A resource consumption vulnerability exists in a2ui-project a2ui up to version 0.10.6 in the data-context Resolver component. The issue affects the file renderers/web_core/src/v0_9/rendering/data-context.ts and can be exploited remotely without user interaction. The vulnerability has a medium severity with a CVSS score of 4.3 and has been publicly disclosed. A patch identified by commit eb314e14fabd29cfb4a74e1202afc4fe2081efa2 is available to address this issue.
A vulnerability was found in a2ui-project a2ui up to 0.10.6. This affects the function DataContext.resolveSignal of the file renderers/web_core/src/v0_9/rendering/data-context.ts of the component Resolver. The manipulation results in resource consumption. The attack can be launched remotely. The exploit has been made public and could be used. The patch is identified as c76e17272e52c12c6dcf68905b1df978c39e9aa5. It is advisable to implement a patch to correct this issue.
CVE-2026-118384 is a vulnerability in GNU mtools up to version 4.0.49 involving an out-of-bounds write in the parse_vses function within the vfat.c source file. This flaw is due to a numeric range comparison without a minimum check (CWE-839). The vulnerability has a CVSS 3.1 base score of 6.1, indicating a medium severity level. It requires local access with low complexity and no privileges but user interaction is needed. The impact includes integrity loss and high availability impact, but no confidentiality impact is reported.
CVE-2026-118274 is a medium severity vulnerability in the a2ui-project a2ui component up to version 0.10.6. It affects an unknown functionality within the Binder component's generic-binder.ts file, leading to resource consumption. The vulnerability can be exploited remotely without user interaction and requires low privileges. A patch identified by commit c97f4a02d3fea33ce3e9de5cf3fd0e3b8f3a4f0e is available to fix the issue.
CVE-2026-118273 is a medium severity vulnerability in a2ui-project's a2ui component up to version 0.10.6. The flaw exists in the DataModel.set function of the file renderers/web_core/src/v0_9/state/data-model.ts and can be exploited remotely to cause resource consumption. Exploit code has been published. A patch identified by commit 82789191ce551f4d7a095d273773fb24bd764c9d is available to remediate this issue.
The AI Engine – MCP Server & AI Chatbot for WordPress plugin (versions up to and including 3.8.4) contains a path traversal vulnerability in the upload_file function. Authenticated users with subscriber-level access or higher can exploit this flaw to delete arbitrary media files on the server. Exploitation requires the Public API option to be enabled by an administrator and depends on the hourly cleanup_files task running after a malicious upload. The vulnerability has a medium severity rating with a CVSS score of 4.2.
The All-in-One Video Gallery plugin for WordPress versions up to 4.9.7 contains a stored cross-site scripting (XSS) vulnerability via the 'custom_fields[embedcode]' parameter. Authenticated users with subscriber-level access or higher can exploit this flaw by injecting malicious scripts that execute when other users view the affected pages. The vulnerability arises from insufficient input sanitization and output escaping, combined with a logic flaw in the save_meta_data() handler and overly permissive capabilities granted to subscribers. A patch is available to address this issue.
The affiliate-toolkit – Multi-Network Affiliate & Amazon Product Display WordPress plugin is vulnerable to a stored Cross-Site Scripting (XSS) flaw via the 'atkp_product_producturl' parameter in versions up to and including 3.9.2. This vulnerability arises from insufficient input sanitization and output escaping, allowing unauthenticated attackers to inject malicious scripts that execute when users view the affected pages. Exploitation requires the plugin's AJAX loading or AJAX handler option to be enabled, or contributor-level access if these are not enabled by default.
The AMP for WP – Accelerated Mobile Pages WordPress plugin is vulnerable to stored cross-site scripting (XSS) via the 'headline-*' shortcode attribute in all versions up to 1.1.17. This vulnerability arises from insufficient input sanitization and output escaping, allowing unauthenticated attackers to inject malicious scripts that execute when users access affected pages. The issue is exacerbated by WordPress core's filtering which does not remove shortcode syntax from subscriber biographical info fields, and the AMP content sanitizers running before shortcode processing, leaving the injected markup unsanitized.
The AI Marketing Expert — AI Email Marketing, AI Content Generator, SEO Analyzer, AI Workflow Automation, Social Media & Ai Chatbot plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the 'name' parameter in all versions up to, and including, 1.2.8 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Exploitation requires only that the chatbot module is active with at least one configured bot; the attacker stores the payload via three unauthenticated REST calls, and the JavaScript widget auto-poll then delivers it to any administrator who opens wp-admin/index.php.
The All-in-One Video Gallery plugin for WordPress versions up to 4.9.7 contains a stored cross-site scripting (XSS) vulnerability via the 'more_link' parameter. Authenticated users with contributor-level access or higher can inject malicious scripts that execute when other users view the affected pages. This vulnerability arises from insufficient input sanitization and output escaping.
Pie Register Premium WordPress plugin versions up to 3.8.4.0 suffer from an unrestricted file upload vulnerability. The plugin fails to properly verify file type validation results before saving uploaded files, and lacks nonce or capability checks on the AJAX upload handler. This allows unauthenticated attackers to upload dangerous file types such as executable PHP scripts, enabling potential remote code execution. The server response reveals the uploaded file's path, facilitating exploitation.
The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'user_url' parameter in all versions up to, and including, 2.14.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Successful exploitation requires a visitor to click the attacker's Website URL link on their public Ultimate Member profile, a condition that is trivially met since the redirect-confirmation onclick handler is enabled by default on all new installations.
GROWI versions 7.0.0 through 8.0.6 have a missing authorization check vulnerability in the collaborative editing feature. This flaw allows users with read-only permissions, including guest users or users with pending, suspended, or invited status, to modify page drafts. The vulnerability has a medium severity rating with a CVSS score of 5.3.
GROWI contains an authorization bypass vulnerability in its tag update and page update APIs. This flaw arises from improper use of a user-controlled key, allowing authenticated attackers to access page contents without having the required read permissions and save them to pages they can edit. The vulnerability affects versions from 4.5.5 through 8.0.6. The CVSS score is 4.2, indicating medium severity.
GROWI contains an authorization bypass vulnerability in its page viewing and commenting functionality. This flaw arises from improper use of a user-controlled key, allowing an authenticated attacker to access page contents and comments without having the necessary read permissions. The vulnerability affects versions from 3.2.10 through 8.0.6. The CVSS score is 4.2, indicating a medium severity level.
The glyphmatrix-fixture npm package versions 1.0.0 and 1.0.1 contain malicious code that compromises any computer on which it is installed or running. The compromise is severe enough that all secrets and keys stored on the affected machine should be rotated immediately from a different, secure computer. Removal of the package alone may not eliminate the malicious software, as the attacker may have gained full control of the system.
Tabularis versions before 0.28.0 have an SQL injection vulnerability in the SQLite driver. This flaw allows malicious clients to execute multiple SQL statements by manipulating the table_name parameter in the describe_table tool. Exploitation can bypass read-only restrictions and write approvals, enabling unauthorized reading, modification, or deletion of SQLite data. The vulnerability is fixed in version 0.28.0.
mews/pos versions up to 2.0.0 have a vulnerability where unauthenticated attackers can forge payment results by submitting unverified callbacks. Specific payment handlers skip critical verification checks, allowing attackers to manipulate order completion without actual payment.