10105 matches found
WordPress Eventin - Event Calendar, Tickets, Registration, Booking & WooCommerce plugin <= 4.1.23 - Authenticated (Subscriber+) Privilege Escalation via map_meta_cap Filter vulnerability
WordPress Eventin - Event Calendar, Tickets, Registration, Booking & WooCommerce plugin = 4.1.23 - Authenticated Subscriber+ Privilege Escalation via mapmetacap Filter vulnerability discovered by Wordfence PRISM - Wordfence in WordPress Plugin WP Event Solution versions = 4.1.23...
CVE-2024-3217-POC
CVE-2024-3217-POC Mitre Description The WP Directory Kit plugin for WordPress is vulnerable to SQL Injection via the 'attributevalue' and 'attributeid' parameters in all versions up to, and including, 1.3.0 due to insufficient escaping on the user supplied parameter and lack of sufficient...
CVE-2023-2877
CVE-2023-2877 Formidable Forms 6.3.1 - Subscriber+ リモートコード実行 使用方法 root@kitploit: usage: CVE-2023-2877.py -h -w URL -u USERNAME -p PASSWORD -pl PLUGIN -c CMD CVE-2023-2877 - Formidable Forms 6.3.1 - Subscriber+ Remote Code Execution Script options: -h, --help show this help message and exit -w URL...
CVE-2023-5412
CVE-2023-5412 Image horizontal reel scroll slideshow = 13.2 - 認証済み（購読者+）ショートコード経由のSQLインジェクション 説明: WordPress用プラグイン「Image horizontal reel scroll...
CVE-2024-22145
CVE-2024-22145 InstaWP Connect = 0.1.0.8 - Missing Authorization to Arbitrary Options Update Subscriber+ Description: The InstaWP Connect – 1-click WP Staging & Migration plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the...
WordPress Quads Ads Manager for Google AdSense plugin 3.0.4 - Subscriber+ Ad-Selling Payment Bypass vulnerability
Subscriber+ Ad-Selling Payment Bypass vulnerability discovered by JunHee CHO in WordPress Plugin Ads by WPQuads versions 3.0.4...
WordPress MemberPress Corporate Accounts plugin <= 1.5.39 - Authenticated (Subscriber+) Privilege Escalation vulnerability
Authenticated Subscriber+ Privilege Escalation vulnerability discovered by andrea bocchetti in WordPress Plugin MemberPress Corporate Accounts versions = 1.5.39...
CVE-2026-89050 Quads Ads Manager for Google AdSense < 3.0.5 - Subscriber+ Ad-Selling Payment Bypass via Unverified Success Return URL
The Quads Ads Manager for Google AdSense WordPress plugin before 3.0.5 does not verify payment completion with the configured payment gateway before marking an ad-selling order as paid, allowing users who can place an order to obtain a paid ad placement without payment...
CVE-2026-89050
The Quads Ads Manager for Google AdSense WordPress plugin, in versions before 3.0.5 , fails to verify payment completion with the configured payment gateway before marking an ad-selling order as paid. This allows authenticated users with the Subscriber+ role who can place an order to obtain a pai...
CVE-2024-8743-PoC
CVE-2024-8743 PoC Background Proof-of-Concept script for WordPress plugin Bit File Manager version = 6.5.7 Authenticated Subscriber+ Limited JavaScript File Upload CVE-2024-8743 vulnerability Information Description: The Bit File Manager – 100% Free & Open Source File Manager and Code Editor for...
CVE-2023-2833
CVE-2023-2833 Mass Exploit Generator by Alucard0x1 This repository contains an exploit for CVE-2023-2833, a privilege escalation vulnerability in the ReviewX plugin for WordPress versions up to and including 1.6.13. Description The ReviewX plugin is vulnerable to privilege escalation, allowing a...
CVE-2024-51665
CVE-2024-51665 Magical Addons For Elementor = 1.2.1 - Authenticated Subscriber+ Server-Side Request Forgery Description: The Magical Addons For Elementor Header Footer Builder, Free Elementor Widgets, Elementor Templates Library plugin for WordPress is vulnerable to Server-Side Request Forgery in...
CVE-2024-52429
CVE-2024-52429 WP Quick Setup history.pushState'', '', '/'; document.forms0.submit;...
CVE-2024-25092
CVE-2024-25092 NextMove Lite 2.18.0 - 订阅者及以上任意插件安装/激活 描述： NextMove Lite – WooCommerce 感谢页插件 for WordPress 存在因缺少对 'xladdoninstallation' 函数的能力检查而导致的数据未授权修改漏洞，影响版本直至 2.17.0（含）。该漏洞使得经过身份验证的攻击者（具有订阅者及以上权限）能够安装并激活任意插件。 root@kitploit: Severity: medium CVE ID: CVE-2024-25092 CVSS Score: 6.5 CVSS Metrics:...
CVE-2024-7703
CVE-2024-7703 root@kitploit: CVE-2024-7703 Exploit: Stored Cross-Site Scripting XSS via SVG File Upload in ARMember WordPress Plugin Overview This repository contains a proof-of-concept PoC exploit for the vulnerability identified as CVE-2024-7703. The vulnerability affects the ARMember WordPress...
CVE-2026-88912
The rtMedia for WordPress, BuddyPress and bbPress WordPress plugin before 4.7.12 does not check ownership before changing the privacy level of an activity and its attached media, relying only on a nonce shared with every logged-in user, allowing users with a subscriber-level account or above to...
CVE-2026-88912
The rtMedia for WordPress, BuddyPress and bbPress plugin before 4.7.12 contains an IDOR -type flaw: it does not verify ownership before changing the privacy level of an activity and its attached media, relying solely on a nonce shared with every logged-in user . As a result, any user with a subsc...
CVE-2026-86406
The User Registration & Membership WordPress plugin (versions before 5.2.8 ) fails to check the capability of the user initiating a membership purchase and does not validate the submitted payment method or plan. This allows any authenticated user at the subscriber level to receive the WordPress r...
CVE-2026-52134-libiec61850
CVE-2026-52134: libiec61850 v1.6 における GOOSE リプレイおよびメッセージ鮮度処理 ステータス CVE-2026-52134 が割り当てられました。対応する CVE レコードの公開は保留中です。 影響を受ける製品 ベンダー: MZ Automation GmbH 製品: libiec61850 テスト済みバージョン: 1.6 他のバージョンのステータス: 未確認 影響を受けるファイル: src/goose/goosereceiver.c 影響を受ける関数: parseGoosePayload 概要 libiec61850 v1.6 の GOOSE...