CVE-2023-6036

CVE-2023-6036 POC sobre el plugin de WordPress Web3 – Crypto wallet Login & NFT token gating 3.0.0 - Authentication Bypass Esta vulnerabilidad se trata de una omisión de autenticación debida a una comprobación incorrecta de autenticación en la función ‘handleloginrequest’ y en la función...

wordpress-CVE-2024-27956

This repository does not have a README...

CVE-2025-4796

CVE-2025-4796 eventin y actualizar el email del ponente a un email que controle. Luego, el atacante puede usar el restablecimiento de contraseña de WordPress para tomar el control de la cuenta de administrador. requisitos: python 3.8 o superior requests instalar requests: pip install requests uso...

CVE-2021-24563

CVE-2021-24563 Frontend Uploader alert/XSS/ -----------------------------124662954...

CVE-2025-14440

CVE-2025-14440 JAY Login & Register = 2.4.01 - Bypass de Autenticación mediante Cookie 🚨 JAY Login & Register = 2.4.01 - Bypass de Autenticación mediante Cookie 📝 Descripción El plugin JAY Login & Register para WordPress es vulnerable a un bypass de autenticación en versiones hasta la 2.4.01...

CVE-2025-6440

CVE-2025-6440 WooCommerce Designer Pro = 1.9.26 - Unauthenticated Arbitrary File Upload Description WooCommerce Designer Pro plugin for WordPress, used by the Pricom - Printing Company & Design Services WordPress theme, is vulnerable to arbitrary file uploads due to missing file type validation i...

CVE-2019-8942

CVE-2019-8942 y CVE-2019-8943: RCE en WordPress privilegio de autor Resumen CVE-2019-8942 es una vulnerabilidad que explota un fallo LFI combinado con la funcionalidad de carga de archivos File Upload para lograr RCE en el servidor web de WordPress con privilegios de autor. Las versiones de...

CVE-2019-9978

CVE-2019-9978 - RCE en el Plugin Social Warfare de WordPress system'cat /etc/passwd' ✅ Paso 2 – Iniciar un Servidor HTTP de Python Usa Python para servir tu payload: python3 -m http.server 8000 Esto hará que tu payload.txt sea accesible en: http://:8000/payload.txt ✅ Paso 3 – Ejecutar el Exploit...

CVE-2025-2005

CVE-2025-2005 — Front-End Users Arbitrary File Upload CVE-2025-2005 WordPress Front-End Users — Unauthenticated Arbitrary File Upload 0xZ3R0 // h4ckxel 0x00 — Executive Summary Front-End Users is affected by an unauthenticated arbitrary file upload vulnerability affecting versions ≤ 3.2.32. The...

CVE-2026-0920

CVE-2026-0920 - WordPress Plugin LA-Studio Element Kit / Unauthenticated Privilege Escalation A proof-of-concept exploit for CVE-2026-0920 , an unauthenticated privilege-escalation vulnerability in the LA-Studio Element Kit WordPress plugin. The vulnerability allows an unauthenticated attacker to...

Project-Project-Chimera-Exploiting-a-Modern-WordPress-XXE-to-Pillage-Secrets-

Objetivo del Proyecto: Demostrar una cadena de ataque completa sobre una instalación vulnerable de WordPress, explotando CVE-2021-29447 XXE en la biblioteca de medios para lograr ejecución remota de código y compromiso total del sistema. Fase 1: Reconocimiento y Enumeración Escaneo de Red con Nma...

CVE-2026-82222-MassExploit

CVE-2026-82222 — Ejecución Remota de Código No Autenticada en el Plugin GiveWP de WordPress Ejecución Remota de Código Crítica No Autenticada CVSS 9.8 — GiveWP ≤ 4.16.7.1 Esta herramienta explota CVE-2026-82222 , una vulnerabilidad en el plugin GiveWP de WordPress que permite a atacantes no...

CVE-2026-97227

The NextScripts: Social Networks Auto-Poster WordPress plugin before 4.4.8 does not perform capability or ownership checks on several of its AJAX actions, relying on a nonce alone, allowing users an administrator has granted access to its posting features to export the site's configured social...

CVE-2026-96899

The Optima Express IDX WordPress plugin before 8.7.6 does not properly neutralise a script value submitted through one of its REST endpoints before storing it and echoing it into the document head when the post is rendered, allowing users with a role as low as author to perform Stored Cross-Site...

CVE-2026-97319

The PowerPress Podcasting plugin by Blubrry WordPress plugin before 11.17.2 does not sanitize and escape a block attribute before outputting it in a page, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

CVE-2026-96897

The Optima Express IDX WordPress plugin before 8.7.6 does not perform any authorisation check on one of its AJAX actions that is available to logged-out users, allowing unauthenticated attackers to force the creation of a fixed author-role account and to repeatedly rotate its application password...

CVE-2026-89003

The WPeMatico RSS Feed Fetcher WordPress plugin before 2.8.27 does not perform a capability check before fetching a user-supplied URL and rendering the response, allowing users with contributor-level access and above to force the server to issue requests to internal-only hosts and read the...

CVE-2026-92995

The Verge3D Publishing and E-Commerce WordPress plugin through 4.13.0 does not restrict access to a file-download handler, allowing unauthenticated users to download the digital-goods files attached to any order without authorization...

CVE-2026-96895

The WP YouTube Lyte WordPress plugin before 1.7.31 does not escape some attributes of YouTube embed blocks before outputting them in an HTML attribute when rendering the block, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks...

CVE-2026-92436

The Mailchimp for WooCommerce WordPress plugin before 6.3 does not require authentication or verify ownership before loading a saved cart from a request-supplied identifier that is derived from a customer's email address, allowing an unauthenticated attacker who knows a customer's email address t...