CVE Vulnerability Catalog

The GW AI Website Builder plugin for WordPress up to version 1.0.1 lacks a capability check in the gwaiwebu_gravitywrite_disconnect_handler() function, allowing authenticated attackers with Subscriber-level access or higher to disconnect the plugin from GravityWrite via an AJAX action.

The BetterDocs plugin for WordPress up to version 4.6.0 is vulnerable to generic SQL injection via the 'lang' parameter. Authenticated attackers with custom-level access or higher can append additional SQL queries, allowing extraction of sensitive database information. Exploitation requires an active multilingual plugin (WPML, Polylang, qTranslate, Weglot, or TranslatePress).

The Import and export users and customers plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to and including 2.4.0. Authenticated attackers with subscriber-level access or higher can extract the post_title and raw post_content of arbitrary posts regardless of status or post type by enumerating post IDs. The required nonce is exposed as inline JavaScript on any wp-admin page when ?post_type=acui_email_template is appended to the URL, which is reachable by any authenticated user including Subscribers.

The Cookie Banner for GDPR/CCPA – WPLP Cookie Consent plugin for WordPress is vulnerable to generic SQL injection via the 'scan_id' parameter in all versions up to and including 4.3.6 due to insufficient escaping and lack of query preparation. This allows authenticated attackers with administrator-level access or higher to append additional SQL queries to existing ones.

The GDPR Cookie Consent plugin for WordPress up to version 4.3.6 is vulnerable to unauthorized data modification due to missing capability check and nonce verification in the gdpr_cookie_consent_ajax_save_schedule_scan() function. This allows authenticated attackers with Subscriber-level access or higher to modify the cookie scan schedule configuration.

The Eventin plugin for WordPress (versions up to and including 4.1.15) is vulnerable to stored XSS via the 'etn_faq_content' parameter due to insufficient input sanitization and output escaping. Authenticated attackers with contributor-level access or higher can inject arbitrary web scripts that execute whenever a user visits an affected page.

The FlowForms – Conversational Form Builder plugin for WordPress is vulnerable to Insecure Direct Object Reference (IDOR) in all versions up to and including 1.1.1. The vulnerability exists in the update_form function due to missing validation on a user-controlled key, allowing authenticated attackers with contributor-level access and above to modify the content, design, and settings of any form on the site, including forms owned by administrators.

The Highlighting Code Block plugin for WordPress up to version 2.2.0 is vulnerable to stored cross-site scripting via admin settings due to insufficient input sanitization and output escaping.

The Easy Appointments plugin for WordPress up to version 3.12.27 is vulnerable to authorization bypass. Authenticated attackers with author-level access can cancel all future appointments site-wide by marking them as abandoned. The nonce for the cancellation request is exposed on the Appointments admin page, which is only gated by the edit_posts capability, making it accessible to low-privileged users.

The Happyforms plugin for WordPress up to version 1.26.12 is vulnerable to Local File Inclusion (LFI) via the happyforms_get_form_partial() function. This allows authenticated attackers with Administrator-level access or higher to include and execute arbitrary .php files on the server.

An improper privilege management and access control vulnerability exists in Apache IoTDB. Authenticated users can escalate to full tree-path access by renaming themselves to __internal_auditor.

The LA-Studio Element Kit for Elementor WordPress plugin before version 1.6.1 does not check whether user registration is enabled on the site before creating an account through one of its unauthenticated AJAX actions. This allows unauthenticated attackers to register new accounts even when registration has been disabled site-wide.

The All-in-One Video Gallery plugin for WordPress up to version 4.8.5 is vulnerable to Server-Side Request Forgery (SSRF) via the 'vdl' parameter. An authenticated attacker with subscriber-level access can make arbitrary web requests from the server, including to internal services, and read their responses.

Improper input validation in Samsung Pass prior to version 5.2.10.3 allows local privileged attackers to write out-of-bounds memory.

An improper authorization vulnerability in Samsung Health prior to version 7.00.0.107 allows local attackers to access connected device information.

The vulnerability in InputSharing prior to version 2.7.01.4 is due to improper export of Android application components. This allows local attackers to access sharing data.

Improper input validation in Samsung Email prior to version 6.2.13.1 allows local attackers to create arbitrary files within the application sandbox.

A path traversal vulnerability in SemClipboardService prior to SMR Jul-2026 Release 1 allows local privileged attackers to access files with system privilege.

A vulnerability in WLAN security prior to SMR Jul-2026 Release 1 is caused by incorrect default permissions. It allows local attackers to configure TencentWifiSecurity settings.

Improper access control in SmartThingsKit prior to SMR Jul-2026 Release 1 allows local attackers to access sensitive information.