| CVE |
Vendors |
Products |
Updated |
CVSS v3.1 |
| The Fastcache by Host.it plugin for WordPress is vulnerable to Code Injection in all versions up to, and including, 1.7.4 via the `fastcache_settings[cache_cookie_exclude][]` parameter. This is due to the plugin registering the `cache_cookie_exclude` setting via `register_setting()` without a `sanitize_callback`, while `buildSiteHtaccessRules()` applies only `trim()` to each cookie value before interpolating it directly into an Apache `RewriteCond` line — a normalization that strips surrounding whitespace but leaves embedded newlines intact, allowing an attacker to break out of the capture group and append arbitrary directives. This makes it possible for authenticated attackers, with administrator-level access and above, to inject arbitrary Apache directives into the site's `.htaccess` file via `file_put_contents()`, enabling server-level configuration changes such as setting `php_value auto_prepend_file` to execute attacker-controlled PHP code on every request. |
| Wormhole.app as deployed before 2026-08-22 misconfigures the coturn TURN server and does not properly restrict TCP relay peers, allowing an unauthenticated attacker to access instance metadata or to source TCP connections from the Wormhole relay's IP. |
| In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: ISO: Fix parent socket leak in iso_conn_ready()
iso_get_sock() returns the parent socket with a reference held, which is
dropped by sock_put() once the child socket has been set up. The error
path taken when iso_sock_alloc() fails only calls release_sock() and
returns, leaking the reference and thus the parent socket itself.
Drop the reference on that path as well. |
| Improper Verification of Source of a Communication Channel vulnerability in CodePeople2 Sell Downloads sell-downloads allows Exploitation of Trusted Credentials.This issue affects Sell Downloads: from n/a through 1.2.3. |
| Unauthenticated Content Injection in Boutique <= 2.3.3 versions. |
| Unauthenticated Remote Code Execution (RCE) in Everest Backup <= 2.3.13 versions. |
| Improper Control of Generation of Code ('Code Injection') vulnerability in VillaTheme Thank You Page Customizer for WooCommerce woo-thank-you-page-customizer allows Code Injection.This issue affects Thank You Page Customizer for WooCommerce: from n/a through 1.2.3. |
| A Modbus connection feature on openPDC accepts a caller-specified destination address and port with no restriction on which internal hosts may be targeted. An authenticated user can attempt connections to arbitrary internal network destinations, revealing which destinations are reachable. With repeated attempts, an attacker may be able to map the internal network. |
| Unauthenticated Local File Inclusion in Ambient <= 1.7 versions. |
| Unauthenticated Local File Inclusion in KuteShop <= 4.2.9 versions. |
| Unauthenticated Local File Inclusion in Boutique <= 2.3.3 versions. |
| Unauthenticated Local File Inclusion in Biolife <= 3.2.3 versions. |
| Unauthenticated Local File Inclusion in TechOne <= 3.0.3 versions. |
| Unauthenticated Local File Inclusion in Armania <= 1.4.8 versions. |
| Unauthenticated Local File Inclusion in Backhoe <= 2.0 versions. |
| Unauthenticated Local File Inclusion in Ozeum <= 1.3.0 versions. |
| Unauthenticated Local File Inclusion in Flipmart <= 2.8 versions. |
| Unauthenticated Local File Inclusion in Fabius <= 1.0 versions. |
| Unauthenticated Local File Inclusion in Teoro <= 1.1 versions. |
| Unauthenticated Local File Inclusion in Kaven <= 1.2 versions. |
