CVE Vulnerability Catalog

Improper authorization in KnoxGuardManager prior to SMR Jul-2026 Release 1 allows local attackers to bypass the persistence configuration of the application.

A path traversal vulnerability in the Wallpaper service prior to SMR Jul-2026 Release 1 allows local privileged attackers to access files with system server privilege.

An improper access control vulnerability in SamsungSEAgentService prior to SMR Jul-2026 Release 1 allows local attackers to access sensitive information.

Improper access control in IAFDService prior to SMR Jul-2026 Release 1 allows local privileged attackers to use privileged APIs.

Improper access control in Settings prior to SMR Jul-2026 Release 1 allows local attackers to configure Theft protection settings.

A security flaw in zhayujie CowAgent up to 2.1.0 exists in channel/channel.py of the Message Endpoint component. Missing authorization in an unknown function allows remote unauthenticated attacks. The exploit is public and may be used in attacks.

A path traversal vulnerability was found in zhayujie CowAgent up to version 2.1.0 in the _add_url/_add_package function of agent/skills/service.py. Manipulation of the Name argument allows remote attack.

The ARMember plugin for WordPress is vulnerable to Directory Traversal in all versions up to and including 4.0.27 via the 'X-FILENAME' HTTP header. This allows unauthenticated attackers to upload and overwrite files (e.g., CSS) outside the 'wp-content/uploads/armember' directory.

The BuddyHolis TableSearch plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'placeholder' parameter in all versions up to and including 1.1.0 due to insufficient input sanitization and output escaping.

The Animation Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'weather_style' and 'move_direction' parameters of the Weather widget in all versions up to and including 2.6.3. This is due to insufficient output escaping in the widget's render() function.

The Brevo (formerly Sendinblue) plugin for WordPress, used for newsletters, SMTP, and email marketing, is vulnerable to Reflected Cross-Site Scripting (XSS) via the 'page' parameter in all versions up to and including 3.1.77. This is due to insufficient input sanitization and output escaping.

The affiliate-toolkit – WP Affiliate Plugin with Amazon plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'atkp_product' shortcode in all versions up to and including 3.7.0. This is due to insufficient input sanitization and output escaping on user-supplied attributes, and it bypasses CVE-2024-10227.

The Sudoku Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'background' parameter in the 'sudoku-sc' shortcode in all versions up to, and including, 1.0.0 due to insufficient input sanitization and output escaping.

The Booking calendar, Appointment Booking System plugin for WordPress is vulnerable to time-based SQL Injection via the 'wpdevart_id' parameter in versions up to and including 3.2.17 due to insufficient escaping and lack of proper SQL query preparation. This allows unauthenticated attackers to append additional SQL queries, potentially extracting sensitive database information.

The rtMedia for WordPress, BuddyPress and bbPress plugin is vulnerable to time-based SQL injection via the order_by parameter in all versions up to and including 4.6.18 due to insufficient escaping and lack of proper SQL query preparation.

The Gutenberg Blocks with AI by Kadence WP plugin for WordPress in versions up to and including 3.5.32 contains a vulnerability allowing unauthorized post publication. The issue stems from a misconfigured capability check in the 'get_items_permission_check' function for the 'process_pattern' REST API endpoint.

The Plus Addons for Elementor plugin for WordPress up to version 6.4.11 is vulnerable to Authenticated (Contributor+) Stored Cross-Site Scripting via the Button widget's `custom_attributes` setting. The `render` function passes the raw string through `tp_senitize_js_input()`, which is bypassable.

The King Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'form_page_id' parameter in versions up to and including 51.1.62. This is due to insufficient input sanitization in the add_to_submissions() function and missing output escaping in the king_addons_submissions_custom_column_content() function.

The WPvivid Backup for MainWP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to and including 0.9.33 due to insufficient input sanitization and output escaping.

The Fluent Forms plugin for WordPress up to version 6.2.1 contains an incorrect authorization vulnerability in the 'subscription_id' parameter. Insufficient ownership checks in the AJAX payment cancellation flow allow authenticated attackers with subscriber-level access or higher to cancel other users' subscriptions.