CVE Vulnerability Catalog

A vulnerability in PraisonAI before version 4.6.78 stems from a misconfigured prompt injection defense where the default block threshold is set to CRITICAL severity. This allows HIGH-severity attacks to pass through unblocked, enabling system prompt extraction and unauthorized tool invocations.

An SSRF vulnerability in the Crawl4AI/Chromium backend of PraisonAI before version 1.6.78 allows attackers to bypass SSRF validation via DNS rebinding and HTTP redirects. Attackers can craft URLs that resolve to internal services after initial validation, enabling the headless browser to read sensitive internal responses including canary values.

PraisonAI AgentMail versions before 4.6.78 lack signature verification in webhook mode, allowing unauthenticated attackers to inject messages with spoofed sender addresses. Attackers can POST crafted message.received events to the webhook endpoint to inject arbitrary content into the agent and trigger replies to attacker-controlled addresses, bypassing sender allow/block lists.

PraisonAI before version 1.7.3 has an insecure default configuration that binds to all network interfaces, requires no API key, and allows wildcard CORS. Unauthenticated attackers can read agent instructions and system prompts via GET /api/agents or invoke agents without authentication via POST /api/chat.

Capgo before version 12.128.2 contains an information disclosure vulnerability in the find_apikey_by_value PostgreSQL function marked SECURITY DEFINER and executable by the anon role. Unauthenticated attackers can call this function via the /rest/v1/rpc/find_apikey_by_value endpoint to retrieve sensitive API key metadata including user_id, mode, org scoping, and expiration details when supplied a valid key value.

Authenticated arbitrary file upload vulnerability in Phoca Downloads component for Joomla, allowing registered users to upload executable files and achieve full RCE.

The Genolve – AI image AI video generation plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check in the genolve_setOpt() function in all versions up to and including 5.0.5. This allows authenticated attackers with Contributor-level access and above to update arbitrary WordPress options, including enabling user registration and setting the default role to administrator, leading to privilege escalation.

The W3 Total Cache plugin for WordPress up to version 2.9.4 is vulnerable to Directory Traversal via the setupSources function. Unauthenticated attackers can read arbitrary files on the server, potentially exposing sensitive information. Exploitation requires enabling manual minify mode and providing a specific minify filename.

The CorvusPay WooCommerce Payment Gateway plugin for WordPress up to version 2.7.4 is vulnerable to stored cross-site scripting via the 'approval_code' parameter due to insufficient input sanitization and output escaping. Unauthenticated attackers can inject arbitrary web scripts that execute when a user accesses the affected page. The unauthenticated REST endpoint POST /wp-json/corvuspay/success/ has permission_callback set to __return_true, and signature validation only logs the result without stopping execution, allowing an attacker to store a malicious approval_code unchallenged.

The WP CTA – Sticky CTA Builder plugin for WordPress up to version 2.2.2 is vulnerable to time-based blind SQL Injection via the 'fildname' parameter in the ajaxCheck() method. Due to missing authorization and the endpoint being accessible to unauthenticated users, attackers can inject arbitrary SQL queries and extract sensitive data, including administrator password hashes.

The Essential Addons for Elementor plugin for WordPress is vulnerable to administrator account takeover via email header injection. This affects all versions up to and including 6.6.10 due to insufficient server-side validation of a Login/Register widget setting used to construct outgoing email headers. An authenticated attacker with Contributor-level access or higher can inject a Bcc header to receive a copy of the administrator's password reset link and achieve full account takeover.

The Code Engine plugin for WordPress is vulnerable to Remote Code Execution in all versions up to and including 0.3.5 via the 'code-engine' shortcode. This is due to the plugin not restricting access to the code injecting functionality, allowing authenticated attackers with Contributor-level access and above to execute code on the server.

The SureCart plugin for WordPress up to version 4.2.3 is vulnerable to privilege escalation via account takeover. This is due to insufficient validation of user identity before updating details like email during customer profile synchronization from webhook events. Unauthenticated attackers can change linked user email addresses, including administrators if their account is linked to a SureCart customer record, and then reset the password to gain access if the customer ID is known.

The Form Vibes – Database Manager for Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Contact Form 7 Form Field in all versions up to, and including, 1.5.2 due to insufficient input sanitization and output escaping.

The Planyo Online Reservation System plugin for WordPress up to version 3.0 is vulnerable to Server-Side Request Forgery (SSRF) leading to Local File Inclusion (LFI). The ulap.php file acts as an AJAX proxy accessible without authentication, and the send_http_post() function fails to validate the URL scheme, allowing an attacker to use file:// URLs to read arbitrary local files on the server.

The Swiss Toolkit For WP plugin for WordPress up to version 1.4.6 contains an arbitrary file upload vulnerability. The `upload_extension_files()` function improperly validates file types by using `strpos()` to search for an extension string in the filename instead of verifying the actual file extension.

The Booking Package plugin for WordPress up to version 1.7.20 is vulnerable to generic SQL injection via the 'email' form parameter (form<N>). Insufficient escaping and lack of query preparation allow unauthenticated attackers to append additional SQL queries, potentially extracting sensitive database information.

The Simple JWT Login plugin for WordPress up to version 3.6.6 contains an authentication bypass and privilege escalation vulnerability. An authenticated attacker with subscriber-level access can inject an administrator's email into the `payload` parameter, resulting in a JWT with admin identity and gaining a fully authenticated admin session.

The LA-Studio Element Kit for Elementor plugin for WordPress is vulnerable to Local File Inclusion (LFI) in all versions up to and including 1.6.1 via the get_type_template function. This allows authenticated attackers with contributor-level access or higher to include and execute arbitrary .php files on the server.

The WP Ultimate CSV Importer plugin for WordPress up to version 8.0.1 is vulnerable to Remote Code Execution via the 'MappedFields' parameter. Missing capability checks on AJAX handlers and exposure of the plugin nonce to any authenticated user allow a Subscriber to install the Import WooCommerce add-on, persist attacker-controlled PHP expressions in MappedFields, and trigger eval() in ImportHelpers::get_meta_values().