tag
Admin-Account-Creation
Critical
FortiWeb `cgi-bin/fwbcgi` Path Traversal Authentication Bypass Leading to Rogue Admin Creation (CVE-2025-64446)
CVE-2025-64446·
Fortinet FortiWeb (Web Application Firewall appliance)
unpatched
Critical
AI Engine WordPress Plugin Unauthenticated MCP Token Disclosure to Admin Account Creation (CVE-2025-11749)
CVE-2025-11749·
AI Engine plugin for WordPress (mwai)
unpatched
Critical
ACF Extended (ACFE) `prepare_form()` Unauthenticated RCE via Privilege Escalation (CVE-2025-13486)
CVE-2025-13486·
Advanced Custom Fields: Extended (ACFE) — WordPress plugin
unpatched