CVE-2025-2539---File-Away-WordPress-Plugin-Arbitrary-File-Read

CVE-2025-2539 - File Away WordPress Plugin Arbitrary File Read 📋 Executive Summary CVE ID: CVE-2025-2539 Plugin: File Away Versions = 3.9.9.0.1 Vulnerability Type: Authenticated Arbitrary File Read CVSS Score: 8.5 High Exploit Availability: Public PoC Available Impact: Unauthorized file disclosur...

PT-2026-107400

The Academy LMS WordPress plugin before 4.0.0 does not verify that a quiz question belongs to the course the requesting user is authorized to access before returning that question's answer options, allowing any authenticated user with access to a single course, such as an enrolled student, to rea...

PT-2026-107397

The Geliver Akıllı Kargo Pazaryeri WordPress plugin before 3.1.1 does not prevent unauthenticated access to a log file it stores within its own web-accessible directory, into which it writes the site's carrier integration key while processing requests from unauthenticated users, allowing attacker...

PT-2026-107398

The Frontend Dashboard WordPress plugin before 3.0.0 does not perform a capability check in one of its AJAX actions, allowing authenticated users with low privileges, such as subscribers, to delete the Frontend Dashboard WordPress plugin before 3.0.0's configured profile and post form fields...

PT-2026-107411

The If-So Dynamic Content WordPress plugin before 1.10.2 does not validate the URL scheme of a request-supplied value before reflecting it into a link on an admin page, allowing attackers to execute arbitrary JavaScript in the browser of a logged-in user who opens a crafted link...

PT-2026-107408

The Magee Shortcodes WordPress plugin through 2.1.1 does not sanitise and escape user input in some of its AJAX actions, which are available to unauthenticated users, before reflecting it back in the response, leading to Reflected Cross-Site Scripting...

PT-2026-107405

The WP Coder WordPress plugin before 4.5.2 does not restrict access to its PHP code-execution feature to administrators, gating it on a content capability that the Editor role holds by default, which allows Editor-level users to save and execute arbitrary PHP code on the server and fully compromi...

PT-2026-107416

The Magee Shortcodes WordPress plugin through 2.1.1 does not restrict the recipient of some of its unauthenticated contact-form actions, allowing unauthenticated users to send arbitrary emails to any address through the site mail relay...

PT-2026-107406

The CP Media Player WordPress plugin before 1.3.4 does not perform a capability check on its settings-page handler, allowing users with only Contributor-level access to create, modify, duplicate and delete the site-wide media player configurations and change a CP Media Player WordPress plugin...

CVE-2025-9816

CVE-2025-9816 WP-Statistics 플러그인의 Stored XSS 취약점 스캐너 탐지 및 PoC "WordPress용 WP Statistics – 가장 인기 있는 개인정보 보호 친화적 분석 플러그인 플러그인은 입력 검증 및 출력 이스케이프가 충분하지 않아 14.5.4를 포함한 모든 버전에서 User-Agent 헤더를 통한 저장형 교차 사이트 스크립팅Stored Cross-Site Scripting에 취약합니다. 이로 인해 인증되지 않은 공격자가 임의의 웹 스크립트를 페이지에 주입할 수 있으며, 사용자가 해당 주입...

CVE-2023-5359

CVE-2023-5359 - W3 Total Cache Cleartext Storage Vulnerability Description CVE-2023-5359 is a cleartext storage vulnerability affecting the WordPress plugin W3 Total Cache in versions ≤ 2.7.5. This vulnerability allows remote attackers to access sensitive credentials stored in unencrypted PHP fil...

CVE-2024-1207

Booking Calendar = 9.9 - 인증되지 않은 SQL 인젝션 CVE-2024-1207 https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/booking/booking-calendar-99-unauthenticated-sql-injection POC: POST /wp-admin/admin-ajax.php HTTP/1.1 Host: vulnerablesite.com User-Agent: Mozilla/5.0 Windows NT 10.0;...

