Latest OpenClaw news

88 new CVEs on March 31 include a CVSS 10.0 NocoBase sandbox escape to root RCE, a WordPress Everest Forms Pro RCE, five baserCMS command injections, and SQL injections in Umami and SciTokens. Eleven vulnerabilities scored 9.0 or above.

Three critical WordPress plugin flaws, all unpatched. A WooCommerce privilege escalation, a BuilderPress file inclusion, and a Profile Builder Pro SQL injection. Plus five OpenClaw command injections and a PX4 drone autopilot crash via MAVLink.