CVE-2024-3495-POC

CVE-2024-3495-POC Country State City Dropdown CF7 WordPress 플러그인2.7.2 이하 버전은 'cnt' 및 'sid' 매개변수를 통한 SQL 인젝션에 취약합니다. SQL 쿼리의 불충분한 이스케이프 처리와 준비 부족으로 인해 인증되지 않은 공격자가 쿼리를 추가하여 잠재적으로 민감한 데이터베이스 정보를 추출할 수 있습니다...

WordPress Media LIbrary Assistant plugin <= 3.41 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by yzx001 in WordPress Plugin Media LIbrary Assistant versions = 3.41...

reproducing-CVE-2025-1489

Воспроизведение CVE-2025-1489 Этот репозиторий моделирует воспроизведение веб-уязвимости CVE-2025-1489 в безопасной среде для демонстрации и отработки моих навыков криминалистики и анализа уязвимостей. Выявленная и воспроизведённая уязвимость — это межсайтовый скриптинг XSS с хранением в плагине...

WordPress Integration for Epos Now and WooCommerce plugin 4.6.0-4.11.1 - Unauthenticated Action Scheduler Queue Disclosure vulnerability

Unauthenticated Action Scheduler Queue Disclosure vulnerability discovered by Raphael P. Cigana in WordPress Plugin Integration for Epos Now and WooCommerce versions 4.6.0-4.11.1...

CVE-2026-97188

The String locator WordPress plugin before 2.6.8 does not restrict the classes allowed when deserializing the content of a database row saved through its database editor, allowing unauthenticated attackers to store a serialized PHP object that is instantiated when an administrator later opens and...

CVE-2026-82212

The Nexi XPay Build WordPress plugin through 7.6.2 does not correctly validate the security token on its payment notification route, accepting the request when the target order has no stored token, which allows unauthenticated attackers to mark arbitrary orders as paid, or to mark genuinely paid...

CVE-2026-82211

The Nexi XPay Build WordPress plugin through 7.6.2 does not verify the payment result supplied to several of its unauthenticated routes, allowing attackers to mark arbitrary orders as paid or failed, to cancel them, and to obtain order keys which expose guest buyers' details...

CVE-2026-105316

The Magee Shortcodes WordPress plugin through 2.1.1 does not sanitise and escape user input in some of its AJAX actions, which are available to unauthenticated users, before reflecting it back in the response, leading to Reflected Cross-Site Scripting...

CVE-2026-105322

The Magee Shortcodes WordPress plugin through 2.1.1 does not restrict the recipient of some of its unauthenticated contact-form actions, allowing unauthenticated users to send arbitrary emails to any address through the site mail relay...

CVE-2026-104953

The MPG WordPress plugin before 4.2.3 does not properly validate the structure of imported project data before using it in a database query, allowing users with the Editor role or higher to perform SQL injection attacks and read sensitive data such as password hashes...

CVE-2026-104678

The CP Media Player WordPress plugin before 1.3.4 does not perform a capability check on its settings-page handler, allowing users with only Contributor-level access to create, modify, duplicate and delete the site-wide media player configurations and change a CP Media Player WordPress plugin...

CVE-2026-103378

The Geliver Akıllı Kargo Pazaryeri WordPress plugin before 3.1.1 does not prevent unauthenticated access to a log file it stores within its own web-accessible directory, into which it writes the site's carrier integration key while processing requests from unauthenticated users, allowing attacker...

CVE-2026-104049

The Academy LMS WordPress plugin before 4.0.0 does not verify course enrollment or object ownership when returning a lesson's content through one of its REST API routes, allowing users with a self-registerable student account to read the full content of arbitrary lessons, including lessons of pai...

CVE-2026-103681

The Frontend Dashboard WordPress plugin before 3.0.0 does not perform a capability check in one of its AJAX actions, allowing authenticated users with low privileges, such as subscribers, to delete the Frontend Dashboard WordPress plugin before 3.0.0's configured profile and post form fields...

CVE-2016-15041-mainwp-dashboard

Лаборатория CVE-2016-15041 — Сохранённый XSS в MainWP Dashboard Уязвимая лаборатория для CVE-2016-15041: неаутентифицированный сохранённый XSS в плагине WordPress MainWP Dashboard версии = 3.1.2. Быстрый старт docker compose up -d --build Подождите 30 секунд для автоматической настройки...

cve-2019-14206-poc

CVE-2019-14206 — Adaptive Images for WordPress: произвольное удаление файлов 📋 Содержание 1. О уязвимости 2. Предварительные требования 3. Установка 4. Методы тестирования Быстрый тест Полный тест с Docker Тест с Nuclei Ручной тест 5. Интерпретация результатов 6. Очистка 7. Решение проблем 8. Мер...

CVE-2026-82212 Nexi XPay Build <= 7.6.2 - Unauthenticated Payment Bypass via NPG Notification Handler

The Nexi XPay Build WordPress plugin through 7.6.2 does not correctly validate the security token on its payment notification route, accepting the request when the target order has no stored token, which allows unauthenticated attackers to mark arbitrary orders as paid, or to mark genuinely paid...

EUVD-2026-94194

The Magee Shortcodes WordPress plugin through 2.1.1 does not restrict the recipient of some of its unauthenticated contact-form actions, allowing unauthenticated users to send arbitrary emails to any address through the site mail relay...

CVE-2026-86833 MetForm < 4.3.1 - Unauthenticated HTML Injection in Notification Emails via Field Shortcodes

The MetForm WordPress plugin before 4.3.1 does not sanitize or escape submitted form-field values before inserting them into the HTML body of its email notifications, allowing unauthenticated attackers to inject arbitrary markup into the administrator and submitter notification emails the site...

EUVD-2026-94193

The MetForm WordPress plugin before 4.3.1 does not sanitize or escape submitted form-field values before inserting them into the HTML body of its email notifications, allowing unauthenticated attackers to inject arbitrary markup into the administrator and submitter notification emails the site...