CVE-2024-13485

CVE-2024-13485 LTL Freight Quotes – ABF Freight Edition = 5.6 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause GTIDSUBSET Payload: action=enwdeditwarehouse&editid=1 AND GTIDSUBSETCONCAT0x7170787171,SELECT ELT3874=3874,1,0x717a62717...

CVE-2024-1247-PoC

CVE-2024-1247-PoC Post Saint -un -p -ru 면책 조항 이 스크립트는 교육 및 연구 목적으로만 제공됩니다. 소유하지 않았거나 테스트를 위한 명시적 허가를 받지 않은 시스템에 대한 무단 사용은 불법이며 비윤리적입니다...

Cleartext-Storage-vulnerability-CVE-2023-5359-in-W3-Total-Cache

W3 Total Cache의 Cleartext Storage 취약점 CVE-2023-5359 CVE-2023-5359에 취약한 버전 ≤2.7.5 대상 import requests import re from urllib.parse import urljoin Common paths where credentials are stored CREDENTIALPATHS = "/wp-content/plugins/w3-total-cache/ExtensionCloudFlarePlugin.php",...

CVE-2026-5513

CVE-2026-5513 https://t.me/FreeToolsCpa CVE-2026-5513 — Bookly ≤ 27.2 Stored XSS via Cookie CVE-2026-5513 — Bookly ≤ 27.2 Stored XSS via Cookie CVE CVSS Type Auth https://t.me/FreeToolsCpa CVE file In Group Overview Field Value CVE ID CVE-2026-5513 Vulnerability Stored Cross-Site Scripting XSS...

CVE-2024-10516

CVE-2024-10516 Swift Performance Lite = 2.3.7.1 - 인증되지 않은 로컬 PHP 파일 포함 via 'ajaxify' 설명 Swift Performance Lite 워드프레스 플러그인은 2.3.7.1 버전까지포함 'ajaxify' 함수를 통해 로컬 PHP 파일 포함 취약점에 노출됩니다. 이로 인해 인증되지 않은 공격자가 서버에서 임의의 파일을 포함 및 실행할 수 있으며, 해당 파일의 PHP 코드를 실행할 수 있습니다. 이는 접근 제어를 우회하고, 민감한 데이터를 획득하거나, 이미지 및 기타...

cve-2025-1323

cve-2025-1323 WP-Recall 플러그인 SQL 인젝션 ⚠️ 법적 고지 이 도구는 승인된 보안 테스트 및 교육 목적으로만 사용해야 합니다. 명시적 허가 없이 시스템에 사용하지 마십시오. 오용 시 불법 행위가 될 수 있습니다. ✅ 요구 사항 Python 3.x requests 모듈 종속성 설치: pip install requests python CVE-2025-1323.py Enter target URL e.g. https://target.com/wp-admin/admin-ajax.php:...

CVE-2026-4882

CVE-2026-4882 User Registration Advanced Fields = 1.6.20 - 인증 없이 임의 파일 업로드 설명 : User Registration Advanced Fields = 1.6.20 - 인증 없이 임의 파일 업로드 설명 WordPress용 User Registration Advanced Fields 플러그인1.6.20 이하 버전은 urafprofilepictureuploadmethodupload AJAX 액션을 통해 인증되지 않은 임의 파일 업로드에 취약합니다. 이 플러그인은 등록 양식이...

wp-file-manager-exploit-CVE-2020-25213-with-Zerologon

wp-file-manager-exploit-CVE-2020-25213-with-Zerologon 과제 프로젝트 NT205.P21.ANTT 사이버 공격 Zerologon에 취약한 Windows Server 2019를 악용하고, 클라이언트 머신에서 Garble, Chisel, Evil-WinRM, Impacket 및 취약한 WordPress 플러그인을 사용 비디오 데모: https://www.youtube.com/watch?v=t-GOHGlP1to...