The Ivory Search – WordPress Search Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 's' parameter in all versions up to, and including, 5.5.18 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Exploitation requires that the targeted search form has the 'Highlight Search Terms' option enabled by an administrator, and that the malicious search query returns at least one post result.
The SupportCandy – AI Customer Support Ticket System & Live Chatbot Agent plugin for WordPress is vulnerable to time-based SQL Injection via the 'sort_by' parameter in all versions up to, and including, 3.5.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with custom-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. Exploitation requires the authenticated attacker to hold both a Subscriber-level (or higher) WordPress role and a SupportCandy Agent account with the 'Assign Agents' permission configured.
The SupportCandy – AI Customer Support Ticket System & Live Chatbot Agent plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'name' parameter in all versions up to, and including, 3.5.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This exploit chain requires the 'Register user if not exists' setting to be disabled, which is its default configuration.
The Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment in all versions up to, and including, 3.2.19 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Immediate persistence without moderator approval is possible when the attacker submits from an email address with at least one previously approved comment, though the widened allowlist bypasses sanitization regardless of approval status.
The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'form_id' parameter in all versions up to, and including, 2.13.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The injected payload is stored in the registering user's 'submitted' usermeta via update_user_meta() and is only triggered when an administrator opens the affected user record in the wp-admin Users modal, which inserts the unescaped output via jQuery .html().
The Beaver Builder Page Builder – Drag and Drop Website Builder plugin for WordPress is vulnerable to blind SQL Injection via 'fields[][value]' Parameter in all versions up to, and including, 2.11.0.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with contributor-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. The vulnerable get_autosuggest_values AJAX endpoint is reachable by any Contributor who owns a draft post, as the required fl_ajax_update nonce is emitted into the block editor for any user who can edit a Beaver Builder post type.
ImageMagick versions prior to 7.1.2-32 and 6.9.13-57 contain a policy bypass vulnerability in the LoadPolicyCache function. This vulnerability arises when the policy.xml file uses an alternate DOCTYPE, causing the parser to skip applying security policy rules. This allows restricted operations to be performed that should otherwise be blocked. The vulnerability has a medium severity rating with a CVSS score of 4.2.
OpenAPV versions before 1.1.1.0 contain a heap-based buffer overflow vulnerability caused by an integer overflow or wraparound (CWE-190). This vulnerability can lead to memory corruption when reading bitstreams. The issue has a medium severity with a CVSS 4.0 base score of 5.1. No official patch or remediation details are provided in the available data.
ConvertX versions before 0.19.0 contain a critical vulnerability (CVE-2026-105080) where recipe files are not blocked and are passed directly to the Calibre ebook-convert program. This allows inclusion of functionality from untrusted control spheres via executable code in .recipe or .downloaded_recipe files.
Backdrop CMS versions prior to 1.35.1 have an information disclosure vulnerability that allows unauthenticated attackers to download configuration export archives left on the server. These archives contain the full site configuration, including sensitive settings, which can be accessed without authentication.
PeaZip versions before 11.3.0, when used in a non-default configuration, are vulnerable to OS command injection through specially crafted filenames in archives. This occurs due to improper handling of quotation characters in the filename string. The vulnerability allows an attacker to execute arbitrary OS commands with limited attack complexity but requires user interaction. No official patch information is provided in the input data.
SiYuan Agent Tools versions up to 3.8.0 contain a Server-Side Request Forgery (SSRF) vulnerability due to a DNS rebinding time-of-check to time-of-use (TOCTOU) flaw. The vulnerability arises because the SSRF protection performs a single DNS resolution at guard time but does not verify the IP address at connection time, allowing an attacker-controlled domain to bypass the check by returning a public IP initially and a private or loopback IP on connection. This enables access to internal services such as cloud instance metadata. The issue affects the AI Agent tools' http_request and web_fetch components and was patched in version 3.8.1.
