---METADATA---
VENDOR: Themeum
PRODUCT: Kirki
AFFECTED_VERSIONS: 0 through 6.0.13
CONFIDENCE: high
MISSING: patch
---END_METADATA---

Description Summary:
A missing authorization vulnerability in the Themeum Kirki plugin allows unauthenticated attackers to exploit incorrectly configured access controls and potentially access sensitive information.

Executive Summary:
The Themeum Kirki plugin contains a high-severity access control vulnerability that enables unauthenticated attackers to potentially access sensitive information.

Vulnerability Details

CVE-ID: CVE-2026-57727

Affected Software: Themeum Kirki

Affected Versions: 0 through 6.0.13

Vulnerability: The vulnerability is identified as CWE-862 (Missing Authorization). It stems from a failure to validate user permissions, allowing unauthenticated remote attackers to interact with sensitive plugin functionalities.

Business Impact

The vulnerability carries a CVSS score of 7.5, indicating a high risk of unauthorized information disclosure. Successful exploitation could allow attackers to bypass security boundaries, leading to the exposure of sensitive site configurations or data, which may result in severe reputational damage and unauthorized access to backend settings.

Remediation Plan

Immediate Action: Update the Kirki plugin to the latest version beyond 6.0.13. If no patch is currently available, consider deactivating the plugin as a temporary measure.

Proactive Monitoring: Monitor site logs for unauthorized access attempts or suspicious queries associated with the Kirki plugin's endpoints.

Compensating Controls: Utilize a Web Application Firewall (WAF) to filter and block requests that attempt to trigger unauthorized access to the plugin's internal functions.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of July 14, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The vulnerability is highly exploitable due to the lack of required authentication.

Analyst Recommendation

Given the high CVSS score and the nature of the flaw, administrators should treat this as a priority update. Immediate action is required to ensure that the plugin is patched to the latest version to prevent unauthorized data access by unauthenticated remote actors.

---METADATA---
VENDOR: Themeum
PRODUCT: Kirki
AFFECTED_VERSIONS: 0 through 6.0.12
CONFIDENCE: high
MISSING: patch
---END_METADATA---

Description Summary:
Themeum Kirki is susceptible to a Blind SQL Injection vulnerability, allowing unauthenticated attackers to manipulate SQL queries.

Executive Summary:
A critical SQL injection vulnerability in the Themeum Kirki WordPress plugin allows unauthenticated attackers to potentially access sensitive database information.

Vulnerability Details

CVE-ID: CVE-2026-57726

Affected Software: Themeum Kirki

Affected Versions: 0 through 6.0.12

Vulnerability: This is a Blind SQL Injection flaw (CWE-89) arising from improper neutralization of special elements in SQL commands. The vulnerability is accessible to unauthenticated remote attackers (AV:N/PR:N).

Business Impact

The ability for an unauthenticated attacker to perform Blind SQL injection poses a severe risk to data confidentiality. Attackers could potentially exfiltrate sensitive information from the underlying database, leading to significant privacy breaches and regulatory non-compliance. With a CVSS score of 9.3, this vulnerability represents a critical threat to the integrity of the application's data layer.

Remediation Plan

Immediate Action: Upgrade the Kirki plugin to the latest available version provided by the vendor. If a patch is not yet available, consider deactivating the plugin until a secure version is released.

Proactive Monitoring: Monitor database query logs for unusual patterns, such as repetitive syntax errors or unexpected data retrieval requests, which may indicate automated injection attempts.

Compensating Controls: Deploy a Web Application Firewall (WAF) with updated rulesets to detect and block common SQL injection payloads targeted at WordPress plugins.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of July 13, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is inherently dangerous due to the lack of required authentication.

Analyst Recommendation

Given the critical CVSS severity and the unauthenticated nature of this vulnerability, immediate action is required. Organizations using the Kirki plugin should audit their environment for the affected versions and prioritize patching or disabling the component to prevent potential data exfiltration.

---METADATA---
VENDOR: Themeum
PRODUCT: Kirki
AFFECTED_VERSIONS: 0 through 6.0.12
CONFIDENCE: high
MISSING: patch
---END_METADATA---

Description Summary:
A deserialization of untrusted data vulnerability in the Themeum Kirki WordPress plugin allows for PHP object injection.

Executive Summary:
A critical PHP object injection vulnerability in the Themeum Kirki plugin allows unauthenticated attackers to execute arbitrary code on the host system.

Vulnerability Details

CVE-ID: CVE-2026-57724

Affected Software: Themeum Kirki

Affected Versions: 0 through 6.0.12

Vulnerability: This is a deserialization of untrusted data (CWE-502) vulnerability that allows unauthenticated attackers to inject malicious PHP objects. Because no authentication is required to trigger this flaw, it can be exploited remotely by any network-accessible user.

Business Impact

Successful exploitation allows an attacker to achieve Remote Code Execution (RCE) with the privileges of the web server. Given the CVSS score of 9.8, this vulnerability poses a severe risk of full system compromise, data exfiltration, and potential lateral movement within the hosting environment.

Remediation Plan

Immediate Action: Update the Kirki plugin to the latest available version. If a patch is not yet available, deactivate the plugin until a secure version is released.

Proactive Monitoring: Monitor web server access logs for suspicious serialized strings in GET or POST parameters that may indicate attempts to inject malicious objects.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to block common object injection payloads and suspicious input patterns.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of July 13, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is inherently dangerous due to its potential for RCE and lack of required authentication.

Analyst Recommendation

This vulnerability is critical and requires immediate attention to prevent unauthorized remote code execution. Administrators should verify their current version of the Kirki plugin and apply updates immediately. If immediate patching is not possible, prioritize the removal or disabling of the vulnerable component to minimize the attack surface.

---METADATA---
VENDOR: CodeRevolution
PRODUCT: Aimogen Pro
AFFECTED_VERSIONS: 0 through 2.8.3
CONFIDENCE: high
MISSING: patch
---END_METADATA---

Description Summary:
CodeRevolution Aimogen Pro for WordPress is vulnerable to an unrestricted file upload flaw, allowing unauthenticated attackers to upload malicious files.

Executive Summary:
An unrestricted file upload vulnerability in the CodeRevolution Aimogen Pro WordPress plugin allows unauthenticated attackers to execute arbitrary code on the server.

Vulnerability Details

CVE-ID: CVE-2026-57719

Affected Software: CodeRevolution Aimogen Pro

Affected Versions: 0 through 2.8.3

Vulnerability: This is an Unrestricted Upload of File with Dangerous Type vulnerability (CWE-434). It allows unauthenticated remote attackers to bypass security controls and upload malicious files, which can lead to Remote Code Execution (RCE).

Business Impact

This vulnerability carries a maximum CVSS score of 10.0, representing the highest level of risk. An attacker can achieve complete system compromise, leading to full data loss, unauthorized access, and the potential for the server to be used as a pivot point for further attacks within the network.

Remediation Plan

Immediate Action: Update the Aimogen Pro plugin to the latest version. If a patch is not available, remove the plugin from the production environment immediately to prevent RCE.

Proactive Monitoring: Inspect the web server's upload directories for suspicious file types (e.g., .php, .phtml, .sh) and monitor for unauthorized process execution on the web server.

Compensating Controls: Configure the web server to disable script execution in directories where user uploads are stored and employ a WAF to restrict file uploads to expected MIME types.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of July 13, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. However, the nature of the flaw (unrestricted file upload) makes it extremely trivial to exploit once discovered.

Analyst Recommendation

This is a critical, high-risk vulnerability that could lead to total server takeover. Immediate patching or removal of the vulnerable plugin is essential to maintain the security and integrity of the affected infrastructure.

---METADATA---
VENDOR: LatePoint
PRODUCT: LatePoint
AFFECTED_VERSIONS: 0 through 5.6.3
CONFIDENCE: high
MISSING: patch
---END_METADATA---

Description Summary:
The LatePoint WordPress plugin is susceptible to Blind SQL Injection, enabling unauthenticated remote attackers to execute malicious database queries.

Executive Summary:
A critical Blind SQL injection vulnerability in the LatePoint plugin exposes the application to unauthenticated database exploitation.

Vulnerability Details

CVE-ID: CVE-2026-57714

Affected Software: LatePoint LatePoint

Affected Versions: 0 through 5.6.3

Vulnerability: This vulnerability is a Blind SQL Injection (CWE-89) that allows an unauthenticated attacker to manipulate database queries through unsanitized input. The CVSS vector confirms that the vulnerability is accessible remotely without authentication or user interaction.

Business Impact

Successful exploitation allows an attacker to extract sensitive information from the database, which may include appointment data, user credentials, or business-critical information. The CVSS score of 9.3 indicates that this is a severe vulnerability that can lead to total loss of data confidentiality for the affected installation.

Remediation Plan

Immediate Action: Update the LatePoint plugin to the latest version beyond 5.6.3 to remediate the vulnerability.

Proactive Monitoring: Review database logs for anomalous queries or high error rates, which are common indicators of blind SQL injection testing.

Compensating Controls: Utilize a Web Application Firewall (WAF) to intercept and block requests that contain malicious SQL characters, serving as a critical interim defense measure.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of July 13, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The lack of authentication requirements makes this a high-value target for opportunistic attackers.

Analyst Recommendation

Given the critical CVSS severity, administrators should prioritize updating the LatePoint plugin immediately. Ensure that all plugins are updated to the latest vendor-supported version to close this security gap and maintain the confidentiality of the system's data.

---METADATA---
VENDOR: Marcus (aka @msykes)
PRODUCT: Events Manager
AFFECTED_VERSIONS: 0 through 7.3.6
CONFIDENCE: high
MISSING: patch
---END_METADATA---

Description Summary:
The Events Manager WordPress plugin is vulnerable to PHP object injection due to the insecure deserialization of untrusted data, which can lead to remote code execution.

Executive Summary:
An object injection vulnerability in the Events Manager WordPress plugin allows remote attackers to execute arbitrary code through the deserialization of untrusted data.

Vulnerability Details

CVE-ID: CVE-2026-57713

Affected Software: Marcus (aka @msykes) Events Manager

Affected Versions: 0 through 7.3.6

Vulnerability: This vulnerability (CWE-502) occurs when the application deserializes untrusted data without sufficient verification, allowing unauthenticated attackers to trigger malicious object injection.

Business Impact

This flaw carries a CVSS score of 8.8, indicating a high potential for total system compromise, including the execution of arbitrary code with the privileges of the web server. This could lead to a complete breach of the host environment, data theft, and unauthorized access to the database.

Remediation Plan

Immediate Action: Update the Events Manager plugin to the latest version immediately to mitigate the risk of object injection.

Proactive Monitoring: Monitor server-side logs for unusual PHP errors or attempts to pass serialized objects in request parameters.

Compensating Controls: Implement a Web Application Firewall (WAF) to detect and block malicious payloads associated with deserialization attacks.

Exploitation Status

Public Exploit Available: Unknown.

Analyst Notes: As of July 14, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. Deserialization flaws are notoriously dangerous and often provide a direct path to remote code execution.

