CVE-2025-48148

CVE-2025-48148 StoreKeeper for WooCommerce = 14.4.4 - Upload Arbitrário de Arquivo Não Autenticado 🚀 StoreKeeper for WooCommerce = 14.4.4 - Exploit de Upload Arbitrário de Arquivo Não Autenticado 📝 Descrição O plugin StoreKeeper for WooCommerce para WordPress é vulnerável a uploads arbitrários de...

CVE-2025-8359

CVE-2025-8359 AdForest Repo: Nxploited/CVE-2025-8359 Script di exploit: CVE-2025-8359.py 📋 Descrizione CVE: CVE-2025-8359 Tipo di vulnerabilità: Bypass dell'autenticazione Prodotto interessato: AdForest - Tema WordPress per Annunci Classificati Versioni interessate: Fino alla 6.0.9 inclusa...

CVE-2025-9286

CVE-2025-9286 Appy Pie Connect for WooCommerce = 1.1.2 - Fehlende Autorisierung zu nicht authentifizierter Privilegienerweiterung ⚠️ Appy Pie Connect for WooCommerce = 1.1.2 - Fehlende Autorisierung zu nicht authentifizierter Privilegienerweiterung über resetuserpassword 📝 Beschreibung Das Plugin...

CVE-2025-6085

Make Connector shello.php ".shellexec$GET"cmd".""; ? EOF curl -k -X POST https://lab1.hacker/wp-json/wp/v2/media \ -H "IWC-API-KEY: YOURFRIENDLYKEYHERE" \ -F "[email protected]" \ -F "title=Hacker World" \ -F "description=A test file" \ -F "caption=Hacker Caption" \ Die Shell ausnutzen, soba...

CVE-2025-13595

CIBELES AI = 1.10.8 - बिना प्रमाणीकरण के मनमाना फ़ाइल अपलोड Cibeles AI WordPress प्लगइन के संस्करण 1.10.8 और उससे नीचे में actualizadorgit.php फ़ाइल में एक बिना प्रमाणीकरण वाली रिमोट कोड निष्पादन भेद्यता मौजूद है। यह फ़ाइल बिना किसी प्रमाणीकरण या प्राधिकरण जांच के HTTP के माध्यम से सीधे एक्सेस की...

Exploit_CVE-2021-24762

exploitcve-2021-24762 Dieses Repository zeigt einen Exploit für CVE-2021-24762. Es handelt sich um einen Blind-SQLi-Exploit, der in der Standardkonfiguration das Admin-Passwort ausliest. Während ich ein Labor auf Basis von WordPress mit dem PerfectSurvey-Plugin durchführte, blieb ich bei einer...

CVE-2026-74932

The WP Fastest Cache WordPress plugin before 1.5.1 does not validate the Host header before using it to build the URLs of the asset files it embeds in the pages it caches, and does not include that header in the cache key, allowing unauthenticated attackers to poison cached pages with references ...

wordpress_cropimage

WordPress Crop-Image CVE-2019-8943 Uno script python3 per WordPress Crop-Image CVE-2019-8943 Esecuzione di codice remota autenticata RCE. Installa una backdoor PHP dannosa. Per Iniziare Esecuzione del programma RCE root@kitploit: python3 wprce.py -t http://wordpress.rce/ -u admin -p password -m...

CVE-2025-23968

AI Bud – AI Content Generator, AI Chatbot, ChatGPT, Gemini, GPT-4o Das AI Bud Plugin stellt einen REST-API-Endpunkt /wp-json/ai-buddy/v1/wp/attachments bereit, der das Hochladen von Dateien in die WordPress-Mediathek ermöglicht. Die Dateilogik des Endpunkts enthält eine Dateiumbenennungsfunktion,...

CVE-2023-6036

CVE-2023-6036 POC वर्डप्रेस प्लगइन Web3 – Crypto wallet Login & NFT token gating 3.0.0 - Authentication Bypass के बारे में यह भेद्यता प्रमाणीकरण बायपास के बारे में है जो 'handleloginrequest' फ़ंक्शन और 'handleauthrequest' फ़ंक्शन में गलत प्रमाणीकरण जाँच के कारण होता है। भेद्यता मैंने लॉगिन प्रवाह...

