275582 matches found
CVE-2024-5326-Poc
CVE-2024-5326 CVE-2024-5326 Post Grid Gutenberg Blocks e WordPress Blog Plugin – PostX = 4.1.2 - Autorizzazione mancante per l'aggiornamento arbitrario delle opzioni Descrizione Il plugin Post Grid Gutenberg Blocks e WordPress Blog Plugin – PostX per WordPress è vulnerabile a modifiche non...
CVE-2024-25600
CVE-2024-25600 बिना प्रमाणीकरण के रिमोट कोड निष्पादन – Bricks उपयोग: python3 bricks.py उदाहरण: python3 bricks.py https://example.org संदर्भ: https://github.com/Chocapikk/CVE-2024-25600...
CVE-2024-8522
CVE-2024-8522 LearnPress – WordPress LMS Plugin execute class-lp-course-db.php:564, LPCourseDB-getcourses Courses.php:241, LearnPress\Models\Courses::getcourses class-lp-rest-courses-v1-controller.php:502, LPJwtCoursesV1Controller-getcourses class-wp-rest-server.php:1230,...
cve-2021-29447_auto-script
CVE-2021-29447: WordPress Media Library XXE-Schwachstelle Dieses Repository beschreibt die CVE-2021-29447-Schwachstelle, einen kritischen Sicherheitsfehler in WordPress, der authentifizierte XML-External-Entity-Angriffe XXE über die Media Library ermöglichte. Es enthält außerdem ein automatisches...
CVE-2023-2732
CVE-2023-2732 Lo scanner delle vulnerabilità delle API WordPress Mstore è uno strumento potente e facile da usare progettato per identificare potenziali vulnerabilità nei siti WordPress ispezionando i loro endpoint API. Lo scanner mira ad aiutare proprietari di siti web, sviluppatori e...
CVE-2026-78477 Jawn <= 1.4.2 - Unauthenticated Privilege Escalation
The Jawn theme for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.4.2. This makes it possible for unauthenticated attackers to elevate their privileges to that of an administrator...
EUVD-2026-65300
The Jawn theme for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.4.2. This makes it possible for unauthenticated attackers to elevate their privileges to that of an administrator...
CVE-2026-78477
The Jawn theme for WordPress is vulnerable to unauthenticated privilege escalation in all versions up to and including 1.4.2 , allowing an attacker to gain administrator-level access . The CVSS 3.1 base score is 9.8 (Critical) , reflecting network-accessible, low-complexity exploitation with no r...
CVE-2026-78470 WP Project Manager Pro <= 4.0.1 - Authenticated (Subscriber+) SQL Injection
The WP Project Manager Pro plugin for WordPress is vulnerable to SQL Injection in all versions up to, and including, 4.0.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers,...
CVE-2026-78478
The Måne theme for WordPress is affected by an unauthenticated Local File Inclusion vulnerability in all versions up to and including 1.7 . An attacker can include and execute arbitrary files on the server, enabling execution of any PHP code within those files. This can be leveraged to bypass acc...
CVE-2026-78466
The Fluent Boards Pro plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to and including 2.0.11 , caused by missing validation on a user-controlled key. Authenticated attackers with Subscriber-level access or above can perform an unauthorized action. The CV...
EUVD-2026-65298
The Fluent Boards Pro plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.0.11 due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with Subscriber-level access and above, to perform an...
CVE-2026-78470
WP Project Manager Pro is a WordPress plugin vulnerable to SQL Injection in all versions up to and including 4.0.1 . The root cause is insufficient escaping on a user-supplied parameter combined with a lack of prepared statements in the existing SQL query. An authenticated attacker with Subscribe...
EUVD-2026-65303
The Mane theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.7. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypas...
EUVD-2026-65299
The WP Project Manager Pro plugin for WordPress is vulnerable to SQL Injection in all versions up to, and including, 4.0.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers,...
CVE-2026-78478 Måne <= 1.7 - Unauthenticated Local File Inclusion
The Mane theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.7. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypas...
CVE-2026-78467
...
CVE-2026-78467
The Fluent Support Pro WordPress plugin is affected by a missing capability check on a function, present in all versions up to and including 2.3.1 . An authenticated attacker with Subscriber-level access or higher can perform an unauthorized action, resulting in a low integrity impact. The CVSS 3...
EUVD-2026-65302
The Fluent Support Pro plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 2.3.1. This makes it possible for authenticated attackers, with Subscriber-level access and above, to perform an unauthorized acti...