Analyst Recommendation

This is a critical vulnerability that requires immediate attention due to the risk of remote code execution. Administrators should apply the vendor-provided security updates as soon as they become available and restrict untrusted input to the plugin.

---METADATA---
VENDOR: quantumcloud
PRODUCT: WoowBot Pro Max
AFFECTED_VERSIONS: 0 through 14.1.7
CONFIDENCE: high
MISSING: patch
---END_METADATA---

Description Summary:
An unrestricted file upload vulnerability in the quantumcloud WoowBot Pro Max plugin allows authenticated attackers to upload malicious files, potentially leading to remote code execution.

Executive Summary:
A critical unrestricted file upload vulnerability in WoowBot Pro Max enables authenticated attackers to execute arbitrary code on the host server.

Vulnerability Details

CVE-ID: CVE-2026-57710

Affected Software: quantumcloud WoowBot Pro Max

Affected Versions: 0 through 14.1.7

Vulnerability: This issue is an Unrestricted Upload of File with Dangerous Type (CWE-434). An attacker with low privileges can bypass file validation mechanisms to upload and execute malicious files on the server, as confirmed by the CVSS vector (PR:L).

Business Impact

With a CVSS score of 9.9, this vulnerability represents an extreme risk. An attacker gaining the ability to upload and execute code on the server could achieve a full system compromise, resulting in data theft, malware distribution, or complete service outage.

Remediation Plan

Immediate Action: Update the WoowBot Pro Max plugin to the latest version as soon as a patch is available from the vendor. Disable the plugin immediately if the current version is vulnerable and cannot be updated.

Proactive Monitoring: Inspect the web server’s upload directories for unexpected or non-standard file types. Monitor server logs for unusual file execution events or unauthorized access to uploaded content.

Compensating Controls: Implement strict file type validation at the WAF level and ensure the web server is configured to prevent the execution of scripts in user-accessible upload directories.

Exploitation Status

Public Exploit Available: No (exploit_available: false)

Analyst Notes: As of July 13, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The vulnerability is inherently dangerous due to the potential for direct remote code execution.

Analyst Recommendation

This vulnerability requires immediate attention due to the high risk of remote code execution. Administrators should apply the vendor-provided patch immediately upon release and enforce strict file upload policies to mitigate the risk of exploitation.

---METADATA---
VENDOR: WP Swings
PRODUCT: Membership For WooCommerce
AFFECTED_VERSIONS: 0 through 3.1.0
CONFIDENCE: high
MISSING: patch
---END_METADATA---

Description Summary:
The Membership for WooCommerce plugin is affected by a path traversal vulnerability that may allow unauthenticated attackers to delete arbitrary files on the server.

Executive Summary:
A path traversal vulnerability in the Membership for WooCommerce plugin could allow unauthenticated attackers to perform arbitrary file deletion, creating a high risk of service disruption.

Vulnerability Details

CVE-ID: CVE-2026-57709

Affected Software: WP Swings Membership For WooCommerce

Affected Versions: 0 through 3.1.0

Vulnerability: This vulnerability is a path traversal flaw (CWE-22) resulting from improper limitation of a pathname to a restricted directory. The attack vector is network-based, and the CVSS vector indicates that it is exploitable by unauthenticated attackers without requiring user interaction.

Business Impact

The ability for an unauthenticated actor to delete arbitrary files on the server presents a severe risk to application availability and data integrity. With a CVSS score of 8.6, the vulnerability is classified as High severity, necessitating prompt attention to prevent potential site outages or the removal of critical configuration files.

Remediation Plan

Immediate Action: Monitor for updates from WP Swings and apply the security patch for the Membership for WooCommerce plugin as soon as it is released. If no patch is currently available, assess the necessity of the plugin and consider temporary deactivation.

Proactive Monitoring: Review web server logs for suspicious activity, specifically looking for path traversal patterns commonly used to access or delete files outside of the intended web root.

Compensating Controls: Utilize a Web Application Firewall (WAF) to intercept and block malicious HTTP requests that attempt to traverse directories.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of July 14, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is inherently dangerous due to its potential for file deletion, but current data does not confirm widespread abuse.

Analyst Recommendation

Due to the critical nature of file deletion vulnerabilities, security teams should treat this as a high-priority item. Ensure that the plugin is updated as soon as a fix becomes available and maintain strict monitoring of file system integrity until the patch is successfully deployed.

---METADATA---
VENDOR: quantumcloud
PRODUCT: Simple Business Directory Pro
AFFECTED_VERSIONS: 0 through 15.9.4
CONFIDENCE: high
MISSING: patch
---END_METADATA---

Description Summary:
The Simple Business Directory Pro plugin for WordPress is vulnerable to SQL injection, allowing unauthenticated attackers to execute arbitrary database commands.

Executive Summary:
A critical SQL injection vulnerability in the Simple Business Directory Pro plugin enables unauthenticated attackers to perform unauthorized database operations.

Vulnerability Details

CVE-ID: CVE-2026-57707

Affected Software: quantumcloud Simple Business Directory Pro

Affected Versions: 0 through 15.9.4

Vulnerability: The plugin suffers from a classic SQL Injection vulnerability (CWE-89) where user-supplied input is not properly sanitized before being used in database queries. The vulnerability is fully automatable by unauthenticated remote attackers.

Business Impact

The ability to perform SQL injection allows an attacker to bypass authentication, extract sensitive business directory data, or potentially modify directory records. With a CVSS score of 9.3, this vulnerability poses a severe risk to the integrity and confidentiality of the data managed by the plugin, potentially resulting in significant data breaches.

Remediation Plan

Immediate Action: Update the Simple Business Directory Pro plugin to the latest version beyond 15.9.4 as soon as the vendor provides a patch.

Proactive Monitoring: Monitor site traffic for suspicious input patterns in URL parameters or form submissions that match common SQL injection syntax.

Compensating Controls: Implement a Web Application Firewall (WAF) to filter malicious requests containing SQL syntax, providing virtual patching until the software can be updated.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of July 13, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. However, because the vulnerability is automatable, the risk of automated exploitation campaigns is high.

Analyst Recommendation

Security teams should treat this vulnerability with high urgency. Given the ease of exploitation, immediate patching is required to protect the integrity of the database. Conduct a thorough audit of the affected environment if the plugin remains in use while waiting for a vendor-supplied update.

---METADATA---
VENDOR: Nexcess
PRODUCT: Event Tickets
AFFECTED_VERSIONS: 0 through 5.28.5
CONFIDENCE: high
MISSING: patch
---END_METADATA---

Description Summary:
A missing authorization vulnerability in the Nexcess Event Tickets plugin allows unauthenticated attackers to perform unauthorized actions due to improper access control configuration.

Executive Summary:
The Nexcess Event Tickets plugin is affected by a critical access control vulnerability that permits unauthenticated attackers to manipulate application data.

Vulnerability Details

CVE-ID: CVE-2026-57705

Affected Software: Nexcess Event Tickets

Affected Versions: 0 through 5.28.5

Vulnerability: This is a CWE-862 Missing Authorization flaw. The plugin fails to perform necessary capability checks, allowing unauthenticated remote attackers to invoke restricted functions.

Business Impact

The lack of authorization controls presents a high risk to business operations, as it allows unauthorized actors to potentially manipulate event data or impact system integrity. With a CVSS score of 7.5, this high-severity vulnerability poses a significant threat to data integrity, potentially leading to unauthorized administrative actions that could disrupt business processes or compromise event management workflows.

Remediation Plan

Immediate Action: Update the Nexcess Event Tickets plugin to the latest available version beyond 5.28.5. If an update is not immediately available, disable the plugin to prevent exploitation.

Proactive Monitoring: Review web server access logs for anomalous requests targeting plugin-specific endpoints or unauthorized attempts to access administrative functions.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to block suspicious traffic patterns and unauthorized requests directed at the plugin's directory.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of July 14, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is inherently dangerous due to its unauthenticated nature and the ease of potential exploitation.

Analyst Recommendation

This vulnerability represents a significant security oversight that requires immediate attention. Organizations utilizing the Event Tickets plugin must prioritize updating to the latest secure version to mitigate the risk of unauthorized access and maintain the integrity of their event management platform.

---METADATA---
VENDOR: Melograno Venture Studio
PRODUCT: Amelia
AFFECTED_VERSIONS: 0 through 2.4.2
CONFIDENCE: high
MISSING: patch
---END_METADATA---

Description Summary:
The Amelia WordPress plugin contains a Blind SQL Injection vulnerability, allowing unauthenticated attackers to execute arbitrary SQL commands.

Executive Summary:
A critical SQL injection vulnerability in the Amelia plugin enables unauthenticated attackers to compromise database integrity and confidentiality.

Vulnerability Details

CVE-ID: CVE-2026-57702

Affected Software: Melograno Venture Studio Amelia

Affected Versions: 0 through 2.4.2

Vulnerability: This is a Blind SQL Injection vulnerability (CWE-89) arising from the improper neutralization of special elements in SQL commands. The vulnerability is exploitable by unauthenticated remote attackers, as indicated by the CVSS vector (PR:N).

Business Impact

Successful exploitation allows an attacker to interact directly with the underlying database, potentially leading to unauthorized data exfiltration or administrative bypass. Given the CVSS score of 9.3, this represents a critical risk to business continuity and data privacy, as it permits full read access to sensitive customer or system information stored within the WordPress database.

Remediation Plan

Immediate Action: Update the Amelia plugin to the latest available version beyond 2.4.2 to incorporate the vendor's security fixes.

Proactive Monitoring: Review database query logs for unusual patterns, such as unexpected use of UNION SELECT or boolean-based inference attempts.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to block common SQL injection payloads targeting the WordPress environment.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of July 13, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is highly dangerous due to its unauthenticated, remote nature, which makes it a prime target for automated scanning tools.

Analyst Recommendation

The critical nature of this SQL injection vulnerability necessitates immediate action. Administrators must prioritize updating the Amelia plugin to a patched version to prevent potential database compromise. If an immediate update is not feasible, restrict access to the affected site or disable the plugin until a secure version is deployed.

---METADATA---
VENDOR: Daan.dev
PRODUCT: OMGF Pro
AFFECTED_VERSIONS: n/a through 5.2.6
---END_METADATA---

Description Summary:
OMGF Pro contains an unrestricted file upload vulnerability that allows an attacker to upload malicious files, potentially leading to remote code execution.

Executive Summary:
An unrestricted file upload vulnerability in Daan.dev OMGF Pro allows attackers to upload malicious files, creating a critical risk of complete system takeover.

Vulnerability Details

CVE-ID: CVE-2026-57700

Affected Software: Daan.dev OMGF Pro

Affected Versions: n/a through 5.2.6

Vulnerability: The application lacks sufficient validation on uploaded file types, allowing an unauthenticated attacker to upload arbitrary files, which may lead to the execution of malicious scripts on the server.

