99129 matches found
Duplicate Page WordPress - Stored Cross-Site Scripting
Duplicate Page WordPress plugin = 4.4.2 contains a stored cross-site scripting caused by unsanitized Duplicate Post Suffix settings in output, letting high privilege users execute malicious scripts, exploit requires high privilege user role. id: CVE-2021-24681 info: name: Duplicate Page WordPress...
AccessAlly <3.5.7 - Sensitive Information Leakage
WordPress AccessAlly plugin before 3.5.7 allows sensitive information leakage because the file "resource/frontend/product/product-shortcode.php" which is responsible for the accessallyorderform shortcode dumps serialize$SERVER, which contains all environment variables. The leakage occurs on all...
Jeg Elementor Kit < 2.5.7 - Unauthenticated Settings Update
The Jeg Elementor Kit plugin for WordPress is vulnerable to authorization bypass in various functions used to update the plugin settings in versions up to, and including, 2.5.6. Unauthenticated users can use an easily available nonce, obtained from pages edited by the plugin, to update the...
Download Monitor < 4.4.5 - SQL Injection
The Download Monitor plugin for WordPress is vulnerable to SQL injection via the 'orderby' parameter in versions before 4.4.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attacker...
Cryptocurrency Widgets Pack <= 1.8.1 - SQL Injection
Cryptocurrency Widgets Pack Plugin =1.8.1 for WordPress contains an unauthenticated SQL injection caused by unsanitized user input in database queries, letting attackers execute arbitrary SQL commands, exploit requires no authentication. id: CVE-2022-44588 info: name: Cryptocurrency Widgets Pack ...
Registrations for The Events Calendar < 2.7.5 - Authenticated Reflected Cross-Site Scripting
The Registrations for the Events Calendar WordPress plugin before 2.7.5 does not escape the v parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting id: CVE-2021-24876 info: name: Registrations for The Events Calendar 2.7.5 - Authenticated Reflected...
Images to WebP < 1.9 - Authenticated Local File Inclusion
The Images to WebP WordPress plugin before version 1.9 did not validate or sanitize the tab parameter before using it in the include function. id: CVE-2021-24644 info: name: Images to WebP 1.9 - Authenticated Local File Inclusion author: Sourabh-Sahu severity: high description: | The Images to We...
Pinterest Automatic < 4.14.4 - Unauthenticated Arbitrary Options Update
The Pinterest Automatic plugin for WordPress is vulnerable to authorization bypass due to missing capability checks on the 'wppinterestautomaticparserequest' function and the 'processform.php' script in versions up to, and including, 1.14.3. This makes it possible for unauthenticated attackers to...
WPEngine WPGraphQL 0.2.3 - Unauthenticated User Information Disclosure
An issue was discovered in the WPGraphQL 0.2.3 plugin for WordPress. By querying the 'users' RootQuery, it is possible, for an unauthenticated attacker, to retrieve all WordPress users details such as email address, role, and username. id: CVE-2019-9880 info: name: WPEngine WPGraphQL 0.2.3 -...
Yellow Pencil Visual Theme Customizer < 7.2.1 - Privilege Escalation
The WaspThemes Visual CSS Style Editor aka yellow-pencil-visual-theme-customizer plugin before 7.2.1 for WordPress allows ypoptionupdate CSRF, as demonstrated by use of ypremoteget to obtain admin access. id: CVE-2019-11886 info: name: Yellow Pencil Visual Theme Customizer 7.2.1 - Privilege...
Frontend File Manager < 21.3 - Unauthenticated File Renaming
The Frontend File Manager Plugin WordPress plugin before 21.3 allows any unauthenticated user to rename uploaded files from users. Furthermore, due to the lack of validation in the destination filename, this could allow allow them to change the content of arbitrary files on the web server id:...