RED_HAWK

Versione 2.0.0 Di R3D@0R2H1N A.K.A Tuhinshubhra Strumento tutto in uno per Information Gathering e Vulnerability Scanning Scansioni che puoi eseguire con RED HAWK : Scansione di base Titolo del sito NUOVO Indirizzo IP Rilevamento del server web MIGLIORATO Rilevamento CMS Rilevamento Cloudflare...

CVE-2026-74932 WP Fastest Cache 0.9.0.3 - 1.5.0 - Unauthenticated Stored XSS via Host Header Cache Poisoning

The WP Fastest Cache WordPress plugin before 1.5.1 does not validate the Host header before using it to build the URLs of the asset files it embeds in the pages it caches, and does not include that header in the cache key, allowing unauthenticated attackers to poison cached pages with references ...

CVE-2026-74932

WP Fastest Cache (WordPress plugin) versions before 1.5.1 fail to validate the Host header before using it to build URLs for asset files embedded in cached pages, and omit that header from the cache key. This allows an unauthenticated attacker to poison cached pages with references to an attacker...

cve-2026-3359-exp

CVE-2026-3359 è una vulnerabilità di SQL Injection non autenticata situata nel plugin WordPress "Form Maker" di Web10 in tutte le versioni fino alla 1.15.42. Per utilizzare questo PoC/exploit, configura prima un ambiente virtuale tramite i comandi "virtualenv name of your enviroment here" o "venv...

WordPressMassExploiter

WordPressMassExploiter Massen-Exploiter von CVE-2015-1579 für WordPress CMS Dieser Massen-Exploiter basiert auf CVE-2015-1579, entdeckt von CLAUDIO VIVIANI https://www.exploit-db.com/exploits/36554/ So funktioniert es: 1 - Ich verwende das Selenium-Framework, um die Suche bei Google durchzuführen...

sudowp-clickfunnels-zurich

SudoWP Zurich für ClickFunnels Mitwirkende: SudoWP, WP Republic Ursprüngliche Autoren: Etison, LLC Schlagwörter: clickfunnels, security-patch, legacy, landing pages, funnels, sudowp Erfordert mindestens: 4.3 Getestet bis: 6.7 Stabile Version: 0.1.1 Lizenz: GPLv2 oder später Sicherheitshinweis Die...

sudowp-adminer

SudoWP Adminer Sicherheits-Fork Mitwirkende: SudoWP, WP Republic Ursprüngliche Autoren: Frank Bültge, Inpsyde Tags: adminer, database, security, cve-2021-21311, ssrf-patch Erfordert mindestens: 5.8 Getestet bis: 6.7 Stabile Version: 1.5.0 Lizenz: GPLv2 oder später Sicherheitshinweis CVE-2021-2131...

CVE-2026-8181

CVE-2026-8181 — Burst Statistics 3.4.0 – 3.4.1.1 — प्रमाणीकरण बाईपास से व्यवस्थापक खाता अधिग्रहण भेद्यता सारांश वर्डप्रेस प्लगइन Burst Statistics संस्करण 3.4.0 से 3.4.1.1 एक अप्रमाणित प्रमाणीकरण बाईपास भेद्यता के लिए संवेदनशील है जो पूर्ण व्यवस्थापक खाता अधिग्रहण की ओर ले जाता है। यह गंभीर दोष एक...

CVE-2026-5118

CVE-2026-5118 — Divi Form Builder = 5.1.2 — Nicht authentifizierte Privilegienausweitung durch Rolleninjektion 🔥 Zusammenfassung der Sicherheitslücke Das WordPress-Plugin Divi Form Builder in Versionen = 5.1.2 ist anfällig für eine nicht authentifizierte Privilegienausweitung. Dieser kritische...

WordPress_Backup_Migration-RCE_Unauthenticated

CVE-2023-6553 — Plugin Backup Migration per WordPress - Reverse Shell Una versione estesa dell'exploit CVE-2023-6553 di Chocapikk che aggiunge una modalità reverse shell con un solo comando alla webshell interattiva originale. Vulnerabilità CVE-2023-6553 — Esecuzione remota di codice non...