Business Impact

The ability to upload malicious files typically leads to Remote Code Execution (RCE), granting an attacker full control over the web server. With a critical CVSS score of 10, this vulnerability represents the highest level of risk, threatening the confidentiality, integrity, and availability of the entire host environment.

Remediation Plan

Immediate Action: Upgrade to the latest version of OMGF Pro immediately to implement proper file type validation.

Proactive Monitoring: Audit the server's uploads directory for any unauthorized or suspicious file types that deviate from expected patterns.

Compensating Controls: Configure the web server or WAF to restrict executable files from being uploaded or accessed within the application's media or upload directories.

Exploitation Status

Public Exploit Available: Not specified

Analyst Notes: As of Jun 25, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Given the critical CVSS score of 10, this vulnerability must be treated as a top-priority security incident. Administrators should immediately update the software and ensure that all temporary or permanent upload directories are properly secured against unauthorized access.

---METADATA---
VENDOR: Metagauss
PRODUCT: ProfileGrid
AFFECTED_VERSIONS: 0 through 5.9.9.6
CONFIDENCE: high
MISSING: patch
---END_METADATA---

Description Summary:
The ProfileGrid WordPress plugin contains an authentication bypass vulnerability that allows unauthenticated attackers to manipulate the password recovery process.

Executive Summary:
A critical authentication bypass flaw in the Metagauss ProfileGrid plugin could allow unauthenticated attackers to compromise user accounts via the password recovery mechanism.

Vulnerability Details

CVE-ID: CVE-2026-57697

Affected Software: Metagauss ProfileGrid

Affected Versions: 0 through 5.9.9.6

Vulnerability: The plugin is susceptible to an "Authentication Bypass Using an Alternate Path or Channel" (CWE-288). This allows an unauthenticated attacker to interact with the password recovery functionality to gain unauthorized access or control over user profiles.

Business Impact

This vulnerability poses a significant risk to site integrity and user data privacy. By bypassing authentication, attackers could take over administrative or user accounts, leading to unauthorized data access, potential site defacement, or the escalation of privileges. With a CVSS score of 7.5, this high-severity vulnerability requires immediate attention to prevent account takeover campaigns.

Remediation Plan

Immediate Action: Review your WordPress installation and ensure the ProfileGrid plugin is updated to the latest available version beyond 5.9.9.6. If a patch is not yet available, consider temporarily deactivating the plugin until a secure update is provided.

Proactive Monitoring: Monitor access and authentication logs for unusual password reset requests or unauthorized login attempts targeting administrative accounts.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to block suspicious traffic patterns directed at the password recovery endpoint.

Exploitation Status

Public Exploit Available: Unknown.

Analyst Notes: As of July 14, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is inherently dangerous due to its unauthenticated nature, making it a high-priority target for automated exploit scripts.

Analyst Recommendation

The severity of this authentication bypass necessitates prompt action. Administrators should verify their plugin version immediately and apply all available security updates. Given the potential for total account compromise, prioritize this task in your current maintenance cycle.

---METADATA---
VENDOR: LCweb
PRODUCT: PrivateContent
AFFECTED_VERSIONS: n/a through 9.9.2
---END_METADATA---

Description Summary:
LCweb PrivateContent is vulnerable to an incorrect privilege assignment flaw, potentially allowing an attacker to escalate privileges within the application.

Executive Summary:
An incorrect privilege assignment vulnerability in LCweb PrivateContent allows unauthenticated or low-privileged users to escalate their access, posing a critical security risk.

Vulnerability Details

CVE-ID: CVE-2026-57692

Affected Software: LCweb PrivateContent

Affected Versions: n/a through 9.9.2

Vulnerability: The vulnerability stems from improper handling of privilege assignments within the application logic. This flaw allows an attacker to manipulate user roles, effectively escalating privileges to gain unauthorized administrative access.

Business Impact

Successful exploitation of this vulnerability allows an attacker to gain full administrative control over the PrivateContent plugin. Given the CVSS score of 9.8, the business impact is severe, potentially resulting in complete data exfiltration, modification of user content, and the compromise of the entire WordPress environment hosting the plugin.

Remediation Plan

Immediate Action: Update LCweb PrivateContent to the latest version immediately to patch the privilege assignment logic.

Proactive Monitoring: Review system and application logs for suspicious user role changes or unauthorized administrative actions.

Compensating Controls: Implement a Web Application Firewall (WAF) rule to block suspicious requests targeting plugin-specific administrative functions.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of July 1, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

The severity of this vulnerability necessitates immediate remediation. Organizations should update their PrivateContent installation without delay to prevent unauthorized privilege escalation and maintain the integrity of their platform.

---METADATA---
VENDOR: Gurmehub
PRODUCT: POS Entegratör
AFFECTED_VERSIONS: See vendor advisory for affected versions
---END_METADATA---

Description Summary:
An unauthenticated broken access control vulnerability exists in Gurmehub POS Entegratör versions 3 and below, potentially allowing unauthorized system access.

Executive Summary:
A critical broken access control vulnerability in Gurmehub POS Entegratör allows unauthenticated attackers to bypass security restrictions and potentially gain unauthorized access to the application.

Vulnerability Details

CVE-ID: CVE-2026-57688

Affected Software: Gurmehub POS Entegratör

Affected Versions: See vendor advisory for affected versions

Vulnerability: This vulnerability involves a flaw in access control mechanisms within the POS Entegratör application. It allows an unauthenticated attacker to interact with restricted functions that should be protected by authentication requirements.

Business Impact

The exploitation of this flaw poses a significant risk to business operations, as it could lead to the unauthorized exposure of sensitive financial or transactional data. Given the CVSS score of 8.2, this vulnerability is classified as High severity and could facilitate complete unauthorized access to backend management functions, leading to potential data manipulation and system compromise.

Remediation Plan

Immediate Action: Audit the vendor's security portal for the latest security updates and apply all available patches to the POS Entegratör environment.

Proactive Monitoring: Review application access logs for unusual patterns, such as multiple unauthorized requests to sensitive administrative endpoints from unknown IP addresses.

Compensating Controls: Implement strict network-level access controls to restrict access to the POS Entegratör interface to known, trusted management segments.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of July 3, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

The severity of this broken access control issue necessitates immediate attention from IT and security teams. Administrators should prioritize verifying their current version and applying the necessary patches to neutralize the risk of unauthorized access.

---METADATA---
VENDOR: Hiroaki
PRODUCT: Custom Field Template
AFFECTED_VERSIONS: See vendor advisory for specific affected versions
---END_METADATA---

Description Summary:
A SQL injection vulnerability in the Custom Field Template plugin allows authenticated contributors to execute arbitrary database commands.

Executive Summary:
A high-severity SQL injection vulnerability in the Hiroaki Custom Field Template plugin allows authenticated contributors to compromise the underlying database.

Vulnerability Details

CVE-ID: CVE-2026-57687

Affected Software: Hiroaki Custom Field Template

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: The plugin fails to properly sanitize user-supplied input before passing it to database queries, enabling authenticated contributors to perform SQL injection attacks.

Business Impact

This vulnerability poses a significant risk to data integrity and confidentiality. With a CVSS score of 8.5, an attacker could potentially extract sensitive information, modify records, or gain unauthorized administrative access, leading to severe reputational damage and system compromise.

Remediation Plan

Immediate Action: Update the Custom Field Template plugin to the latest version provided by the vendor as soon as a security patch becomes available.

Proactive Monitoring: Review database audit logs for anomalous query patterns or unexpected administrative actions initiated by contributor-level accounts.

Compensating Controls: Deploy a Web Application Firewall (WAF) with SQL injection protection rules to filter malicious input requests targeting the application.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of July 3, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Given the high CVSS score, organizations should treat this vulnerability with urgency. Administrators must restrict the 'Contributor' role capabilities or disable the plugin until a vendor-supplied patch is verified and applied to the production environment.

---METADATA---
VENDOR: Epsiloncool
PRODUCT: WP Fast Total Search
AFFECTED_VERSIONS: <= 1.80.280
---END_METADATA---

Description Summary:
An unauthenticated SQL injection vulnerability exists in Epsiloncool WP Fast Total Search versions 1.80.280 and earlier, allowing remote attackers to manipulate database queries.

Executive Summary:
An unauthenticated SQL injection vulnerability in Epsiloncool WP Fast Total Search poses a critical risk of unauthorized database access and potential data exfiltration.

Vulnerability Details

CVE-ID: CVE-2026-57683

Affected Software: Epsiloncool WP Fast Total Search

Affected Versions: <= 1.80.280

Vulnerability: This is an unauthenticated SQL injection vulnerability occurring within the search functionality of the plugin. An attacker can execute arbitrary SQL commands by injecting malicious payloads into vulnerable search parameters without requiring prior authentication.

Business Impact

Successful exploitation of this vulnerability can lead to full database compromise, potentially resulting in the theft of sensitive user data, credentials, and site configuration details. Given the CVSS score of 9.3, this flaw represents a critical threat to data integrity and confidentiality that must be addressed immediately to prevent unauthorized access.

Remediation Plan

Immediate Action: Update the Epsiloncool WP Fast Total Search plugin to the latest available version immediately.

Proactive Monitoring: Review web server and database logs for anomalous query patterns, such as unexpected SQL syntax errors or attempts to access system tables.

Compensating Controls: Implement a Web Application Firewall (WAF) with updated rulesets designed to detect and block common SQL injection patterns targeting WordPress plugins.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of Jul 2, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw and the lack of authentication requirements, the potential for automated exploitation is high.

Analyst Recommendation

The severity of this vulnerability necessitates an immediate response. Administrators should prioritize patching the Epsiloncool WP Fast Total Search plugin across all affected environments to eliminate the risk of database compromise. Failure to update may expose the organization to significant data breach risks.

---METADATA---
VENDOR: Frontier
PRODUCT: Frontier X2
AFFECTED_VERSIONS: See vendor advisory for specific affected versions
---END_METADATA---

Description Summary:
The Frontier X2 device is vulnerable to unauthenticated Bluetooth Low Energy (BLE) read/write operations, allowing unauthorized access to critical device characteristics.

Executive Summary:
A critical security flaw in the Frontier X2 device allows unauthenticated attackers to interact with sensitive device functions via Bluetooth, bypassing all pairing and authorization requirements.

Vulnerability Details

CVE-ID: CVE-2026-5768

Affected Software: Frontier X2

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: The device fails to enforce mandatory pairing or authorization for BLE communication, allowing any unauthenticated nearby attacker to read from or write to critical GATT characteristics.

Business Impact

With a CVSS score of 8.8, this vulnerability is High severity. Unauthorized access to GATT characteristics can allow an attacker to manipulate device functionality, extract sensitive user data, or potentially cause physical device failure, impacting both user privacy and device safety.

Remediation Plan

Immediate Action: Consult the vendor for security firmware updates that mandate BLE pairing and authorization for all GATT characteristic interactions.

Proactive Monitoring: If possible, monitor for unauthorized Bluetooth connection attempts or unusual device behavior that may indicate an active BLE-based attack.

Compensating Controls: If no patch is available, disable Bluetooth functionality on the device when not in active use to mitigate the risk of proximity-based exploitation.

