CVE Vulnerability Catalog

The Pubjet | پاب‌جت plugin versions up to 5.4.8 allow a subscriber to change settings they should not have access to.

The Wordable plugin versions up to 8.2.10 have a Broken Access Control vulnerability that allows a subscriber to access functions they should not have permissions for.

The ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes plugin in versions up to and including 1.5.3 contains a SQL Injection vulnerability exploitable by a Subscriber-level user. Only a low-privileged account is required.

The WPSection plugin versions up to 1.5.1 have a Broken Access Control vulnerability that allows a subscriber to access functions they should not have permissions for.

The Everest Backup plugin versions up to 2.3.13 contain an unauthenticated Remote Code Execution (RCE) vulnerability.

The AIWU plugin in versions up to and including 1.5.9 contains a privilege escalation vulnerability exploitable by a Subscriber-level user. Only a low-privileged account is required.

The Additional Order Filters for WooCommerce plugin versions up to 1.24 contain an unauthenticated Cross-Site Scripting (XSS) vulnerability.

The WP File Download plugin versions up to 6.3.6 contain an unauthenticated Cross-Site Scripting (XSS) vulnerability.

Builderius.io Builderius versions from 1.4 through 1.4-beta contain a Server-Side Request Forgery (SSRF) vulnerability.

Tabularis through 0.27.0 contains an incorrect authorization vulnerability in the MCP run_query safety gate. It allows prompt-injected agents or untrusted MCP clients to bypass read-only mode by submitting side-effecting SELECT statements such as SELECT setval, nextval, or PostgreSQL query_to_xml with embedded DELETE, modifying data without approval prompts.

slide-maker through 5.8.0 contains a path traversal vulnerability in generate_images_openai.py that allows attackers to write image files outside the output directory via manifest-supplied filenames. Attackers can influence deck source material so the image prompt manifest contains ../ or symlinked filenames, creating directories and overwriting existing files at arbitrary paths.

Helicone through v2025.08.21-1 contains a server-side request forgery vulnerability in the Jawn webhook sender. Authenticated organization users can create webhooks with public hostnames that resolve or DNS-rebind to loopback or internal addresses, causing blind POST requests to internal HTTPS services.

The MicroPayments plugin in versions up to 3.2.9 contains a subscriber bypass vulnerability. A subscriber-level user can bypass restrictions.

The Pay With MetaMask For WooCommerce – Cryptocurrency Payment Gateway plugin in versions up to 1.7.2 contains an unauthenticated bypass vulnerability. An unauthenticated attacker can bypass control mechanisms.

The VillaTheme ALD – Dropshipping and Fulfillment for AliExpress and WooCommerce plugin through version 2.2.4 has a missing authorization vulnerability. It allows exploitation of incorrectly configured access control security levels.

The Forminator plugin by WPMU DEV versions up to 1.57.3 have an incorrect privilege assignment vulnerability that allows privilege escalation.

The Sell Downloads plugin (up to version 1.2.3) contains an improper verification of source of a communication channel vulnerability, allowing exploitation of trusted credentials. This issue affects Sell Downloads from n/a through 1.2.3.

The Martfury - WooCommerce Marketplace WordPress theme contains a Reflected XSS vulnerability due to improper neutralization of input during web page generation. The issue affects versions up to and including 3.3.9.

open-multi-agent (@open-multi-agent/core) versions 1.5.0 through 1.21.2 contain a link following vulnerability in the file_write tool sandbox, allowing attackers to create files outside the workspace root by using dangling symlinks. Attackers can plant a dangling symlink in the workspace and steer the agent via prompt injection to write attacker-influenced content anywhere the agent process can write.

phi versions 0.1.1 through 0.28.4 contain an improper link resolution vulnerability that allows malicious repositories to bypass workspace_only_writes by exploiting lexical-only path checks in the permission gate. Attackers can commit symlinks pointing outside the workspace and use prompt injection to make the write tool write attacker-influenced content to external files without approval.