Know your exposure.
Stay ahead of threats.

Unauthenticated PHP Object Injection in N7 | Golf Club Sports & Events <= 2.21 versions.

Unauthenticated PHP Object Injection in Asia Garden <= 1.3.1 versions.

Shop manager PHP Object Injection in WooCommerce Multilingual & Multicurrency <= 5.5.8 versions.

Unauthenticated PHP Object Injection in Kalles <= 1.1.7.1 versions.

Unauthenticated PHP Object Injection in Avala <= 1.1.4 versions.

Unauthenticated PHP Object Injection in Juno <= 2.25 versions.

Unauthenticated PHP Object Injection in Equadio <= 1.1.4 versions.

Unauthenticated PHP Object Injection in WineShop <= 3.20 versions.

Unauthenticated PHP Object Injection in Splendour <= 1.23 versions.

Unauthenticated PHP Object Injection in Stargaze <= 1.10 versions.

Unauthenticated PHP Object Injection in Tipsy <= 1.6 versions.

Unauthenticated PHP Object Injection in Wine House <= 3.20 versions.

Unauthenticated PHP Object Injection in Yacht Rental <= 2.6 versions.

Subscriber Broken Access Control in AWS S3 for WordPress Plugin – Upcasted <= 3.1.0 versions.

Subscriber PHP Object Injection in Angio <= 1.1.1 versions.

Subscriber PHP Object Injection in Dynamic User Directory <= 2.4 versions.

Unauthenticated PHP Object Injection in CleanSkin <= 1.5.0 versions.

Unauthenticated PHP Object Injection in Payever - WooCommerce Gateway <= 4.8.2 versions.

Unauthenticated PHP Object Injection in Booster for WooCommerce <= 8.4.0 versions.

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in drfuri Martfury - WooCommerce Marketplace WordPress Theme martfury allows Reflected XSS.This issue affects Martfury - WooCommerce Marketplace WordPress Theme: from n/a through 3.3.9.

InnoShop 0.9.2 contains a local file disclosure vulnerability that allows authenticated administrators with files_create permission to read server files by abusing the AI Core MCP file_upload tool's source argument. Attackers can supply file:// or php:// stream wrappers passed to file_get_contents(), storing contents on the public media disk to expose the .env file with APP_KEY and database credentials.

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in rtCamp Inc. rtMedia for WordPress, BuddyPress and bbPress buddypress-media allows Path Traversal.This issue affects rtMedia for WordPress, BuddyPress and bbPress: from n/a through 4.7.13.

Spotweb through 1.5.8 contains an OS command injection vulnerability in the runcommand NZB handler that allows remote attackers to execute commands by publishing spots with malicious titles. Attackers can post self-signed spots over Usenet with shell metacharacters in the title, which are substituted unescaped for $SPOTTITLE and passed to exec() when a user downloads the spot, running commands as the Spotweb PHP process.

Open Source Social Network (OSSN) through 10.1 contains an insecure direct object reference vulnerability in components/OssnMessages/ossn_com.php that allows authenticated users to read other users' private message attachments. Attackers can request the /messages/attachment/{guid} route with sequential or guessed file GUIDs to retrieve attachments from private conversations without sender or recipient verification.

Out-of-bounds read in the VarOpt union deserialization of Apache DataSketches C++ (repo: datasketches-cpp). var_opt_union::deserialize() read the 32-byte preamble of a non-empty union after checking that only 8 bytes were available, so a truncated serialized union could cause a read of up to 24 bytes past the end of the input. For such inputs, the size remaining for the embedded sketch was also computed by an unsigned subtra…