Exploitation Status

Public Exploit Available: False

Analyst Notes: As of June 17, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

The absence of authentication for critical BLE functions poses a direct threat to the Frontier X2 device. Users should prioritize updating the device firmware as soon as a fix is released and consider physical security measures to limit exposure to potential Bluetooth-based attackers.

---METADATA---
VENDOR: Ahmadgb
PRODUCT: GeekyBot
AFFECTED_VERSIONS: <= 1.2.5
---END_METADATA---

Description Summary:
GeekyBot is susceptible to an unauthenticated SQL injection vulnerability, allowing remote attackers to manipulate database queries.

Executive Summary:
GeekyBot versions 1.2.5 and earlier are vulnerable to unauthenticated SQL injection, which can lead to complete database compromise and unauthorized data access.

Vulnerability Details

CVE-ID: CVE-2026-57679

Affected Software: Ahmadgb GeekyBot

Affected Versions: <= 1.2.5

Vulnerability: The application fails to properly sanitize user-supplied input before including it in database queries. An unauthenticated attacker can supply malicious SQL payloads to interact directly with the backend database.

Business Impact

SQL injection is a critical vulnerability that can lead to the unauthorized disclosure, modification, or deletion of sensitive information stored in the database. Given the CVSS score of 9.3, this flaw could result in a total compromise of the application's data layer and potential escalation to full system control.

Remediation Plan

Immediate Action: Update to the latest version of GeekyBot where input sanitization has been implemented.

Proactive Monitoring: Review database query logs for suspicious patterns such as unexpected use of SQL keywords (e.g., UNION, SELECT, OR 1=1) in input fields.

Compensating Controls: Deploy a Web Application Firewall (WAF) with strict SQL injection protection rules to filter malicious payloads before they reach the application.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of Jul 2, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

This is a critical, easily exploitable vulnerability that requires immediate remediation. Users must update to the latest version of GeekyBot to protect their database from unauthorized access. If an immediate update is not possible, ensure a WAF is in place to block common SQL injection patterns.

---METADATA---
VENDOR: Novalnet
PRODUCT: Payment Gateway for WooCommerce
AFFECTED_VERSIONS: <= 12.10.3
---END_METADATA---

Description Summary:
An unauthenticated PHP object injection vulnerability exists in the Novalnet Payment Gateway for WooCommerce plugin, allowing potential remote code execution.

Executive Summary:
A critical PHP object injection vulnerability in the Novalnet Payment Gateway for WooCommerce plugin exposes unauthenticated attackers to remote code execution risks.

Vulnerability Details

CVE-ID: CVE-2026-57677

Affected Software: Novalnet Payment Gateway for WooCommerce

Affected Versions: <= 12.10.3

Vulnerability: This vulnerability involves an unauthenticated PHP object injection flaw within the payment processing logic, which can be leveraged to execute arbitrary code. The lack of authentication requirements means an attacker can trigger this exploit without prior access to the system.

Business Impact

The severity of this vulnerability is underscored by its CVSS score of 9.8, indicating a critical risk to business operations. Successful exploitation could lead to full site compromise, unauthorized access to sensitive customer payment data, and significant reputational damage due to potential data breaches.

Remediation Plan

Immediate Action: Update the Novalnet Payment Gateway for WooCommerce plugin to the latest available version immediately.

Proactive Monitoring: Review web server access logs for suspicious serialized PHP strings or unusual POST requests directed at the plugin's entry points.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to detect and block common PHP object injection payloads.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of Jul 2, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Given the critical nature of this unauthenticated remote execution vulnerability, immediate patching is mandatory. Security teams should prioritize this update to prevent unauthorized access and potential data exfiltration from the WooCommerce environment.

---METADATA---
VENDOR: Groundhogg
PRODUCT: Groundhogg
AFFECTED_VERSIONS: See vendor advisory for specific affected versions
---END_METADATA---

Description Summary:
A SQL injection vulnerability in the Groundhogg WordPress plugin allows authenticated sales representatives to execute arbitrary database queries.

Executive Summary:
A high-severity SQL injection vulnerability in the Groundhogg plugin allows authenticated sales representatives to compromise database integrity and access unauthorized information.

Vulnerability Details

CVE-ID: CVE-2026-57667

Affected Software: Groundhogg, Groundhogg

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: The vulnerability exists within the plugin’s database handling functions, allowing users with the "Sales Representative" role to inject arbitrary SQL commands. This flaw represents an authorization-level failure where input validation is insufficiently enforced for authenticated users.

Business Impact

The CVSS score of 8.5 highlights a critical risk to business operations relying on Groundhogg for CRM and marketing automation. Successful exploitation could result in the exfiltration of customer lists, lead data, or unauthorized modification of marketing workflows, severely impacting business continuity and data privacy compliance.

Remediation Plan

Immediate Action: Apply the latest security updates provided by the Groundhogg development team to remediate the vulnerable code path.

Proactive Monitoring: Monitor database query performance and logs for suspicious activity or unauthorized access patterns specifically linked to accounts with sales representative privileges.

Compensating Controls: Deploy a Web Application Firewall (WAF) to intercept and block SQL injection strings before they reach the application layer.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of June 27, 2026, there is no public information indicating active exploitation of this vulnerability. However, given that SQL injection is a well-understood attack vector, the potential for exploitation remains high.

Analyst Recommendation

Security teams must treat this vulnerability with high urgency. Ensure all plugins are updated to the latest version and perform a thorough audit of user permissions to ensure the principle of least privilege is strictly maintained.

---METADATA---
VENDOR: Zip Recipes
PRODUCT: Recipe Maker For Your Food Blog
AFFECTED_VERSIONS: See vendor advisory for specific affected versions
---END_METADATA---

Description Summary:
A SQL injection vulnerability in the Zip Recipes plugin for WordPress allows authenticated contributors to execute arbitrary database queries.

Executive Summary:
A high-severity SQL injection vulnerability in the Zip Recipes plugin allows authenticated contributors to manipulate database queries, risking unauthorized data access or modification.

Vulnerability Details

CVE-ID: CVE-2026-57663

Affected Software: Zip Recipes, Recipe Maker For Your Food Blog

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: The plugin suffers from a SQL injection vulnerability that can be triggered by a user with contributor-level permissions. This flaw allows an attacker to inject malicious SQL commands into the backend database.

Business Impact

This vulnerability poses a significant risk to the integrity and confidentiality of the WordPress database. With a CVSS score of 8.5, an attacker could potentially extract sensitive user information, modify site content, or elevate privileges, leading to complete site compromise and reputational damage.

Remediation Plan

Immediate Action: Update the Recipe Maker For Your Food Blog plugin to the latest available version as soon as a security patch is released by the vendor.

Proactive Monitoring: Review database error logs and audit trails for unusual query patterns or unexpected database access attempts originating from contributor accounts.

Compensating Controls: Implement a Web Application Firewall (WAF) with SQL injection protection rules to filter malicious traffic and block unauthorized database queries.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of June 27, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of SQL injection flaws, the potential for exploitation by malicious actors is high.

Analyst Recommendation

Given the high CVSS score, organizations should prioritize updating this plugin immediately. Restrict contributor-level access to the WordPress dashboard until a patch is applied to mitigate the risk of unauthorized database manipulation.

---METADATA---
VENDOR: Wasiliy
PRODUCT: Contest Gallery
AFFECTED_VERSIONS: See vendor advisory for specific affected versions
---END_METADATA---

Description Summary:
The Contest Gallery plugin is affected by an authenticated SQL injection vulnerability, permitting contributors to run unauthorized SQL queries.

Executive Summary:
A high-severity SQL injection vulnerability in the Contest Gallery plugin allows authenticated contributors to execute arbitrary SQL commands, potentially leading to unauthorized data access.

Vulnerability Details

CVE-ID: CVE-2026-57662

Affected Software: Wasiliy Contest Gallery

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: This flaw involves improper sanitization of database queries, allowing a contributor-level user to inject and execute arbitrary SQL commands. The vulnerability significantly lowers the barrier for an attacker to gain unauthorized access to the application's data layer.

Business Impact

With a CVSS score of 8.5, this vulnerability poses a high risk to organizational data. Exploitation could lead to the exposure of sensitive gallery information, user data, or administrative credentials, resulting in a significant security breach.

Remediation Plan

Immediate Action: Update the Contest Gallery plugin to the latest patched version provided by the developer as soon as it is released.

Proactive Monitoring: Regularly audit database access logs to identify any unauthorized or anomalous queries targeting the contest data tables.

Compensating Controls: Utilize a WAF to filter incoming requests and block attempts to inject SQL commands into the plugin’s input parameters.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of June 27, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

The severity of this vulnerability necessitates immediate action. Security teams must ensure that the Contest Gallery plugin is updated to the latest version to prevent potential exploitation and secure the database against unauthorized access.

---METADATA---
VENDOR: Stranger
PRODUCT: Paid Memberships Pro - Add Member From Admin
AFFECTED_VERSIONS: See vendor advisory for specific affected versions
---END_METADATA---

Description Summary:
An unauthenticated Cross-Site Request Forgery (CSRF) vulnerability exists in the Paid Memberships Pro - Add Member From Admin plugin.

Executive Summary:
A critical Cross-Site Request Forgery flaw in the Paid Memberships Pro - Add Member From Admin plugin allows unauthorized modification of membership data.

Vulnerability Details

CVE-ID: CVE-2026-57659

Affected Software: Stranger Paid Memberships Pro - Add Member From Admin

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: This vulnerability consists of a Cross-Site Request Forgery (CSRF) flaw that permits an unauthenticated attacker to trigger unauthorized state-changing operations. The lack of proper anti-CSRF tokens in the administrative membership addition process enables attackers to execute actions on behalf of authenticated administrators.

Business Impact

The CVSS score of 8.8 reflects the high severity of this vulnerability, as it directly impacts administrative control over membership systems. Unauthorized membership modifications can lead to financial discrepancies, loss of customer trust, and potential regulatory non-compliance regarding user data management.

Remediation Plan

Immediate Action: Update the affected plugin to the latest version provided by the vendor to ensure proper CSRF token validation is implemented.

Proactive Monitoring: Monitor administrative audit logs for unusual membership creation or modification events that do not correlate with known administrative activity.

Compensating Controls: Utilize a Web Application Firewall (WAF) to inspect and block requests that lack proper referer headers or CSRF validation tokens.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of June 27, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Security teams must treat this vulnerability with high priority. Promptly updating the plugin is the most effective way to eliminate the risk of CSRF-based attacks and ensure the continued integrity of the membership database.

---METADATA---
VENDOR: Jay
PRODUCT: Child Theme Wizard
AFFECTED_VERSIONS: See vendor advisory for specific affected versions
---END_METADATA---

Description Summary:
An unauthenticated Cross-Site Request Forgery (CSRF) vulnerability exists in the Child Theme Wizard plugin, allowing unauthorized actions to be performed on behalf of a victim.

