275613 matches found
CVE-2025-4389
CVE-2025-4389 Exploit Dettagli Pubblicato : 16 maggio 2025 Aggiornato : 17 maggio 2025 Gravità : Critico Punteggio CVSS: 9.8 CWE : CWE-434: CWE-434 Caricamento senza restrizioni di file con tipo pericoloso Versioni interessate : Tutte le versioni dalla n/a fino alla 2.6.8.1 Ricercatore :...
CVE-2025-3419
CVE-2025-3419 - WordPress Eventin = 4.0.26 - Beliebiges Datei-Lesen 🔥 Zusammenfassung der Schwachstelle Das Eventin-Plugin = 4.0.26 für WordPress enthält eine nicht authentifizierte Schwachstelle zum beliebigen Lesen von Dateien in der Funktion proxyimage. Angreifer nutzen eine unzureichende...
wpstorecart-exploit
Semplice PoC dell'exploit del plugin wpstorecart precedente alla versione 2.5.30 CVE-2012-3576 scritto in bash...
Apache-HTTP-Server-Vulnerabilities-CVE-2021-41773-and-CVE-2021-42013
Ricognizione e Sfruttamento: Vulnerabilità del Server HTTP Apache - CVE-2021-41773 e CVE-2021-42013 In questo progetto, ho documentato un processo dettagliato di penetration testing mirato alle vulnerabilità del server HTTP Apache, in particolare CVE-2021-41773 e CVE-2021-42013, che coinvolgono...
CVE-2022-1598
CVE-2022-1598 WPQA where ID is numeric and can be bruteforced! Template Nuclei: CVE-2022-1598.yaml...
CVE-2022-45354
Download Monitor = 4.7.60 - Esposizione di Informazioni Sensibili tramite API REST CVE-2022-45354:versione trovata su http://wordpress.lan Dettagli : CVE-2022-45354:versione corrispondente su http://wordpress.lan Protocollo : HTTP URL Completo :...
CVE-2026-78266
Subscriber Broken Access Control in AutomatorWP = 5.8.3 versions...
CVE-2026-78263
Unauthenticated Cross Site Scripting XSS in Event Tickets = 5.29.2.1 versions...
CVE-2026-78265
Unauthenticated PHP Object Injection in The Events Calendar = 6.17.2 versions...
CVE-2026-32563
Subscriber PHP Object Injection in ACPT Pro - Custom Post Types Plugin for WordPress = 2.0.63 versions...
CVE-2026-32560
Subscriber Local File Inclusion in MagicAI for WordPress - AI Text, Image, Chat, Code, and Voice Generator = 1.4 versions...
CVE-2019-9978-Social-Warfare-WordPress-RCE
🚀 CVE-2019-9978 – Social Warfare WordPress Plugin RCE ⚠️ HAFTUNGSAUSSCHLUSS: Dieses Repository dient nur zu Bildungs- und autorisierten Sicherheitstests. Verwenden Sie es nur auf Systemen, die Ihnen gehören oder für die Sie eine ausdrückliche schriftliche Genehmigung zum Testen haben. Unbefugter...
cve-lfi-lab
🧠 Laboratorio CVE: Simulazione Analista SOC Livello 1 CVE-2025-39507 | Local File Inclusion nel Plugin Nasa Core di WordPress 📝 Scenario: Una Giornata nel SOC È un normale lunedì. Sono connesso al dashboard del SOC, esaminando gli avvisi come al solito. Ne arriva uno che attira la mia attenzione:...
CVE-2024-4295-Poc
CVE-2024-4295-Poc CVE-2024-4295 Email Subscribers by Icegram Express editsubscriberstatus \email-subscribers\lite\includes\db\class-es-db-lists-contacts.php:616 EmailSubscribersPublic-esemailsubscribeinit \email-subscribers\lite\public\class-email-subscribers-public.php:178 WPHook-applyfilters...
CVE-2026-78282
CVE-2026-78282 affects the WordPress Stripe Payments plugin in versions
CVE-2026-78282 WordPress Stripe Payments plugin <= 2.1.2 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Stripe Payments = 2.1.2 versions...
CVE-2026-78268 WordPress Lead Generation Contact Widget & AI Chatbot: Chat Button, Phone Call, Telegram, Email – SiteLeads plugin <= 1.2.0 - Sensitive Data Exposure vulnerability
Unauthenticated Sensitive Data Exposure in Lead Generation Contact Widget & AI Chatbot: Chat Button, Phone Call, Telegram, Email – SiteLeads = 1.2.0 versions...
CVE-2026-78267 WordPress TranslatePress plugin <= 3.3.2 - Privilege Escalation vulnerability
Unauthenticated Privilege Escalation in TranslatePress = 3.3.2 versions...
CVE-2026-78267
CVE-2026-78267 is an unauthenticated privilege escalation vulnerability in the TranslatePress WordPress plugin, affecting versions 3.3.2 and earlier . With a CVSS 3.1 score of 9.8 (Critical) , the flaw is exploitable over the network with low complexity, requiring no prior authentication or user ...