275629 matches found
CVE-2025-7441
CVE-2025-7441 StoryChief 1.0.42 - Beliebiger Datei-Upload Schwachstelle CVE-2025-7441 - Technische Zusammenfassung Betroffene Komponente: StoryChief WordPress-Plugin Schwachstellentyp: Nicht authentifizierter beliebiger Datei-Upload Verwundbarer Endpunkt: /wp-json/storychief/webhook Ursache: Das...
TryHack3M-Bricks-Heist
target:10.201.6.98 Enumeration root@kitploit: nmap -A 10.201.6.98 Da es ein WordPress mit dem Namen „brick by brick“ gibt und der Name dieses Raums „brick“ ist, befindet sich dort wahrscheinlich eine Schwachstelle. Also lasst uns WordPress enumerieren. root@kitploit: wpscan --url https://bricks.t...
CVE-2026-18366
CVE-2026-18366 — Events Manager 7.4.1: Escalação de Privilégios Não Autenticada para Administrador | ---|--- Produto| Events Manager plugin WordPress Versões afetadas| 7.1.0 – 7.4.0.x Versão corrigida| 7.4.1 Fraqueza| CWE-269: Improper Privilege Management Severidade| CVSS 3.1: 9.8 Crítica —...
CVE-2023-30777
CVE-2023-30777 Generatore di URL Proof of Concept PoC per una vulnerabilità XSS riflessa nel plugin Advanced Custom Fields di WordPress. PoC generato da: Alucard0x1 Crediti dell'exploit: https://patchstack.com/articles/reflected-xss-in-advanced-custom-fields-plugins-affecting-2-million-sites/...
cve-2026-63030-lab
CVE-2026-63030 — Laboratorio wp2shell RCE pre-autenticazione nel core di WordPress tramite REST API Batch Route Confusion + SQL Injection...
CVE-2021-29447-PoC
CVE-2021-29447 Prova de Conceito root@kitploit: ╔═╗╦ ╦╔═╗ ║ ╚╗╔╝║╣────2021-29447 ╚═╝ ╚╝ ╚═╝ Written By Isa Ebrahim - 0xRar on January, 2023 ═══════════════════════════════════════════════════════════════════════════ Title: Wordpress XML parsing issue in the Media Library leading to XXE Affected...
WordPress WP Project Manager plugin <= 4.0.6 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by 20kilograma in WordPress Plugin WP Project Manager versions = 4.0.6...
Wordpress-cve-CVE-2022-21661
Wordpress 5.8.2 Ambiente di vulnerabilità CVE-2022-21661 Questo ambiente è configurato con il plugin Elementor Custom Skin per testare il CVE-2022-21661. per avviare l'ambiente console wp-lab$ ./start.sh Per ottenere la password di amministratore, recupera il log dal container in esecuzione; una...
WordPress TranslatePress plugin <= 3.3.2 - Privilege Escalation vulnerability
Privilege Escalation vulnerability discovered by ChuongVN in WordPress Plugin TranslatePress versions = 3.3.2...
CVE-2026-66599
Unauthenticated Cross Site Scripting XSS in WPComplete = 2.9.5.6 versions...
CVE-2026-66587
Unauthenticated Local File Inclusion in WP Cafe Pro 3.0.15 versions...
CVE-2026-66585
Unauthenticated Sensitive Data Exposure in WP Cafe Pro 3.0.15 versions...
CVE-2026-32471
Subscriber SQL Injection in ProLancer Element = 1.4.8 versions...
CVE-2026-32477
Unauthenticated Arbitrary File Deletion in ShopBuilder Pro – Elementor WooCommerce Builder Addons = 2.2.0 versions...
CVE-2026-32558
Unauthenticated Privilege Escalation in Affiliate Pro - Affiliate Program for WooCommerce & WordPress = 8.9.1 versions...
CVE-2026-28171
Unauthenticated Arbitrary File Deletion in WooCommerce File Approval = 10.7 versions...
CVE-2026-28153
Unauthenticated Broken Access Control in Notification Master Real-Time WordPress Notifications With Email, SMS, Webhooks & More = 1.7.1 versions...
CVE-2026-28162
Unauthenticated Cross Site Scripting XSS in Events Made Easy = 3.2.5 versions...