Executive Summary:
The Child Theme Wizard plugin is vulnerable to unauthenticated CSRF attacks, which could allow an attacker to perform unauthorized administrative actions.

Vulnerability Details

CVE-ID: CVE-2026-57655

Affected Software: Jay Child Theme Wizard

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: This vulnerability is an unauthenticated Cross-Site Request Forgery (CSRF) flaw. It allows an attacker to trick an authenticated user into executing unwanted actions within the web application without their knowledge.

Business Impact

The exploitation of this vulnerability could lead to unauthorized configuration changes or administrative actions within the WordPress environment. Given the CVSS score of 8.2, this is a High severity issue that poses a significant risk to site integrity and could be leveraged to facilitate further compromise of the web application.

Remediation Plan

Immediate Action: Identify if the Child Theme Wizard plugin is currently in use and restrict access or disable the plugin until a security patch is verified and applied.

Proactive Monitoring: Review web server access logs for anomalous requests or unexpected administrative changes originating from known user sessions.

Compensating Controls: Implement a Web Application Firewall (WAF) with robust CSRF protection rules to block suspicious requests targeting plugin-specific endpoints.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of June 27, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

The presence of an unauthenticated CSRF vulnerability in a site management plugin presents a substantial risk to organizational security. Administrators should prioritize updating the component to a patched version as soon as it becomes available and audit current administrative logs for any signs of unauthorized activity.

---METADATA---
VENDOR: WP Job Portal
PRODUCT: WP Job Portal
AFFECTED_VERSIONS: See vendor advisory for specific affected versions
---END_METADATA---

Description Summary:
An SQL injection vulnerability in the WP Job Portal plugin allows authenticated contributors to execute arbitrary database queries.

Executive Summary:
The WP Job Portal plugin contains an authenticated SQL injection vulnerability that could allow attackers with contributor access to compromise the integrity and confidentiality of the application database.

Vulnerability Details

CVE-ID: CVE-2026-57653

Affected Software: WP Job Portal

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: The plugin fails to properly sanitize user-supplied input, enabling a contributor-level user to perform SQL injection. By injecting malicious queries, an attacker can interact directly with the database backend.

Business Impact

The ability to perform unauthorized database operations represents a severe threat to business continuity and data privacy. Given the CVSS score of 8.5, this vulnerability could be leveraged to dump sensitive user data or escalate privileges within the WordPress environment.

Remediation Plan

Immediate Action: Apply the latest security update from the vendor immediately to patch the affected code paths.

Proactive Monitoring: Monitor server logs for suspicious database query activity, specifically focusing on requests originating from contributor-level accounts.

Compensating Controls: Implement WAF rules to sanitize or block requests containing suspicious SQL syntax directed at the plugin's endpoints.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of June 27, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Given the high severity of this vulnerability, immediate remediation is required to prevent potential data compromise. Administrators should verify their current version and apply patches as soon as they are made available by the vendor.

---METADATA---
VENDOR: bPlugins
PRODUCT: Panorama Viewer – 360 Degree Image + Video Viewer
AFFECTED_VERSIONS: See vendor advisory for specific affected versions
---END_METADATA---

Description Summary:
The Panorama Viewer plugin for WordPress is susceptible to a Local File Inclusion (LFI) vulnerability exploitable by users with Contributor-level access.

Executive Summary:
A Local File Inclusion vulnerability in the Panorama Viewer plugin allows an authenticated Contributor to potentially read sensitive files on the host server.

Vulnerability Details

CVE-ID: CVE-2026-57647

Affected Software: bPlugins Panorama Viewer – 360 Degree Image + Video Viewer

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: This is a Local File Inclusion (LFI) vulnerability that requires the attacker to hold at least Contributor-level authentication. The flaw allows an attacker to include files from the local filesystem through the vulnerable plugin component.

Business Impact

An LFI vulnerability can lead to the exposure of configuration files, credentials, or sensitive system data, severely compromising server integrity. With a CVSS score of 7.5, this high-severity flaw requires urgent attention to prevent attackers from escalating their privileges or gaining full system control.

Remediation Plan

Immediate Action: Update the Panorama Viewer plugin to the latest version provided by bPlugins to remediate the file inclusion flaw.

Proactive Monitoring: Review file integrity logs and monitor for unusual file access requests that deviate from typical plugin behavior.

Compensating Controls: Restrict plugin access to trusted users and ensure the web server is configured with the principle of least privilege regarding file system permissions.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of June 28, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

While this vulnerability requires Contributor-level access, the potential for sensitive data exposure is significant. Administrators should verify the plugin version in use and apply the vendor-supplied update immediately, while also auditing the permissions of users with Contributor roles.

---METADATA---
VENDOR: Tribulant
PRODUCT: Newsletters
AFFECTED_VERSIONS: See vendor advisory for specific affected versions
---END_METADATA---

Description Summary:
Tribulant Newsletters plugin is vulnerable to a broken access control issue, potentially allowing unauthorized subscriber data manipulation.

Executive Summary:
A critical broken access control vulnerability in the Tribulant Newsletters plugin poses a significant risk of unauthorized data access and manipulation.

Vulnerability Details

CVE-ID: CVE-2026-57645

Affected Software: Tribulant Newsletters

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: The plugin contains a broken access control flaw within the newsletters_subscribers function. This vulnerability allows an attacker to bypass intended security restrictions to access or modify subscriber data.

Business Impact

Successful exploitation of this vulnerability could lead to the unauthorized exposure or modification of sensitive subscriber contact information. Given the CVSS score of 8.1, this flaw is categorized as high severity, posing a serious risk to data privacy, regulatory compliance, and organizational reputation.

Remediation Plan

Immediate Action: Upgrade the Tribulant Newsletters plugin to the latest available version provided by the vendor.

Proactive Monitoring: Review web server and application access logs for suspicious requests targeting the subscriber management endpoints.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to block unauthorized access attempts to plugin-specific administrative or subscriber functions.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of June 27, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

The broken access control flaw in the Tribulant Newsletters plugin requires immediate attention to prevent unauthorized data exposure. Administrators must verify their current plugin version and apply available security patches immediately to mitigate the risk of exploitation.

---METADATA---
VENDOR: MotoPress
PRODUCT: Restaurant Menu
AFFECTED_VERSIONS: See vendor advisory for specific affected versions
---END_METADATA---

Description Summary:
A SQL injection vulnerability exists in the Restaurant Menu by MotoPress plugin, allowing authenticated contributors to execute arbitrary SQL commands.

Executive Summary:
The Restaurant Menu plugin for WordPress is vulnerable to an authenticated SQL injection, posing a significant risk of unauthorized database access and data exfiltration.

Vulnerability Details

CVE-ID: CVE-2026-57644

Affected Software: MotoPress Restaurant Menu

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: This vulnerability is an SQL injection flaw that resides in the plugin's database query handling, specifically reachable by users with Contributor-level privileges. An attacker can manipulate input parameters to execute unauthorized commands against the underlying database.

Business Impact

Successful exploitation allows an attacker to bypass security controls, extract sensitive information, or potentially modify site content. With a CVSS score of 8.5, this high-severity flaw carries a substantial risk of data breach and loss of site integrity, potentially leading to long-term reputational damage.

Remediation Plan

Immediate Action: Update the Restaurant Menu plugin to the latest version provided by MotoPress as soon as a patch becomes available.

Proactive Monitoring: Review database error logs and query logs for unusual patterns or syntax that indicate attempted SQL injection attacks.

Compensating Controls: Deploy a Web Application Firewall (WAF) with updated rulesets designed to detect and block common SQL injection patterns targeting WordPress plugins.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of June 27, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

The high CVSS score of 8.5 underscores the critical nature of this vulnerability. Organizations using this plugin should prioritize the application of vendor patches immediately upon release to mitigate the risk of unauthorized database manipulation.

---METADATA---
VENDOR: Themes
PRODUCT: WP Post Author
AFFECTED_VERSIONS: See vendor advisory for specific affected versions
---END_METADATA---

Description Summary:
A SQL injection vulnerability in the WP Post Author plugin allows authenticated contributors to execute arbitrary database queries.

Executive Summary:
The WP Post Author plugin contains a high-severity SQL injection flaw that enables authenticated contributors to perform unauthorized database operations, threatening system integrity.

Vulnerability Details

CVE-ID: CVE-2026-57643

Affected Software: Themes WP Post Author

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: This vulnerability occurs when the WP Post Author plugin fails to properly sanitize input from authenticated contributors. This allows for the injection and execution of arbitrary SQL queries against the underlying database.

Business Impact

The CVSS score of 8.5 confirms the high risk associated with this vulnerability. If exploited, an attacker could compromise the database, leading to unauthorized data access, modification of site functionality, or potential privilege escalation, which could severely impact business operations.

Remediation Plan

Immediate Action: Update the WP Post Author plugin to the latest version provided by the developer as soon as it becomes available.

Proactive Monitoring: Implement rigorous log monitoring to identify unusual database activity or attempts to interact with the database through the plugin's interface.

Compensating Controls: Deploy a Web Application Firewall (WAF) to intercept and block malicious SQL traffic, providing a layer of protection until the software is patched.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of June 27, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Addressing this vulnerability is essential for maintaining the security posture of the affected site. Administrators should prioritize updating the plugin and ensure that database access controls are properly configured to limit the potential impact of similar vulnerabilities.

---METADATA---
VENDOR: BestWebSoft
PRODUCT: Gallery
AFFECTED_VERSIONS: See vendor advisory for specific affected versions
---END_METADATA---

Description Summary:
A SQL injection vulnerability in the BestWebSoft Gallery plugin allows authenticated contributors to execute arbitrary database queries.

Executive Summary:
The BestWebSoft Gallery plugin is susceptible to a high-severity SQL injection vulnerability that permits authenticated contributors to manipulate database operations, risking total data exposure.

Vulnerability Details

CVE-ID: CVE-2026-57642

Affected Software: BestWebSoft Gallery

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: The vulnerability exists due to improper input sanitization in the Gallery plugin. An authenticated user with Contributor privileges can inject malicious SQL commands, which are executed with the permissions of the database user.

Business Impact

With a CVSS score of 8.5, this vulnerability presents a critical risk to the organization's data assets. Successful exploitation could lead to unauthorized access to the database, resulting in the theft of sensitive information or the alteration of site content, which may cause significant operational and reputational harm.

Remediation Plan

Immediate Action: Apply the vendor-provided patch immediately upon release to remediate the vulnerable code path.

Proactive Monitoring: Monitor database query performance and logs for suspicious SQL syntax or unauthorized access attempts from standard user accounts.

Compensating Controls: Utilize a Web Application Firewall (WAF) to filter and block malicious SQL injection patterns before they reach the application backend.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of June 27, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

The severity of this issue necessitates immediate attention. It is recommended that administrators verify the plugin version and apply updates as a priority. If patching is delayed, temporarily disabling the plugin or restricting its usage to administrative roles is advised to mitigate exposure.

