Security Vulnerability Summary: SonicWall SSRF, Ray Path Traversal, WordPress RCE, and more

Based on the provided webpage screenshot, here is a summary of the key vulnerability information: Vulnerability Overview 1. Ray Dashboard Logs API Path Traversal - Description: This vulnerability allows listing the contents of local Ray directories via a path traversal flaw. - Impact Scope: All users employing Ray Dashboard. - Remediation: No specific fix available yet; pending CVE assignment from MITRE. 2. Pterodactyl Panel CVE-2025-49132 Remote Code Execution - Description: This vulnerability allows unauthenticated remote code execution through improper handling of the file. - Impact Scope: Users of Pterodactyl Panel versions prior to 1.11.1. - Remediation: Upgrade to the latest version. 3. SonicWall SMA1000 WorkPlace wsproxy SSRF Remote Command Execution - Description: This vulnerability enables remote command execution via Server-Side Request Forgery (SSRF). - Impact Scope: SonicWall SMA1000 WorkPlace wsproxy service. - Remediation: No specific fix available yet; pending CVE assignment. 4. Fragnesia LPE (CVE-2026-46300) - Description: This vulnerability is a page cache replacement flaw within the Linux kernel's XFRM (IPsec) subsystem. - Impact Scope: Linux kernel users running Fragnesia. - Remediation: No specific fix available yet; pending CVE assignment. 5. Ghost CMS Remote Code Execution - Description: This vulnerability allows remote code execution through the upload of malicious themes. - Impact Scope: All users employing Ghost CMS. - Remediation: Upgrade to the latest version. 6. Joomla Content Editor Unauthenticated File Upload RCE - Description: This vulnerability enables unauthenticated file upload and subsequent remote code execution. - Impact Scope: All versions of the Joomla Content Editor extension (2.9.9.4 and earlier). - Remediation: Upgrade to the latest version. 7. Langflow Unauth RCE - Description: This vulnerability allows remote command execution via an unauthenticated RCE flaw. - Impact Scope: Langflow versions 1.9.0 and earlier. - Remediation: Upgrade to the latest version. 8. OpenCATS Installer PHP Code Injection - Description: This vulnerability allows remote command execution through PHP code injection. - Impact Scope: OpenCATS installer. - Remediation: Upgrade to the latest version. 9. WordPress WP2Shell REST API Batch Route Confusion SQLi to RCE - Description: This vulnerability allows for SQL injection leading to remote code execution via REST API batch route confusion. - Impact Scope: WordPress core versions 6.0.0–6.9.4 and 7.0.0–7.0.1. - Remediation: Upgrade to the latest version. 10. WordPress Unauthenticated RCE via Pix for WooCommerce plugin - Description: This vulnerability allows unauthenticated remote code execution through the Pix for WooCommerce plugin. - Impact Scope: WordPress users utilizing the Pix for WooCommerce plugin. - Remediation: Upgrade to the latest version. Impact Scope Ray Dashboard: All users employing Ray Dashboard. Pterodactyl Panel: Users of versions prior to 1.11.1. SonicWall SMA1000 WorkPlace: Users of the wsproxy service. Fragnesia: Linux kernel users running Fragnesia. Ghost CMS: All users employing Ghost CMS. Joomla Content Editor: All users employing the Joomla Content Editor extension (2.9.9.4 and earlier). Langflow: Users of versions 1.9.0 and earlier. OpenCATS: Users of the OpenCATS installer. WordPress: Core versions 6.0.0–6.9.4 and 7.0.0–7.0.1, as well as users of the Pix for WooCommerce plugin. Remediation Ray Dashboard: No specific fix available yet; pending CVE assignment from MITRE. Pterodactyl Panel: Upgrade to the latest version. SonicWall SMA1000 WorkPlace: No specific fix available yet; pending CVE assignment. Fragnesia: No specific fix available yet; pending CVE assignment. Ghost CMS: Upgrade to the latest version. Joomla Content Editor: Upgrade to the latest version. Langflow: Upgrade to the latest version. OpenCATS: Upgrade to the latest version. WordPress: Upgrade to the latest version. POC Code or Exploit Code No specific POC code or exploit code was provided on the page.

Goal Reached Thanks to every supporter — we hit 100%!

Security Vulnerability Summary: SonicWall SSRF, Ray Path Traversal, WordPress RCE, and more