Frontend File Manager Plugin <= 23.5 - Unauthenticated Arbitrary Email Sending
Frontend File Manager Plugin WordPress plugin through 23.5 contains an open relay and unauthorized file access vulnerability caused by lack of authentication and security checks, letting unauthenticated attackers send emails and access files, exploit requires no authentication. id: CVE-2026-0829...
Sneeit WP Social WordPress Plugin - Unauthenticated RCE via call_user_func
The Sneeit Framework plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 8.3 via the sneeitarticlespaginationcallback function. This is due to the function accepting user input and then passing that through calluserfunc. This makes it possible for...
ECT Home Page Products - Reflected XSS
ECT Home Page Products WordPress plugin through 1.9 contains a reflected cross-site scripting caused by lack of sanitization and escaping of a parameter before outputting it in the page, letting attackers execute malicious scripts in the context of high privilege users such as admin, exploit...
CVE-2025-6934
CVE-2025-6934 – WordPress Opal Estate Pro 익스플로잇 📖 설명 이 저장소는 CVE-2025-6934 에 대한 개념 증명PoC 익스플로잇 을 포함합니다. 이는 WordPress 플러그인: Opal Estate Pro = 1.7.5의 치명적인 취약점으로, 인증되지 않은 관리자 계정 생성 을 허용합니다. ⚠️ 면책 조항 : 이 도구는 교육 및 보안 연구 목적으로만 제공됩니다. 작성자는 어떤 오용이나 발생한 손해에 대해 책임을 지지 않습니다. 🚀 기능 readme.txt에서 플러그인 버전 자동 감지 등록...
Jquery-File-Tree-1.6.6-Path-Traversal
Jquery-File-Tree-1.6.6-Path-Traversal Jquery File Tree 1.6.6 경로 탐색Path Traversal 익스플로잇 CVE-2017-1000170 Wordpress용 jQueryFileTree This will search for all .zip and .sql files inside victim.com/backup/admin and its subpaths You must provide the dot to indicate it's an extension xpljqueryFileTree.p...
CVE-2022-1442
CVE-2022-1442 WordPress 플러그인 Metform = 2.1.3 - 부적절한 접근 제어로 인증되지 않은 사용자의 민감한 정보 노출 허용 설명 이 플러그인은 /core/forms/action.php 파일의 부적절한 접근 제어로 인해 민감한 정보가 노출되는 취약점이 있습니다. 이는 인증되지 않은 공격자가 PayPal, Stripe, Mailchimp, Hubspot, HelpScout, reCAPTCHA 등 통합된 타사 API의 모든 API 키와 비밀 키를 볼 수 있도록 악용될 수 있습니다. POC bash...
CVE-2018-7747
CVE-2018-7747 CalderaForms 1.5.9.1 XSS WordPress 플러그인 - 튜토리얼 CalderaForm은 드래그 앤 드롭으로 쉽게 양식을 만들 수 있는 WordPress 플러그인입니다. 최근 활동 중 일부 포털을 테스트할 기회가 있었는데, 그중 하나에는 이 플러그인으로 만든 문의 양식이 있었습니다. 대상 인스턴스의 사용자 지정 구성 덕분에 취약점을 발견할 수 있었습니다. 그 취약점은 단순하고 매뉴얼에 가까운 성격이라 초보자에게 몇 가지 메커니즘을 설명하기 좋은 예라고 생각합니다. 오로지 교육 목적으로...
essential-addons-for-elementor-xss-poc
🔍 Essential Addons for Elementor XSS 취약점 탐지기 🚨 중요 정보 이 도구는 보안 연구 및 패치 목적으로만 사용됩니다. 사이트에 해를 끼치는 데 사용하지 마십시오. 취약한 사이트를 발견한 경우 사이트 소유자에게 책임감 있게 보고하여 즉시 업데이트할 수 있도록 하십시오. ⚠️ 취약점 세부 정보 Essential Addons for Elementor의 반사형 XSS 취약점이 6.0.15 미만 버전을 사용하는 10만 개 이상의 웹사이트에 영향을 미칩니다. 이 취약점에는 CVE-2025-24752 가...