---METADATA---
VENDOR: Tomdever
PRODUCT: wpForo Forum
AFFECTED_VERSIONS: See vendor advisory for specific affected versions
---END_METADATA---

Description Summary:
A SQL injection vulnerability in the wpForo Forum plugin allows authenticated contributors to execute arbitrary database queries.

Executive Summary:
The wpForo Forum plugin contains a critical SQL injection vulnerability that allows authenticated contributors to execute malicious database queries, potentially leading to full site compromise.

Vulnerability Details

CVE-ID: CVE-2026-57636

Affected Software: Tomdever wpForo Forum

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: This is a SQL injection vulnerability within the wpForo Forum plugin, triggered by insufficient sanitization of user-supplied input. An attacker with Contributor-level authentication can exploit this flaw to manipulate database queries.

Business Impact

The exploitation of this vulnerability poses a significant risk to data integrity and confidentiality. With a CVSS score of 8.5, this high-severity flaw could allow an attacker to bypass authentication, exfiltrate sensitive user data, or modify administrative settings, resulting in severe reputational damage and potential system downtime.

Remediation Plan

Immediate Action: Update the wpForo Forum plugin to the latest version as soon as a patch is released by the vendor.

Proactive Monitoring: Review database access logs for anomalous, non-standard SQL queries or suspicious patterns originating from Contributor-level accounts.

Compensating Controls: Deploy a Web Application Firewall (WAF) with updated rulesets designed to detect and block common SQL injection payloads.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of June 27, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Given the high CVSS score, this vulnerability represents a significant risk to the security of the WordPress instance. Administrators are strongly advised to audit user permissions and restrict access to the affected plugin functions until a vendor-supplied patch is successfully applied.

---METADATA---
VENDOR: Ays
PRODUCT: Popup box
AFFECTED_VERSIONS: See vendor advisory for specific affected versions
---END_METADATA---

Description Summary:
A SQL injection vulnerability in the Ays Popup box plugin allows an authenticated administrator to execute arbitrary database commands.

Executive Summary:
An authenticated SQL injection vulnerability in the Ays Popup box plugin presents a high risk, allowing an administrator to compromise the site database through malicious query injection.

Vulnerability Details

CVE-ID: CVE-2026-57631

Affected Software: Ays Popup box

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: The plugin fails to sanitize user-supplied input in specific administrative functions, enabling an authenticated administrator to perform SQL injection attacks against the application database.

Business Impact

Exploitation of this flaw could allow an attacker to read or modify sensitive information within the database, potentially leading to data breaches or the injection of malicious content onto the website. With a CVSS score of 7.6, this vulnerability poses a high risk to the overall security posture and data confidentiality of the hosted site.

Remediation Plan

Immediate Action: Apply the latest security patch released by Ays for the Popup box plugin to address the input sanitization failure.

Proactive Monitoring: Monitor database query logs for unusual or unexpected SQL syntax, especially those originating from the plugin's administrative interface.

Compensating Controls: Utilize a Web Application Firewall (WAF) to detect and block common SQL injection patterns before they reach the application layer.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of June 28, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Security teams should prioritize updating the Popup box plugin to the latest version to remediate this vulnerability. Restricting administrative access and regularly auditing plugin configurations will further reduce the attack surface and prevent unauthorized database manipulation.

---METADATA---
VENDOR: Soflyy
PRODUCT: WP All Import
AFFECTED_VERSIONS: See vendor advisory for specific affected versions
---END_METADATA---

Description Summary:
A SQL injection vulnerability exists in the WP All Import plugin that can be exploited by an authenticated administrator to execute arbitrary database queries.

Executive Summary:
An authenticated SQL injection vulnerability in the WP All Import plugin allows an attacker with administrator privileges to manipulate the underlying database and compromise site integrity.

Vulnerability Details

CVE-ID: CVE-2026-57628

Affected Software: Soflyy WP All Import

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: The vulnerability is a SQL injection flaw where the application fails to properly sanitize input, allowing an authenticated administrator to inject malicious SQL commands into the database.

Business Impact

Successful exploitation allows an attacker to gain unauthorized access to sensitive data, modify database contents, or potentially achieve full site takeover. While requiring administrative access, the CVSS score of 7.6 indicates a high severity, as it facilitates significant escalation of privilege and data exfiltration within the WordPress environment.

Remediation Plan

Immediate Action: Update the WP All Import plugin to the latest version provided by the vendor to ensure all SQL queries are properly parameterized.

Proactive Monitoring: Enable database query logging to identify and audit suspicious or unauthorized SQL statements executing within the WordPress environment.

Compensating Controls: Implement strict database access controls and ensure the database user account used by the web application adheres to the principle of least privilege.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of June 28, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Administrators should audit their current plugin installations and apply available security updates immediately. Furthermore, ensure that administrative access to the WordPress dashboard is restricted to trusted personnel to mitigate the risk of this and similar authenticated vulnerabilities.

---METADATA---
VENDOR: ASE
PRODUCT: Admin and Site Enhancements (ASE) Pro
AFFECTED_VERSIONS: <= 8.8.5
---END_METADATA---

Description Summary:
An unauthenticated Cross-Site Scripting (XSS) vulnerability in ASE Pro allows attackers to inject malicious scripts into the web interface.

Executive Summary:
An unauthenticated Cross-Site Scripting vulnerability in ASE Pro enables attackers to execute arbitrary scripts in the context of a user's browser session.

Vulnerability Details

CVE-ID: CVE-2026-57625

Affected Software: ASE Admin and Site Enhancements (ASE) Pro

Affected Versions: <= 8.8.5

Vulnerability: This vulnerability involves improper neutralization of user-supplied input, allowing unauthenticated attackers to inject malicious JavaScript. When triggered, these scripts execute within the browser session of an unsuspecting user, such as an administrator.

Business Impact

Successful exploitation can lead to session hijacking, credential theft, or the redirection of users to malicious websites. With a CVSS score of 9.6, this vulnerability is critical as it facilitates unauthorized interaction with the application interface, potentially leading to administrative account takeover and subsequent site-wide compromise.

Remediation Plan

Immediate Action: Update the Admin and Site Enhancements (ASE) Pro plugin to the latest available version to incorporate the necessary input sanitization fixes.

Proactive Monitoring: Monitor for anomalous script tags in site content or reports of unexpected browser behavior from site administrators.

Compensating Controls: Deploy a Web Application Firewall (WAF) with robust XSS filtering rules to inspect incoming requests and block malicious script injection attempts.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of Jul 2, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

The high CVSS score reflects the ease of exploitation and the potential for significant user impact. Administrators should apply the vendor-recommended security update immediately to mitigate the risk of script injection and protect their user base from session-based attacks.

---METADATA---
VENDOR: Creative Themes
PRODUCT: Blocksy Companion Pro
AFFECTED_VERSIONS: <= 2.1.46
---END_METADATA---

Description Summary:
An unauthenticated remote code execution vulnerability in Blocksy Companion Pro allows attackers to execute arbitrary commands on the server.

Executive Summary:
A critical unauthenticated remote code execution vulnerability in the Blocksy Companion Pro plugin poses an extreme risk of complete system takeover.

Vulnerability Details

CVE-ID: CVE-2026-57624

Affected Software: Creative Themes Blocksy Companion Pro

Affected Versions: <= 2.1.46

Vulnerability: This vulnerability allows for unauthenticated remote code execution, providing an attacker with the ability to run arbitrary system commands. The flaw resides in a component of the plugin that fails to properly validate inputs, enabling full compromise without requiring any user credentials.

Business Impact

The CVSS score of 10.0 reflects the maximum severity, indicating that this vulnerability is trivial to exploit and highly damaging. Successful exploitation grants the attacker full control over the web server, which may be used to pivot deeper into the internal network, steal sensitive configuration files, or deploy persistent backdoors.

Remediation Plan

Immediate Action: Apply the latest update for Blocksy Companion Pro immediately to mitigate the remote code execution risk.

Proactive Monitoring: Conduct a thorough review of server logs for unauthorized execution commands and unexpected file system modifications.

Compensating Controls: Implement strict file permission policies and use a WAF to inspect and block suspicious traffic patterns targeting the plugin's endpoints.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of Jul 2, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

This is a critical security event that requires immediate remediation. Given the potential for complete system compromise, administrators must prioritize updating the plugin and verifying the integrity of the server environment to ensure no malicious persistence mechanisms have been established.

---METADATA---
VENDOR: BoldGrid
PRODUCT: W3 Total Cache
AFFECTED_VERSIONS: <= 2.9.4
---END_METADATA---

Description Summary:
An unauthenticated arbitrary code execution vulnerability exists in BoldGrid W3 Total Cache versions 2.9.4 and earlier, allowing remote attackers to execute commands on the server.

Executive Summary:
An unauthenticated arbitrary code execution vulnerability in BoldGrid W3 Total Cache exposes the host server to immediate risk of full system compromise by remote attackers.

Vulnerability Details

CVE-ID: CVE-2026-57623

Affected Software: BoldGrid W3 Total Cache

Affected Versions: <= 2.9.4

Vulnerability: This is an unauthenticated arbitrary code execution vulnerability, allowing an attacker to execute commands on the host server without needing any valid user credentials. The flaw resides in the handling of cache processing, which fails to properly sanitize input before execution.

Business Impact

With a CVSS score of 9.0, this vulnerability allows for complete server takeover, leading to potential data theft, malware distribution, or the use of the server in further attacks. The business impact is severe, as it provides a direct path for attackers to gain persistence and full control over the web environment.

Remediation Plan

Immediate Action: Update BoldGrid W3 Total Cache to the latest version immediately to remediate the unauthenticated code execution path.

Proactive Monitoring: Monitor server logs for suspicious process spawning, unauthorized file modifications, or unusual outbound network traffic from the web server.

Compensating Controls: Utilize a Web Application Firewall (WAF) to block malicious payloads that attempt to exploit remote code execution vulnerabilities in caching mechanisms.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of Jul 2, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the critical nature of unauthenticated remote code execution, the threat level is extremely high.

Analyst Recommendation

This vulnerability represents one of the most critical security risks possible: remote, unauthenticated code execution. All administrators using W3 Total Cache must prioritize patching to the latest version immediately to prevent unauthorized access and potential system-wide compromise.

---METADATA---
VENDOR: Arraytics
PRODUCT: Booktics
AFFECTED_VERSIONS: <= 1.0.21
---END_METADATA---

Description Summary:
An unauthenticated PHP object injection vulnerability in the Booktics plugin allows remote attackers to execute arbitrary code on affected systems.

Executive Summary:
A critical PHP object injection flaw in the Booktics plugin permits unauthenticated attackers to achieve remote code execution, threatening the integrity of the host application.

Vulnerability Details

CVE-ID: CVE-2026-57621

Affected Software: Arraytics Booktics

Affected Versions: <= 1.0.21

Vulnerability: The vulnerability is an unauthenticated PHP object injection flaw that occurs within the plugin's data handling processes. By supplying malicious serialized objects, an unauthenticated attacker can manipulate application logic to execute unauthorized code.

