A missing authorization vulnerability exists in Brainstorm Force SureForms up to version 2.13.0. This flaw allows exploitation due to incorrectly configured access control security levels, potentially enabling unauthorized actions that impact data integrity. The vulnerability has a medium severity rating with a CVSS score of 5.3 and does not affect confidentiality or availability.
A stored cross-site scripting (XSS) vulnerability exists in Brainstorm Force Spectra ultimate-addons-for-gutenberg versions up to 2.20.4. This flaw involves improper neutralization of input during web page generation, which could allow an attacker with low privileges to execute malicious scripts in the context of the affected application. The vulnerability has a CVSS score of 6.5, indicating a medium severity level.
A missing authorization vulnerability exists in David Lingren Media Library Assistant up to version 3.43. This flaw allows exploitation of incorrectly configured access control security levels, potentially permitting unauthorized access to certain functions or data. The vulnerability has a CVSS score of 4.3, indicating a medium severity level with low confidentiality impact and no integrity or availability impact.
A Cross-Site Scripting (XSS) vulnerability exists in Gemini Labs Site Reviews (up to version 8.3.6) due to improper neutralization of script-related HTML tags. This flaw allows an attacker to inject code into web pages viewed by other users. The vulnerability has a CVSS 3.1 base score of 5.3, indicating medium severity, with network attack vector, low attack complexity, no privileges or user interaction required, and limited confidentiality impact.
The wpForo Forum plugin for WordPress versions up to and including 3.2.2 is vulnerable to a time-based SQL Injection via the 'href[locale]' parameter. This vulnerability arises from insufficient escaping of user input and inadequate preparation of the SQL query. An unauthenticated attacker can exploit this flaw to append additional SQL queries, potentially extracting sensitive database information. Exploitation requires a nonce that is publicly available to unauthenticated visitors on any forum page, meaning no login or prior interaction is necessary.
A missing authorization vulnerability exists in WP ManageNinja LLC FluentBoards (fluent-boards) up to version 2.2.2. This flaw allows exploitation of incorrectly configured access control security levels, potentially leading to unauthorized actions. The vulnerability has a medium severity rating with a CVSS score of 4.3. No patch or remediation information is currently available.
The wpForo Forum plugin for WordPress versions up to and including 3.2.2 contains a vulnerability in the theme_delete function that allows authenticated users with subscriber-level access or higher to delete arbitrary files on the server. This occurs due to insufficient file path validation. Exploitation requires a specific site configuration where an administrator has created a custom wpForo secondary usergroup with a blank WordPress role and the 'mth' (Manage Themes) capability. Attackers can self-register and exploit an unguarded POST field to gain theme-management access and delete critical files, potentially leading to remote code execution.
A Cross-Site Request Forgery (CSRF) vulnerability exists in Supsystic Photo Gallery by Supsystic, affecting versions up to 1.21.6. This vulnerability allows an attacker to trick authenticated users into submitting unwanted requests, potentially leading to unauthorized actions with limited impact on confidentiality, integrity, and availability.
The WPSpeed WordPress plugin versions up to and including 2.6.10 contain a stored cross-site scripting (XSS) vulnerability. This flaw arises from improper handling of entity-encoded markup in the LightImages HTML optimizer component, allowing authenticated users with Subscriber-level access or higher to inject malicious scripts via their profile display name. When a logged-out visitor views the attacker's author archive page, the injected script executes.
The Amelia plugin for WordPress (Booking for Appointments and Events Calendar) up to version 9.9.1 contains an authorization bypass vulnerability. Authenticated users with custom-level access or higher can export complete booking records for any event, including sensitive personal and payment information, without proper authorization checks.
A stored cross-site scripting (XSS) vulnerability exists in Ditty News Ticker by Metaphor Creations, LLC, affecting versions up to 3.1.71. This vulnerability allows improper neutralization of input during web page generation, potentially enabling attackers with low privileges to execute malicious scripts in the context of other users. The vulnerability has a CVSS score of 6.5, indicating a medium severity level.
The WPJAM Basic plugin for WordPress versions up to and including 7.1 contains a privilege escalation vulnerability. This flaw allows unauthenticated attackers to create new users with arbitrary roles, including Administrator, by exploiting an AJAX endpoint that improperly merges attacker-supplied data. The vulnerability arises from the WPJAM_User_Signup::signup() function merging untrusted input into user creation parameters without sufficient validation. This issue requires that a social-login provider is registered and open registration is enabled.
A stored cross-site scripting (XSS) vulnerability exists in bPlugins Flash & HTML5 Video html5-video-player up to version 2.14.1. This vulnerability is due to improper neutralization of input during web page generation, allowing attackers to inject malicious scripts that can be executed in the context of the affected web application.
A Cross-Site Scripting (XSS) vulnerability exists in ProfilePress wp-user-avatar plugin versions up to 4.17.7 due to improper neutralization of script-related HTML tags. This vulnerability allows code injection via crafted input. The issue is classified as CWE-80 and has a CVSS 3.1 base score of 4.3, indicating medium severity.
A vulnerability in WPVibes Elementor Addon Elements (addon-elements-for-elementor-page-builder) allows insertion of sensitive information into sent data, potentially exposing embedded sensitive data. This affects versions up to and including 1.15. The vulnerability has a CVSS score of 5.3, indicating medium severity, with no known exploits in the wild and no official patch information provided.
The wpForo Forum plugin for WordPress contains a privilege escalation vulnerability in all versions up to and including 3.2.2. This flaw allows authenticated users with Subscriber-level access and at least three approved posts to escalate their privileges to Administrator by exploiting a type-confusion issue in the handling of the secondary_groupids parameter. The vulnerability enables attackers to gain full administrative control over forum access and user content editing.
The Amelia WordPress plugin versions up to and including 9.9.1 have a vulnerability that allows unauthorized access to attendee data. This is due to a missing authorization check in the GetEventAttendeesCommandHandler::handle() function, which only verifies a broad capability that lower-privileged roles possess. As a result, authenticated users with wpamelia-customer-level access or higher can export sensitive attendee information for any event by supplying an arbitrary event ID to the relevant endpoint.
CVE-2026-123477 is a stored cross-site scripting (XSS) vulnerability in Crocoblock JetEngine versions before 3.9.1. It arises from improper neutralization of input during web page generation, allowing attackers with limited privileges to inject malicious scripts. The vulnerability affects JetEngine versions from initial releases up to 3.9.0.2 and has been assigned a medium severity rating with a CVSS score of 6.5. A fix is available in version 3.9.1.
CVE-2026-123963 is a medium severity vulnerability in OpenBMB Internet of Agents affecting the register function in the Agent Registry component. It involves missing authentication due to improper handling of the desc/name argument, allowing remote attackers to exploit the flaw. The product lacks versioning, so affected versions cannot be precisely identified. The vulnerability has been publicly disclosed with exploit code available, but no vendor response or patch has been issued yet.
Active Woot Products Tables for WooCommerce. 100% FREE plugin for WordPress versions up to 2.1.5 is vulnerable to stored cross-site scripting (XSS) via the 'help_title' parameter. Authenticated users with contributor-level access or higher can inject malicious scripts that execute when other users view the affected pages.