CVE-2020-36708

CVE-2020-36708 – WordPress Epsilon Framework Function Injection PoC Überblick CVE-2020-36708 ist eine Sicherheitslücke im Epsilon Framework für WordPress, die es nicht authentifizierten Angreifern ermöglicht, über die AJAX-Aktion epsilonframeworkajaxaction beliebige PHP-Klassenmethoden aufzurufen...

CVE-2024-9061

CVE-2024-9061 WP Popup Builder – Popup-Formulare und Marketing-Lead-Generierung = 1.3.5 - Nicht authentifizierte willkürliche Shortcode-Ausführung über wpajaxnoprivshortcodeApiAdd Beschreibung Das Plugin WP Popup Builder – Popup-Formulare und Marketing-Lead-Generierung für WordPress ist anfällig...

CVE-2023-6985

CVE-2023-6985 10Web AI Assistant – AI content writing assistant = 1.0.18 - Mancanza di autorizzazione per l'installazione/attivazione arbitraria di plugin per utenti autenticati Subscriber+ Descrizione Il plugin 10Web AI Assistant – AI content writing assistant per WordPress è vulnerabile alla...

CVE-2023-30486

CVE-2023-30486 Square = 2.0.0 - Autorizzazione mancante tramite activateplugin Descrizione Il tema Square per WordPress è vulnerabile all'attivazione non autorizzata di plugin a causa della mancanza di un controllo delle capacità sulla funzione activateplugin chiamata tramite un'azione AJAX nelle...

CVE-2024-12252

SEO LAT Auto Post = 2.2.1 - Esecuzione di codice remoto Descrizione Il plugin SEO LAT Auto Post per WordPress è vulnerabile alla sovrascrittura di file a causa di una mancata verifica delle capability sull'azione AJAX remoteupdate in tutte le versioni fino alla 2.2.1 inclusa. Ciò consente ad...

CVE-2025-0316-Exploit

CVE-2025-0316-Exploit Boîte à outils d'exploitation CVE-2025-0316 🚨 Exploit de contournement d'authentification pour le plugin WordPress WP Directorybox Manager 🔥 Script d'exploitation automatisé pour CVE-2025-0316 — Contournement d'authentification via une action AJAX vulnérable. ⚠️ Avis légal Ce...

CVE-2024-12849-Poc

CVE-2024-12849-Poc 📜 Descrizione Il plugin Error Log Viewer By WP Guru per WordPress è vulnerabile alla Lettura Arbitraria di File in tutte le versioni fino alla 1.0.1.3 inclusa tramite l'azione AJAX wpajaxnoprivelvwplogdownload. Ciò consente ad attaccanti non autenticati di leggere il contenuto ...

CVE-2022-0739-Exploitation

CVE-2022-0739-Exploitation Eine Ausnutzung von CVE-2022-0739. Es geht um das BookingPress WordPress-Plugin vor Version 1.0.11. Durch die Verwendung der AJAX-Aktion bookingpressfrontgetcategoryservices verfügbar für nicht authentifizierte Benutzer, was zu einer nicht authentifizierten SQL-Injectio...

CVE-2025-4380

CVE-2025-4380 - Plugin Ads Pro = 4.89 - Exploit di Local File Inclusion LFI Descrizione Questo exploit in Python prende di mira il plugin Ads Pro ≤ 4.89 per WordPress, vulnerabile a Local File Inclusion LFI tramite l'azione AJAX bsapreviewcallback. Un attaccante non autenticato può sfruttare ques...

CVE-2024-10958-WPPA-Exploit

WordPress WP Photo Album Plus Arbitrary Shortcode Execution CVE-2024-10958 Codice PoC per la vulnerabilità di esecuzione arbitraria di shortcode non autenticata presente nel plugin WordPress WP Photo Album Plus. Dettagli Versioni interessate: = 8.8.08.007 Punteggio CVSS: 7.3 Alto Tipo di...

CVE-2025-13486-POC

CVE-2025-13486 Prova de Conceito Uma exploração de Prova de Conceito PoC para CVE-2025-13486, uma vulnerabilidade de Execução Remota de Código no plugin WordPress Advanced Custom Fields: Extended ACFE. Visão Geral da Vulnerabilidade Esta vulnerabilidade existe nas versões 0.9.0.5 a 0.9.1.1 do ACF...

EUVD-2026-66285

The Return Refund and Exchange For WooCommerce WordPress plugin before 4.6.4 does not correctly verify the ownership of guest orders in some of the AJAX actions it exposes to unauthenticated users, allowing them to read private order messages, post messages and attachments in the customer's name,...

CVE-2026-19632

The TranslatePress – Translate Multilingual sites with AI Translation plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.3.1 via the 'trpgettranslationsregular' AJAX action. This makes it possible for unauthenticated attackers to extract t...

CVE-2026-19632 TranslatePress – Multilingual <= 3.3.1 - Unauthenticated Account Takeover via Password Reset Link Disclosure

The TranslatePress – Translate Multilingual sites with AI Translation plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.3.1 via the 'trpgettranslationsregular' AJAX action. This makes it possible for unauthenticated attackers to extract t...

EUVD-2026-66230

The TranslatePress – Translate Multilingual sites with AI Translation plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.3.1 via the 'trpgettranslationsregular' AJAX action. This makes it possible for unauthenticated attackers to extract t...

CVE-2026-19632

CVE-2026-19632 affects the TranslatePress – Multilingual WordPress plugin (all versions ≤ 3.3.1). An unauthenticated attacker can retrieve a plaintext administrator password-reset URL via the trp_get_translations_regular AJAX action, which exposes dictionary rows from the secondary-language trans...

CVE-2024-11728

CVE-2024-11728 KiviCare – Clinic & Patient Management System EHR Plugin WordPress – PoC di SQL Injection non autenticata Questo repository contiene uno script Proof of Concept PoC per sfruttare una vulnerabilità di SQL Injection nel plugin WordPress KiviCare – Clinic & Patient Management System...

CVE-2021-24499

CVE-2021-24499 | Workreap - Freelance Marketplace and Directory WordPress Theme 2.2.2 - Caricamento File Arbitrario WordPress Theme Workreap 2.2.2 - Caricamento File Non Autenticato che Porta a Esecuzione di Codice Remota Un potente e accurato strumento di sfruttamento di massa per la vulnerabili...

WP Maps Pro (wp-google-map-gold) <= 6.1.0 - Unauthenticated Administrator Account Creation

The WP Maps Pro plugin for WordPress is vulnerable to Privilege Escalation via Administrator Account Creation in all versions up to, and including, 6.1.0. This is due to the wpgmptempaccessajax AJAX action being registered with wpajaxnopriv and protected only by a nonce check using the...

ARMember < 3.4.8 - Unauthenticated Admin Account Takeover

The ARMember WordPress plugin before 3.4.8 is vulnerable to account takeover even the administrator due to missing nonce and authorization checks in an AJAX action available to unauthenticated users, allowing them to change the password of arbitrary users by knowing their username. id:...