Business Impact

With a CVSS score of 9.8, this vulnerability represents a critical threat to the confidentiality, integrity, and availability of the affected WordPress site. An exploit could allow attackers to gain administrative control over the application, leading to total system compromise and the theft of scheduling or user data.

Remediation Plan

Immediate Action: Upgrade the Booktics plugin to the most recent version provided by Arraytics to eliminate the vulnerable code path.

Proactive Monitoring: Monitor server logs for abnormal activity, particularly requests that contain serialized PHP objects, which may indicate exploitation attempts.

Compensating Controls: Utilize a WAF to filter and block malicious input patterns often associated with PHP object injection attacks.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of Jul 2, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

This vulnerability demands immediate attention due to the ease of access for attackers and the severity of the potential impact. Administrators should apply the vendor-supplied update immediately and audit their environments for any signs of prior unauthorized access.

---METADATA---
VENDOR: SGLang
PRODUCT: SGLang
AFFECTED_VERSIONS: 8f3097e
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
The SGLang reranking endpoint is vulnerable to Remote Code Execution (RCE) because it renders user-supplied Jinja2 chat templates in an unsandboxed environment.

Executive Summary:
A critical code injection vulnerability in SGLang allows unauthenticated remote attackers to achieve Remote Code Execution by supplying malicious Jinja2 chat templates.

Vulnerability Details

CVE-ID: CVE-2026-5760

Affected Software: SGLang SGLang

Affected Versions: 8f3097e

Vulnerability: This is a code injection vulnerability (CWE-94) located in the /v1/rerank endpoint. The application improperly processes model files containing malicious Jinja2 templates using an unsandboxed environment, allowing arbitrary code execution upon rendering.

Business Impact

With a CVSS score of 9.8, this vulnerability represents a critical risk, allowing for full system compromise. An attacker could execute arbitrary commands on the host server, leading to data exfiltration, service disruption, or further lateral movement within the network infrastructure.

Remediation Plan

Immediate Action: Update the SGLang installation to the version containing the fix (commit 612785ffdcaf35552f1ed433a981d596ca9fe900).

Proactive Monitoring: Monitor server process execution logs for unexpected child processes originating from the SGLang service.

Compensating Controls: Implement a Web Application Firewall (WAF) rule to inspect and block incoming requests containing Jinja2 template syntax in the reranking endpoint payloads.

Exploitation Status

Public Exploit Available: Yes — a public proof-of-concept repository is available at https://github.com/Stuub/SGLang-0.5.9-RCE.

Analyst Notes: As of 2026-04-20, there is no confirmed active exploitation in the wild; however, per CISA's SSVC assessment a proof-of-concept exists, so exploitation risk should be treated as credible. The presence of a public PoC significantly lowers the barrier for exploitation.

Analyst Recommendation

Given the critical nature of this RCE vulnerability and the availability of a public proof-of-concept, immediate patching is required. Organizations using SGLang must ensure they are using a version where the Jinja2 environment is properly sandboxed.

---METADATA---
VENDOR: Phalcon
PRODUCT: cphalcon
AFFECTED_VERSIONS: < 5.15.0
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
A high-performance PHP framework, Phalcon, is susceptible to a denial-of-service vulnerability due to inefficient regular expression complexity.

Executive Summary:
A vulnerability in the Phalcon framework allows unauthenticated remote attackers to trigger excessive resource consumption via specially crafted regular expressions, leading to a denial-of-service.

Vulnerability Details

CVE-ID: CVE-2026-57584

Affected Software: Phalcon cphalcon

Affected Versions: < 5.15.0

Vulnerability: The framework suffers from CWE-1333, Inefficient Regular Expression Complexity. Unauthenticated attackers can submit malicious input that forces the regex engine into catastrophic backtracking, resulting in high CPU usage and service unavailability.

Business Impact

Successful exploitation results in service disruption, which can lead to significant downtime for any application relying on the Phalcon framework. With a CVSS score of 8.7, this vulnerability poses a severe threat to service availability and business continuity.

Remediation Plan

Immediate Action: Update the Phalcon framework to version 5.15.0 or later to include the fix for regex complexity.

Proactive Monitoring: Monitor server CPU utilization and error logs for signs of resource exhaustion or requests that time out during processing.

Compensating Controls: Implement rate limiting and input length restrictions at the load balancer or WAF level to mitigate the impact of complex regex-based attacks.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of July 11, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Framework-level vulnerabilities that cause resource exhaustion are easily weaponized. Administrators should treat this update with high priority to prevent potential denial-of-service attacks against production environments.

---METADATA---
VENDOR: misskey-dev
PRODUCT: misskey
AFFECTED_VERSIONS: < 2026.6.0
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
Misskey is susceptible to an authentication bypass vulnerability due to improper handling of capture-replay scenarios.

Executive Summary:
An authentication bypass vulnerability in Misskey allows remote attackers to compromise accounts via capture-replay attacks, potentially leading to full account takeover.

Vulnerability Details

CVE-ID: CVE-2026-57574

Affected Software: misskey-dev misskey

Affected Versions: < 2026.6.0

Vulnerability: This is an authentication bypass vulnerability (CWE-294) resulting from a failure to correctly validate session or authentication tokens against capture-replay attempts. The attacker does not require prior authentication to attempt this exploit.

Business Impact

With a CVSS score of 7.4, this vulnerability represents a significant threat to user account integrity. Successful exploitation could allow unauthorized actors to hijack user sessions, access private communications, and perform actions on behalf of legitimate users, severely damaging platform trust.

Remediation Plan

Immediate Action: Upgrade the Misskey platform to version 2026.6.0 or later to implement the required replay protection mechanisms.

Proactive Monitoring: Review authentication logs for anomalous patterns, such as multiple successful logins from disparate geographical locations within short timeframes.

Compensating Controls: Enforce Multi-Factor Authentication (MFA) for all users, which may mitigate the impact of session-based bypass attempts.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of July 12, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The complexity of the attack vector (requiring specific conditions) may limit immediate widespread exploitation.

Analyst Recommendation

The risk of authentication bypass poses a critical threat to the security of the Misskey federated social media platform. Administrators should apply the 2026.6.0 update immediately to ensure robust replay protection and prevent unauthorized account access.

---METADATA---
VENDOR: unclecode
PRODUCT: crawl4ai
AFFECTED_VERSIONS: < 0.9.0
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
Crawl4AI is vulnerable to Server-Side Request Forgery (SSRF) due to insufficient validation of user-supplied URLs, allowing unauthenticated attackers to probe internal network resources.

Executive Summary:
An unauthenticated SSRF vulnerability in crawl4ai allows remote attackers to force the application to make arbitrary network requests, potentially exposing internal infrastructure.

Vulnerability Details

CVE-ID: CVE-2026-57573

Affected Software: unclecode crawl4ai

Affected Versions: < 0.9.0

Vulnerability: The application is affected by CWE-918 (SSRF), which occurs when the software fails to properly sanitize URL inputs, allowing an unauthenticated attacker to interact with unintended internal or external services.

Business Impact

A CVSS score of 8.6 highlights the critical risk of this SSRF vulnerability, as it can be used to bypass perimeter defenses to scan internal networks, access cloud metadata services, or interact with non-public internal APIs. This could lead to the exposure of sensitive internal data or unauthorized interaction with backend systems that trust the crawler's host environment.

Remediation Plan

Immediate Action: Update to crawl4ai version 0.9.0 or later to implement proper URL validation and restricted request capabilities.

Proactive Monitoring: Review egress traffic logs from the server hosting crawl4ai for connections to unexpected internal IP ranges or sensitive ports.

Compensating Controls: Ensure the service runs in a restricted network environment (e.g., a sandboxed container or isolated VPC) with strictly limited outbound network access.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of July 7, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

SSRF vulnerabilities are frequently leveraged as a stepping stone for further network compromise. It is imperative that users of crawl4ai upgrade to the latest version immediately and review network egress policies to limit the potential impact of any future request-based vulnerabilities.

---METADATA---
VENDOR: Unclecode
PRODUCT: Crawl4ai
AFFECTED_VERSIONS: < 0.9.0
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
Crawl4ai is vulnerable to command injection via the Docker API, allowing unauthenticated attackers to execute arbitrary commands on the host by injecting malicious Chromium launch arguments.

Executive Summary:
A critical command injection vulnerability in Crawl4ai allows unauthenticated remote attackers to execute arbitrary code on the host system, resulting in total system compromise.

Vulnerability Details

CVE-ID: CVE-2026-57572

Affected Software: Unclecode Crawl4ai

Affected Versions: < 0.9.0

Vulnerability: The vulnerability arises because the Docker API improperly sanitizes the browser_config.extra_args parameter. An unauthenticated attacker can inject malicious Chromium switches, including --no-zygote, to redirect process execution and run arbitrary commands as the container runtime user.

Business Impact

Given the CVSS score of 10.0, this is a critical vulnerability that allows complete, unauthenticated control over the host system. Successful exploitation could lead to full data loss, complete system compromise, and the potential for the server to be used as a pivot point into the internal network, causing catastrophic reputational and operational damage.

Remediation Plan

Immediate Action: Update Crawl4ai to version 0.9.0 or later immediately to patch the Docker API input validation.

Proactive Monitoring: Monitor for suspicious processes spawning from the Crawl4ai container and review Docker API traffic for abnormal requests containing unexpected browser configuration arguments.

Compensating Controls: Ensure the container is running with minimal privileges and use a Web Application Firewall (WAF) or network policy to restrict access to the Docker API port to authorized management hosts only.

Exploitation Status

Public Exploit Available: False

Analyst Notes: As of Jul 6, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

This vulnerability is of the highest severity and requires immediate attention. Because the service is unauthenticated by default and the vulnerability allows for remote command execution, any exposed Crawl4ai instances should be isolated from the internet until the patch to version 0.9.0 is successfully applied.

---METADATA---
VENDOR: unclecode
PRODUCT: crawl4ai
AFFECTED_VERSIONS: < 0.9.0
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
A path traversal vulnerability in crawl4ai allows attackers to perform arbitrary file writes by injecting malicious filenames during the crawling process, potentially leading to remote code execution.

Executive Summary:
A critical path traversal vulnerability in the crawl4ai library enables attackers to write arbitrary files to the host system, which can be leveraged to achieve remote code execution.

Vulnerability Details

CVE-ID: CVE-2026-57571

Affected Software: unclecode crawl4ai

Affected Versions: < 0.9.0

Vulnerability: The application fails to sanitize attacker-influenced filenames during file download operations, allowing for path traversal (CWE-22) and link following (CWE-59). An unauthenticated attacker can control the destination path of downloaded files, resulting in arbitrary file write capability.

Business Impact

The ability to write arbitrary files to the filesystem with attacker-controlled content is a severe security risk that typically leads to Remote Code Execution (RCE). With a CVSS score of 9.6, this vulnerability could allow an attacker to gain full control over the server environment, leading to data exfiltration, system destruction, or further lateral movement within the network.

Remediation Plan

Immediate Action: Update the crawl4ai library to version 0.9.0 or later to ensure proper filename sanitization and directory confinement.

