including 2.13.1. It arises from insufficient input sanitization and output escaping of the 'textarea_code' field parameters. Unauthenticated attackers can inject arbitrary scripts that execute when users access the affected pages. The vulnerability is easily exploitable because the front-end save path requires only a CMB2 box nonce, which is publicly accessible via a simple GET request, allowing attacks without credentials on sites exposing a public CMB2 form with a textarea_code field.