315348 matches found
CVE-2024-50427
CVE-2024-50427 SurveyJS: Drag & Drop WordPress Form Builder = 1.9.136 - 已验证（订阅者+）任意文件上传 描述： WordPress 插件 SurveyJS: Drag & Drop WordPress Form Builder（用于创建、样式化并嵌入多种复杂表单）在所有版本（1.9.136 及更早版本）中因缺少文件类型验证，导致存在任意文件上传漏洞。这使得经过身份验证的攻击者（具有订阅者级别及以上访问权限）能够在受影响站点的服务器上上传任意文件，从而可能实现远程代码执行。 Published: 2024-10-24...
lab-cve-2016-15042
CVE-2016-15042 – WordPress Frontend File Manager 및 N‑Media Post Front‑end Form 인증되지 않은 파일 업로드 PoC Lab 완전히 재현 가능하며, CVE-2016-15042를 검증하고 시연하기 위한 Docker화된 연구실입니다. Frontend File Manager nmedia-user-file-uploader v3.7 취약 버전 4.0 N‑Media Post Front‑end Form wp-post-frontend v1.0 취약 버전 1.1 이 저장소는 원클릭 설정...
CVE-2026-63030-CVE-2026-60137
CVE-2026-63030 & CVE-2026-60137 — wp2shell WordPress Core Pre-Auth RCE — Route Confusion + SQL Injection を連鎖させて Remote Code Execution を実現 | ---|--- CVE| CVE-2026-63030 + CVE-2026-60137 別名| wp2shell 脆弱性種別| REST API Route Confusion → SQL Injection → RCE 深刻度| 緊急（Critical） — CVSS 10.0 影響を受けるバージョン|...
CVE-2026-9691
CVE-2026-9691 CVE-2026-9691: ActiveCampaign 및 Contact Form 7, WPForms, Elementor, Ninja Forms를 위한 통합 = 1.1.1 인증되지 않은 PHP 객체 인젝션 PoC, 패치 분석 및 & 규칙...
39646
39646 WordPress プラグイン Advanced Video 1.0 - ローカルファイルインクルージョン アップデート 元のクレジットは evait security GmbH に帰属します このスクリプトは、元のエクスプロイトのより堅牢なバージョンです。...
CVE-2024-10924
CVE-2024-10924 エクスプロイト - WordPress Really Simple SSL プラグインの2FAバイパス 概要 このリポジトリには、WordPress用のReally Simple SSL プラグインの脆弱性であるCVE-2024-10924 のエクスプロイトが含まれています。これにより、攻撃者は二要素認証（2FA）のオンボーディングをバイパスし、WordPressサイトへの不正な管理者アクセスを取得できます。 脆弱性の詳細 CVE : CVE-2024-10924 影響を受けるコンポーネント :...
CVE-2024-52433
CVE-2024-52433 My Geo Posts Free = 1.2 - 認証されていないPHPオブジェクトインジェクション 説明 WordPress用プラグイン My Geo Posts Free には、バージョン 1.2 まで（1.2...
CVE-2024-11643
CVE-2024-11643 Accessibility by AllAccessible history.pushState'', '', '/'; document.forms0.submit; 사용자 등록 가능 input type="hidden" name="action" value="AllAccessi...
PT-2026-104610
Name of the Vulnerable Software and Affected Versions CoCart WordPress plugin versions prior to 4.9.7 Description The plugin fails to scope its REST API authentication filter to its own endpoints. This action disables the REST nonce protection provided by WordPress core for every route...
CVE-2026-97332: Undefined Security Weakness
The User Private Files WordPress plugin before 2.2.0 does not properly protect its stored private files on multisite installations, where the rewrite rule it relies on to route file requests through its access check is never reached, allowing unauthenticated users to retrieve other users' private...
PT-2026-104611
Name of the Vulnerable Software and Affected Versions User Private Files WordPress plugin versions prior to 2.2.0 Description On multisite installations, the plugin fails to protect stored private files because the rewrite rule used to route file requests through the access check is not reached...
CVE-2026-17005: Undefined Security Weakness
The Horizontal scrolling announcements WordPress plugin through 2.6 does not sanitise and escape one of its announcement settings before outputting it into an attribute context on the front end, allowing users granted access to the announcement management page Contributor and above, once permitte...
CVE-2026-104119: Undefined Security Weakness
The Simple Shopping Cart WordPress plugin before 5.2.6 does not escape some of its settings field values before outputting them on an admin settings page, allowing high-privilege users such as administrators to perform Stored Cross-Site Scripting attacks, which is notably impactful on multisite...
PT-2026-104606
Name of the Vulnerable Software and Affected Versions Simple Shopping Cart WordPress plugin versions prior to 5.2.6 Description Stored Cross-Site Scripting XSS occurs because the plugin fails to escape certain settings field values before they are displayed on the admin settings page. This allows...
PT-2026-104608
Name of the Vulnerable Software and Affected Versions Horizontal scrolling announcements versions prior to 2.7 Description The plugin fails to sanitize and escape an announcement setting before it is output into an attribute context on the front end. This allows users with access to the...
CVE-2026-93549: Undefined Security Weakness
The CoCart WordPress plugin before 4.9.7 does not scope its REST API authentication filter to its own endpoints, which disables WordPress core's REST nonce protection for every route, allowing an attacker to perform a cross-site request forgery attack that creates a new administrator account usin...
CVE-2026-86817: Undefined Security Weakness
The Five Star Business Profile and Schema WordPress plugin before 2.4.0 does not properly restrict the callbacks used to resolve schema field default values, allowing authenticated users with Author-level access and above to store input that discloses sensitive data, including other users' passwo...
PT-2026-104609
Name of the Vulnerable Software and Affected Versions Five Star Business Profile and Schema WordPress plugin versions prior to 2.4.0 Description Insufficient restriction of callbacks used to resolve schema field default values allows authenticated users with Author-level access and above to store...
CVE-2026-3844-Breeze-Cache-WordPress-Plugin-Remote-Code-Execution
CVE-2026-3844 – Breeze Cache WordPress 플러그인의 인증되지 않은 원격 코드 실행 -red?style=flat-square CVE-2026-3844 는 Breeze Cache WordPress 플러그인버전 ≤ 2.4.4의 심각한 인증되지 않은 임의 파일 업로드 취약점입니다. 공격자는 PHP 웹 셸을 가리키는 악의적인 태그가 포함된 댓글을 게시할 수 있습니다. 플러그인은 이 파일을 공개적으로 접근 가능한 캐시 디렉토리/wp-content/cache/breeze-extra/gravatars/에 가져와...