Proactive Monitoring: Monitor the application’s file download directories for suspicious files or unexpected modifications to system configurations.

Compensating Controls: Deploy the application within a containerized environment with strictly enforced read-only filesystem policies or restricted write permissions to minimize the impact of a successful file write.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of Jul 6, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Given the potential for remote code execution, this vulnerability should be treated with the highest urgency. Organizations utilizing crawl4ai should verify their dependency versions and apply the update to version 0.9.0 immediately to prevent unauthorized file system manipulation.

---METADATA---
VENDOR: Ollama
PRODUCT: Ollama
AFFECTED_VERSIONS: See vendor advisory for specific affected versions
---END_METADATA---

Description Summary:
An unauthenticated remote information disclosure vulnerability in the Ollama model quantization engine allows unauthorized heap memory access.

Executive Summary:
Ollama contains a high-severity unauthenticated memory disclosure vulnerability that could lead to sensitive data exposure and persistent system compromise.

Vulnerability Details

CVE-ID: CVE-2026-5757

Affected Software: Ollama Ollama

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: The vulnerability resides in the model quantization engine and allows an unauthenticated attacker to remotely read and exfiltrate heap memory. This flaw provides a direct path for extracting sensitive information without requiring valid user credentials.

Business Impact

This vulnerability is critical because it allows for unauthenticated data exfiltration, which could lead to the theft of intellectual property, API keys, or other sensitive data residing in memory. With a CVSS score of 7.5, the risk is compounded by the potential for attackers to gain a foothold for further, more destructive system-wide compromise.

Remediation Plan

Immediate Action: Update Ollama to the latest version provided by the vendor to remediate the quantization engine flaw.

Proactive Monitoring: Monitor server memory usage and network egress traffic for unusual patterns that may indicate unauthorized data extraction from the heap.

Compensating Controls: Restrict network access to the Ollama service to authorized internal IP addresses only, effectively blocking unauthenticated remote access.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of June 28, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Given the ease of access (unauthenticated) and the sensitivity of the exposed data (heap memory), this vulnerability should be patched with the highest priority. Organizations using Ollama should immediately audit their network exposure and apply the vendor’s security updates.

---METADATA---
VENDOR: pretix
PRODUCT: pretix
AFFECTED_VERSIONS: See vendor advisory for specific affected versions
---END_METADATA---

Description Summary:
A stored cross-site scripting (XSS) vulnerability in the pretix PDF editor allows execution of malicious HTML content when viewing ticket or badge layouts.

Executive Summary:
A vulnerability in the pretix PDF editor allows for malicious HTML execution, posing a significant risk of unauthorized script execution within the context of the user's session.

Vulnerability Details

CVE-ID: CVE-2026-57532

Affected Software: pretix

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: This is a stored cross-site scripting vulnerability occurring within the PDF ticket and badge layout editor. An authenticated attacker with sufficient privileges to modify layouts can inject malicious HTML, which is then executed in the browser of any user who opens the compromised layout.

Business Impact

The exploitation of this vulnerability could lead to session hijacking, unauthorized actions performed on behalf of an administrator, or the theft of sensitive data from the pretix management interface. With a CVSS score of 8.8, this flaw represents a high risk to the integrity and confidentiality of ticketing operations and associated organizational data.

Remediation Plan

Immediate Action: Identify and apply the latest security updates provided by pretix to patch the PDF editor's rendering logic.

Proactive Monitoring: Review application access logs for unusual activity within the ticket layout configuration sections and monitor for anomalous browser-side script execution.

Compensating Controls: Implement a strict Content Security Policy (CSP) to mitigate the impact of unauthorized script execution and ensure that administrative interfaces are restricted to trusted network segments.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of June 26, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Given the high severity of this XSS vulnerability, immediate attention is required to ensure the management interface remains secure. Administrators should prioritize applying vendor-supplied patches and audit existing ticket layouts for any signs of unauthorized modification.

---METADATA---
VENDOR: OWASP
PRODUCT: ZAP ViewState add-on
AFFECTED_VERSIONS: Before version 4
---END_METADATA---

Description Summary:
An insecure deserialization vulnerability in the OWASP ZAP ViewState add-on allows attackers to achieve arbitrary code execution via malicious serialized Java objects.

Executive Summary:
The OWASP ZAP ViewState add-on contains an insecure deserialization flaw that could allow an attacker to achieve arbitrary code execution on the host system.

Vulnerability Details

CVE-ID: CVE-2026-57527

Affected Software: OWASP ZAP ViewState add-on

Affected Versions: Before version 4

Vulnerability: This is an insecure deserialization vulnerability occurring when the add-on processes improperly sanitized input. An attacker who controls a proxied web server can inject a malicious serialized Java object into the javax processing flow, resulting in remote code execution.

Business Impact

Successful exploitation allows an attacker to execute arbitrary code with the privileges of the ZAP process, potentially leading to a full system compromise. With a CVSS score of 8.8, this high-severity vulnerability represents a significant risk to security testing environments where ZAP is utilized, potentially exposing sensitive internal vulnerability data and credentials.

Remediation Plan

Immediate Action: Update the ZAP ViewState add-on to version 4 or later immediately.

Proactive Monitoring: Review ZAP logs for suspicious object serialization patterns or unexpected process execution spawned by the ZAP application.

Compensating Controls: Ensure that ZAP instances are isolated from sensitive production networks and that access to the proxy interface is restricted to trusted security personnel only.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of June 27, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Security teams utilizing ZAP must prioritize upgrading the ViewState add-on. Given the severity of arbitrary code execution vulnerabilities, failing to patch this component could lead to the compromise of the testing platform and any sensitive data handled during security assessment activities.

---METADATA---
VENDOR: Cohere
PRODUCT: cohere-terrarium
AFFECTED_VERSIONS: 1.0.1
CONFIDENCE: high
MISSING: patch, exploit_status
---END_METADATA---

Description Summary:
Cohere Terrarium is vulnerable to a sandbox escape via JavaScript prototype chain traversal, allowing for arbitrary code execution with root privileges on the host process.

Executive Summary:
A critical sandbox escape vulnerability in Cohere Terrarium permits unauthenticated attackers to achieve arbitrary code execution with root-level privileges.

Vulnerability Details

CVE-ID: CVE-2026-5752

Affected Software: Cohere cohere-terrarium

Affected Versions: 1.0.1

Vulnerability: The software suffers from improper control of code generation and access control (CWE-94, CWE-284). By leveraging JavaScript prototype chain traversal, an attacker can bypass sandbox restrictions to execute commands with root privileges on the underlying host.

Business Impact

With a CVSS score of 9.3, this vulnerability represents a total compromise of the host environment. An attacker achieving root access can bypass all internal security controls, access sensitive data, or pivot into the broader network, resulting in severe operational and reputational damage.

Remediation Plan

Immediate Action: Review the official project repository for security updates and apply them immediately; if no update is available, restrict access to the Terrarium service to trusted internal networks only.

Proactive Monitoring: Monitor host process logs for suspicious spawned processes or unauthorized modifications to system files originating from the Terrarium service.

Compensating Controls: Implement strict containerization or hardware-level isolation to limit the blast radius if the sandbox is breached.

Exploitation Status

Public Exploit Available: Unknown.

Analyst Notes: As of April 14, 2026, there is no public information indicating active exploitation or a published proof-of-concept for this vulnerability. The flaw is technically sophisticated but carries a high impact due to the escalation to root privileges.

Analyst Recommendation

This vulnerability represents a significant risk to host integrity. Administrators should prioritize upgrading the affected software and ensure that the service is not exposed to the public internet until a security patch is verified and applied.

---METADATA---
VENDOR: Pagekit
PRODUCT: Pagekit CMS
AFFECTED_VERSIONS: See vendor advisory for specific affected versions
---END_METADATA---

Description Summary:
A high-severity security vulnerability has been discovered in the Pagekit CMS, which could potentially lead to unauthorized access or site compromise.

Executive Summary:
A high-severity vulnerability in the Pagekit CMS poses a critical risk to website integrity and administrative control, necessitating immediate remediation.

Vulnerability Details

CVE-ID: CVE-2026-57518

Affected Software: Pagekit CMS

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: The vulnerability affects the Pagekit CMS, a modular content management system. It potentially allows an attacker to interact with restricted functions or bypass authentication mechanisms, granting them unauthorized control over the CMS instance.

Business Impact

A successful exploit could allow an attacker to deface websites, inject malicious scripts, or exfiltrate sensitive content stored within the CMS database. With a CVSS score of 8.8, the impact on organizational reputation and site availability is severe, warranting prompt attention from security administrators.

Remediation Plan

Immediate Action: Apply the latest security update from the Pagekit project to resolve the vulnerability and secure the administrative interface.

Proactive Monitoring: Inspect web server logs for suspicious requests targeting administrative endpoints or attempts to execute unauthorized scripts.

Compensating Controls: Utilize a Web Application Firewall (WAF) to filter incoming traffic and block common attack vectors directed at the CMS application layer.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of June 27, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Administrators should act swiftly to update their Pagekit installations, as CMS-based vulnerabilities are frequently targeted by automated scanners. Ensure that all security patches are applied in a timely manner to maintain the integrity of the web presence and protect against unauthorized administrative access.

---METADATA---
VENDOR: Control Web Panel
PRODUCT: Control Web Panel
AFFECTED_VERSIONS: Before 0.9.8.1225
---END_METADATA---

Description Summary:
Control Web Panel is vulnerable to unauthenticated blind SQL injection, allowing remote attackers to achieve remote code execution via arbitrary file writes.

Executive Summary:
Control Web Panel is susceptible to a critical unauthenticated SQL injection vulnerability that permits remote code execution, posing an immediate risk of full system compromise.

Vulnerability Details

CVE-ID: CVE-2026-57517

Affected Software: Control Web Panel Control Web Panel

Affected Versions: Before 0.9.8.1225

Vulnerability: This is a blind SQL injection vulnerability occurring in the 'userRes' POST parameter. An unauthenticated attacker can manipulate database queries to write malicious files, such as PHP webshells, resulting in remote code execution.

Business Impact

With a CVSS score of 9.8, this vulnerability represents a critical threat to organizational integrity. Successful exploitation grants an attacker full control over the affected server, potentially leading to total data exfiltration, unauthorized administrative access, and the deployment of persistent backdoors within the hosting environment.

Remediation Plan

Immediate Action: Upgrade the Control Web Panel installation to version 0.9.8.1225 or later immediately.

Proactive Monitoring: Inspect web server logs for suspicious POST requests targeting the 'userRes' parameter and monitor for unauthorized files in the roundcube logs directory.

Compensating Controls: Deploy a Web Application Firewall (WAF) with strict SQL injection filtering rules to block malicious input strings targeting the vulnerable endpoint.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of Jul 1, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Given the severity of this remote code execution flaw, immediate patching is mandatory. Administrators must prioritize updating the Control Web Panel software to the latest version and perform a thorough security audit of the server to ensure no unauthorized persistence mechanisms have been established.