CVE Vulnerability Catalog

The Bookly plugin for WordPress up to version 27.2 contains a Stored XSS vulnerability in the 'bookly-customer-full-name' cookie. An unauthenticated attacker can inject scripts that execute when an administrator visits an infected page. Requires the 'Remember personal information in cookies' setting to be enabled (disabled by default).

The GPTranslate plugin for WordPress up to version 2.31 contains a stored XSS vulnerability via the REST API. An unauthenticated attacker can inject scripts that execute when a user visits a page. The API key is exposed in the HTML source of every page.

A path traversal and privilege escalation vulnerability was found in the Grafana Operator. It allows a malicious user who can create Dashboard or LibraryPanel resources to obtain the Kubernetes service account token of the operator manager.

The WP Ticket plugin for WordPress up to version 6.0.4 is vulnerable to SQL Injection via the `s` search parameter. An unauthenticated attacker can append additional SQL queries to existing queries, allowing extraction of sensitive database information.

Vulnerability in ABRT event handler scripts in the libreport library allows arbitrary file overwrites on the system. Scripts write data to files without the O_NOFOLLOW flag, allowing a root process to follow symbolic links.

A race condition was found in the abrt-dbus D-Bus service's ChownProblemDir method. It allows an attacker to gain filesystem-level control of the dump directory while privileged event scripts are still running.

A TOCTOU race condition was found in the SetElement method of the abrt-dbus D-Bus service. Between dump directory creation and post-create event execution, any local user can call SetElement to write arbitrary text files into the root-owned dump directory, bypassing package validation and allowing crashes of unpackaged binaries to survive.

A heap buffer out-of-bounds write vulnerability was discovered in the Avira Antivirus engine when scanning a malformed POSIX tar archive. This could allow local execution of code or denial-of-service of the antivirus engine process. Affects engine builds before 8.3.27.12 on Windows, macOS, and Linux.

An information disclosure vulnerability in Avira Password Manager when used with Mozilla Firefox allows a remote attacker operating a cross-origin iframe to obtain credentials autofilled for the parent web page via incorrect autofill field selection.

A heap buffer out-of-bounds read vulnerability was discovered in the Avira Antivirus engine when scanning a malformed PDF file. This could allow local execution of code or denial-of-service of the antivirus engine process. Affects engine builds before 8.3.70.76 on Windows, macOS, and Linux.

A heap buffer out-of-bounds read vulnerability was discovered in the Avira Antivirus engine when scanning a malformed Windows PE file. This could allow local execution of code or denial-of-service of the antivirus engine process. Affects engine builds before 8.3.70.98 on Windows, macOS, and Linux.

A heap buffer out-of-bounds write vulnerability due to integer overflow was discovered in the Avira Antivirus engine when scanning a malformed MS-DOS executable file. This could allow local execution of code or denial-of-service of the antivirus engine process. Affects engine builds before 8.3.70.104 on Windows, macOS, and Linux.

A denial of service vulnerability in Capgo before version 12.128.2 allows attackers to register accounts using arbitrary email addresses without verification, then initiate deletion to lock emails in pending deletion state. Attackers can permanently lock legitimate users out of the platform for 30 days by exploiting unverified email ownership in account lifecycle operations.

Vulnerability in OpenClaw before version 2026.5.12. It involves an allowlist bypass in PowerShell encoded-command handling that allows attackers to execute encoded commands using abbreviated flag aliases not recognized by the allowlist parser. Remote authenticated operators can bypass execution allowlist checks by using unrecognized encoded-command alias forms to execute arbitrary PowerShell content.

An authorization bypass vulnerability in OpenClaw before 2026.4.27 allows authenticated senders to skip allowFrom policy checks in QQBot pre-dispatch slash commands. Attackers can invoke slash commands before access control policies are applied, potentially triggering command handling from blocked senders depending on operator configuration.

OpenClaw before 2026.4.29 contains an authorization bypass vulnerability in the QQBot streaming command that allows authenticated senders to mutate configuration without explicit allowFrom restrictions. Attackers can modify QQBot streaming configuration outside intended admin policy.

OpenClaw before 2026.5.18 contains an identity header validation vulnerability allowing local same-host callers to forge trusted-proxy identity headers. Attackers with access to the proxy-facing Gateway port can supply forged identity headers to assume operator identity and potentially escalate privileges.

OpenClaw before 2026.5.18 contains a policy enforcement vulnerability in system.run safe-bin allowlist validation that allows shell expansion to modify command interpretation on POSIX nodes. Authenticated operators can exploit shell metacharacters in approved commands to read unintended node-local files and expose sensitive configuration data.

OpenClaw before version 2026.5.18 contains an approval display truncation vulnerability allowing authenticated users to hide command suffixes from approvers. Attackers can submit oversized exec commands with benign prefixes and malicious suffixes to execute unauthorized operations after approval.

Authorization bypass vulnerability in OpenClaw before version 2026.5.6. Authenticated senders can execute owner-only commands without proper access control, allowing privileged command execution by unauthorized users.