CVE-2026-63030-CVE-2026-60137-wp2shell-poc

wp2shell — Prueba de concepto de SQLi ciega basada en tiempo en WordPress REST API → RCE Descripción pocwptot.py es una prueba de concepto PoC para explotar la vulnerabilidad de inyección SQL ciega basada en tiempo en el endpoint batch de la WordPress REST API y realizar una cadena de escalada...

CVE-2024-10470

CVE-2024-10470 WPLMS Learning Management System for WordPress = 4.962 – Unauthenticated Arbitrary File Read and Deletion Description The WPLMS Learning Management System for WordPress, WordPress LMS theme for WordPress is vulnerable to arbitrary file read and deletion due to insufficient file pat...

CVE-2022-21661-PoC

CVE-2022-21661-PoC A Python PoC of CVE-2022-21661, inspired from z92g's Go PoC Installation root@kitploit: pip3 install -r requirements.txt Usage root@kitploit: usage: main.py -h -u URL -f FILE Identify CEV-2022-21661 in Wordpress instances. options: -h, --help show this help message and exit -u...

CVE-2024-50493

CVE-2024-50493 Automatic Translation = 1.0.4 - Unauthenticated Arbitrary File Upload Description: The Automatic Translation plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in all versions up to, and including, 1.0.4. This makes it possible for...

CVE-2026-8809

CVE-2026-8809 Advanced Custom Fields: Extended = 0.9.2.5 - Unauthenticated Privilege Escalation via Validation Bypass to 'acfpostid' Parameter This critical security vulnerability CVSS 9.8 affects all versions of the popular WordPress plugin Advanced Custom Fields: Extended ACF Extended from...

CVE-2024-12877-Exploit

GO-TO CVE – CVE-2024-12877-Exploit Semana 66 | Autor: Ali Soltani soltanali0 Bienvenido a la Semana 66 de la serie GO-TO CVE , donde analizamos vulnerabilidades, estudiamos las causas raíz y demostramos técnicas prácticas de explotación en un contexto educativo y seguro. 🚨 Resumen CVE-2024-12877 ...

CVE-2024-4875

CVE-2024-4875 HT Mega – Absolute Addons For Elementor = 2.5.2 - Missing Authorization to Options Update Description: The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to unauthorized modification of data|loss of data due to a missing capability check on the...

CVE-2026-13447

abraxaslabs.tech · github.com/abraxas · @abraxasnull · CVE-2026-13447 CVE-2026-13447 — WordPress WordPress — MStore API 4.18.4 — inspireui The Mstore Api plugin for WordPress is vulnerable to Authentication Bypass via JWT Forgery in versions up to, and including, 4.20.0 This is due to missing...

CVE-2026-78159

abraxaslabs.tech · github.com/abraxas · @abraxasnull · CVE-2026-78159 CVE-2026-78159 The Events Calendar 6.17.3 — stellarwp The The Events Calendar plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 6.17.3 via the parsearray function. This is due to...

CVE-2023-6700

CVE-2023-6700 Cookie Information | Free GDPR Consent Solution = 2.0.22 - Authenticated Subscriber+ Arbitrary Options Update Description: CVE-2023-6700 The Cookie Information | Free GDPR Consent Solution plugin for WordPress is vulnerable to arbitrary option updates due to a missing capability che...

CVE-2024-30485

CVE-2024-30485 Exploit 📌 Overview CVE-2024-30485 is a high-severity vulnerability found in the Finale Lite plugin for WordPress versions = 2.18.0. The vulnerability allows authenticated users Subscriber+ to install and activate arbitrary plugins without proper authorization. Severity : HIGH CVSS...

CVE-2024-11728

CVE-2024-11728 KiviCare – Sistema de Gestión de Clínicas y Pacientes EHR Plugin de WordPress - PoC de Inyección SQL No Autenticada Este repositorio contiene un script de Prueba de Concepto PoC para explotar una vulnerabilidad de Inyección SQL en el plugin KiviCare – Sistema de Gestión de Clínicas...

CVE-2024-50485

CVE-2024-50485 Exam Matrix = 1.5 - Unauthenticated Privilege Escalation Description: The Exam Matrix plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 1.5. This is due to the plugin not properly restricting functionality that makes it possible for...

CVE-2026-87902-PoC-pwnVader

CVE-2026-87902 — Unauthenticated local file inclusion in WordPress core page-template resolution → RCE Author: pwnVader · License: MIT repository root...

CVE-2026-87902

CVE-2026-87902 — PoC: path traversal não autenticado na resolução de page-template do WordPress Arquivo do exploit: exploitlocatetemplaterce.py — Python 3.6+ stdlib only. Pipeline em um único comando: detecção segura diferencial de LFI, sem escrita →, se vulnerável, RCE via gadget pearcmd.php...

WP-CVE-2026-87902

WP CVE-2026-87902 Checker Русская версия A single-file, read-only diagnostic checker for WordPress CVE-2026-87902 and several useful compromise indicators. The script does not modify or delete anything. It checks: the installed WordPress branch and the corresponding patched release official...

wordpress-upgrade-check

wordpress-upgrade-check Read-only check of the WordPress core version of every site on a server , with the fix table for CVE-2026-87902 critical, unauthenticated; fixed in WordPress 7.1.2 on 2026-09-22 and backported to every branch down to 4.7. For web agencies and admins who look after many...

CVE-2024-51793

CVE-2024-51793 Exploit Tool Documentation 📋 Overview CVE-2024-51793 is an unauthenticated arbitrary file upload vulnerability in the Computer Repair Shop WordPress plugin versions prior to 3.8116. This vulnerability allows attackers to upload arbitrary files, including PHP webshells, without...

w3-total-cache-cve-2013-2010

w3-total-cache-cve-2013-2010 Ejecución remota de código en w3 total cache cve 2013-2010 Uso: python3 w3tcrceexploit.py -u http://example.com -p "system'whoami';" Salida: Targeting: http://example.com + Payload sent successfully. + Check the target for execution of the payload. import requests...

CVE-2026-32475

🔴 CVE-2026-32475 — Elementor Pro Subida de Archivos Sin Restricciones → RCE Vulnerabilidad crítica de subida de archivos sin restricciones en Elementor Pro Potencialmente conducente a Ejecución Remota de Código RCE ⚠️ Resumen CVE-2026-32475 es una vulnerabilidad de seguridad crítica que afecta a...