SiYuan MCP's asset.upload tool allows reading arbitrary absolute file paths without workspace boundary checks, enabling an attacker who can influence the AI Agent to upload sensitive local files into the workspace. This vulnerability affects versions up to 3.8.0 and was patched in version 3.8.1. Exploitation requires user approval of a generic confirmation prompt, making the attack vector reliant on prompt injection and user interaction. The vulnerability leads to confidentiality breaches by exposing sensitive files such as SSH keys and cloud credentials via the workspace file API.
@fastify/busboy versions from 1.0.0 up to but not including 3.2.1 are vulnerable to a denial of service (DoS) caused by multipart header names that collide with JavaScript prototype properties. This leads to a TypeError and can crash the Node.js process if unhandled. The vulnerability affects any unauthenticated client able to submit multipart/form-data requests. The issue is fixed in version 3.2.1.
@fastify/busboy versions from 3.1.0 up to but not including 3.2.1 are vulnerable to a denial of service (DoS) attack. The vulnerability arises from the handling of multipart boundaries in the streaming multipart search, where a crafted boundary of exactly 252 bytes causes a CPU-bound loop that stalls the Node.js event loop. This can be triggered by an unauthenticated client with a single small request. The issue is fixed in version 3.2.1.
Praxis proxy versions prior to 0.5.2 are vulnerable to a denial-of-service condition caused by improper handling of HTTP/2 header compression (HPACK). An attacker can send crafted HTTP/2 requests that trigger excessive memory allocation on the server, leading to high memory usage and potential service disruption. This issue is due to missing default HTTP/2 options that limit resource consumption. A patch is available that sets appropriate HTTP/2 options to mitigate the memory exhaustion.
Trigger.dev version 4.5.3 and earlier versions prior to 4.5.9 have a vulnerability where debug deployment logs expose resolved environment secret values in plaintext. When running a dry-run deployment with debug logging enabled, the complete environment variables including secrets such as database connection strings and service credentials are logged unredacted. This exposure occurs even though no actual deployment takes place. The issue allows anyone with access to debug logs or terminal transcripts to recover sensitive deployment secrets.
Vibe-Trading AI version 0.1.0 through 0.1.6 contains multiple critical security vulnerabilities, including unauthenticated full API exposure and remote code execution (RCE). The primary critical issue allows unauthenticated attackers to execute arbitrary shell commands as root inside the container via the /sessions/{id}/messages endpoint due to missing authentication enforcement when API_AUTH_KEY is unset. Additional findings include authorization gaps, unauthenticated file uploads, permissive CORS configurations, and partial API key disclosure. The Docker container runs as root by default, increasing the impact of exploitation. A patch is available to address these issues.
Vibe-Trading AI contains two related path traversal vulnerabilities in its file-read tools, allowing unauthenticated users to read arbitrary files within the container's root home (/root) and application directory (/app). The safe_user_path() function incorrectly permits any path under these directories, exposing sensitive files such as SSH keys, AWS credentials, and environment variables. Additionally, the read_document() function lacks sandboxing, enabling reading of any file accessible to the FastAPI process, including critical system files like /etc/shadow. The container runs as root, exacerbating the risk. These vulnerabilities can leak sensitive file contents via error messages when the files are parsed as trade journals. A patch is available to address both issues.
Vibe trading AI contains multiple critical vulnerabilities that allow unauthenticated remote attackers to execute arbitrary shell commands as root via LLM-callable tools. The BashTool, BackgroundRunTool, and other components execute commands without filtering or validation, enabling command injection, code injection, and SSRF. These vulnerabilities are reachable from any anonymous TCP client due to an unauthenticated API endpoint and lack of operator opt-in gating. Prompt injection attacks can also trigger arbitrary command execution by embedding malicious instructions in documents processed by the LLM agent. The vulnerabilities affect versions from 0.1.0 up to but not including 0.1.7. A patch is available to remediate these issues.