CVE-2026-118384 is a vulnerability in GNU mtools up to version 4.0.49 involving an out-of-bounds write in the parse_vses function within the vfat.c source file. This flaw is due to a numeric range comparison without a minimum check (CWE-839). The vulnerability has a CVSS 3.1 base score of 6.1, indicating a medium severity level. It requires local access with low complexity and no privileges but user interaction is needed. The impact includes integrity loss and high availability impact, but no confidentiality impact is reported.
CVE-2026-118274 is a medium severity vulnerability in the a2ui-project a2ui component up to version 0.10.6. It affects an unknown functionality within the Binder component's generic-binder.ts file, leading to resource consumption. The vulnerability can be exploited remotely without user interaction and requires low privileges. A patch identified by commit c97f4a02d3fea33ce3e9de5cf3fd0e3b8f3a4f0e is available to fix the issue.
CVE-2026-118273 is a medium severity vulnerability in a2ui-project's a2ui component up to version 0.10.6. The flaw exists in the DataModel.set function of the file renderers/web_core/src/v0_9/state/data-model.ts and can be exploited remotely to cause resource consumption. Exploit code has been published. A patch identified by commit 82789191ce551f4d7a095d273773fb24bd764c9d is available to remediate this issue.
The AI Engine – MCP Server & AI Chatbot for WordPress plugin (versions up to and including 3.8.4) contains a path traversal vulnerability in the upload_file function. Authenticated users with subscriber-level access or higher can exploit this flaw to delete arbitrary media files on the server. Exploitation requires the Public API option to be enabled by an administrator and depends on the hourly cleanup_files task running after a malicious upload. The vulnerability has a medium severity rating with a CVSS score of 4.2.
The All-in-One Video Gallery plugin for WordPress versions up to 4.9.7 contains a stored cross-site scripting (XSS) vulnerability via the 'custom_fields[embedcode]' parameter. Authenticated users with subscriber-level access or higher can exploit this flaw by injecting malicious scripts that execute when other users view the affected pages. The vulnerability arises from insufficient input sanitization and output escaping, combined with a logic flaw in the save_meta_data() handler and overly permissive capabilities granted to subscribers. A patch is available to address this issue.
The affiliate-toolkit – Multi-Network Affiliate & Amazon Product Display WordPress plugin is vulnerable to a stored Cross-Site Scripting (XSS) flaw via the 'atkp_product_producturl' parameter in versions up to and including 3.9.2. This vulnerability arises from insufficient input sanitization and output escaping, allowing unauthenticated attackers to inject malicious scripts that execute when users view the affected pages. Exploitation requires the plugin's AJAX loading or AJAX handler option to be enabled, or contributor-level access if these are not enabled by default.
The AMP for WP – Accelerated Mobile Pages WordPress plugin is vulnerable to stored cross-site scripting (XSS) via the 'headline-*' shortcode attribute in all versions up to 1.1.17. This vulnerability arises from insufficient input sanitization and output escaping, allowing unauthenticated attackers to inject malicious scripts that execute when users access affected pages. The issue is exacerbated by WordPress core's filtering which does not remove shortcode syntax from subscriber biographical info fields, and the AMP content sanitizers running before shortcode processing, leaving the injected markup unsanitized.
The AI Marketing Expert WordPress plugin up to version 1.2.8 contains a stored DOM-based cross-site scripting (XSS) vulnerability via the 'name' parameter. This flaw allows unauthenticated attackers to inject malicious scripts that execute in the context of administrators accessing the injected page. Exploitation requires the chatbot module to be active with at least one configured bot. The vulnerability arises from insufficient input sanitization and output escaping.
The All-in-One Video Gallery plugin for WordPress versions up to 4.9.7 contains a stored cross-site scripting (XSS) vulnerability via the 'more_link' parameter. Authenticated users with contributor-level access or higher can inject malicious scripts that execute when other users view the affected pages. This vulnerability arises from insufficient input sanitization and output escaping.
Pie Register Premium WordPress plugin versions up to 3.8.4.0 suffer from an unrestricted file upload vulnerability. The plugin fails to properly verify file type validation results before saving uploaded files, and lacks nonce or capability checks on the AJAX upload handler. This allows unauthenticated attackers to upload dangerous file types such as executable PHP scripts, enabling potential remote code execution. The server response reveals the uploaded file's path, facilitating exploitation.
A stored cross-site scripting (XSS) vulnerability exists in the Ultimate Member WordPress plugin up to version 2.14.0. The flaw is due to insufficient sanitization and escaping of the 'user_url' parameter, allowing authenticated users with subscriber-level access or higher to inject malicious scripts. These scripts execute when other users visit the affected profile pages and click the attacker's Website URL link, which is enabled by default.
GROWI versions 7.0.0 through 8.0.6 have a missing authorization check vulnerability in the collaborative editing feature. This flaw allows users with read-only permissions, including guest users or users with pending, suspended, or invited status, to modify page drafts. The vulnerability has a medium severity rating with a CVSS score of 5.3.
GROWI contains an authorization bypass vulnerability in its tag update and page update APIs. This flaw arises from improper use of a user-controlled key, allowing authenticated attackers to access page contents without having the required read permissions and save them to pages they can edit. The vulnerability affects versions from 4.5.5 through 8.0.6. The CVSS score is 4.2, indicating medium severity.
GROWI contains an authorization bypass vulnerability in its page viewing and commenting functionality. This flaw arises from improper use of a user-controlled key, allowing an authenticated attacker to access page contents and comments without having the necessary read permissions. The vulnerability affects versions from 3.2.10 through 8.0.6. The CVSS score is 4.2, indicating a medium severity level.
The glyphmatrix-fixture npm package versions 1.0.0 and 1.0.1 contain malicious code that compromises any computer on which it is installed or running. The compromise is severe enough that all secrets and keys stored on the affected machine should be rotated immediately from a different, secure computer. Removal of the package alone may not eliminate the malicious software, as the attacker may have gained full control of the system.
Tabularis versions before 0.28.0 have an SQL injection vulnerability in the SQLite driver. This flaw allows malicious clients to execute multiple SQL statements by manipulating the table_name parameter in the describe_table tool. Exploitation can bypass read-only restrictions and write approvals, enabling unauthorized reading, modification, or deletion of SQLite data. The vulnerability is fixed in version 0.28.0.
mews/pos versions up to 2.0.0 have a vulnerability where unauthenticated attackers can forge payment results by submitting unverified callbacks. Specific payment handlers skip critical verification checks, allowing attackers to manipulate order completion without actual payment.
Tencent WeKnora versions from 0.2.11 up to but not including 0.8.2 contain a server-side request forgery (SSRF) vulnerability in the isRestrictedIP() function. This flaw misclassifies NAT64-prefixed IPv6 addresses as public, allowing authenticated attackers to supply URLs that resolve to internal network addresses or cloud metadata endpoints. The vulnerability is fixed in version 0.8.2.
An out-of-bounds write vulnerability exists in llama.cpp versions before b11865 in the ggml-rpc RDMA transport's rdma_recv() function. This flaw allows unauthenticated peers advertising RDMA capabilities to overflow a 1-byte stack variable by sending up to 256 KiB of data, potentially crashing the server or enabling code execution.