WordPress WP Spell Check plugin <= 12.1 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin WP Spell Check versions = 12.1...

WordPress Simple Event Planner plugin <= 1.5.7 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Simple Event Planner versions = 1.5.7...

WordPress Sunshine Photo Cart plugin <= 3.7.1 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Sunshine Photo Cart versions = 3.7.1...

Wordpress-ebook-CVE-2016-10924

يحتوي إضافة Wordpress eBook Download 1.1 على ثغرة كشف الملفات من خلال إساءة استخدام معامل get في ملف filedownload.php. يقوم هذا السكربت باختبار عمليات مختلفة على الخادم باستخدام هذه الثغرة. الاستخدام: python pidbrute.py...

WordPress Betheme theme <= 28.5.8 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Rafie Muhammad in WordPress Theme Betheme versions = 28.5.8...

WordPress UpSolution Core plugin <= 8.44 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Rafie Muhammad in WordPress Plugin UpSolution Core versions = 8.44...

WordPress Welcart e-Commerce plugin <= 2.12.3 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Nguyen Ba Khanh - HPT Vietnam Corporation in WordPress Plugin Welcart e-Commerce versions = 2.12.3...

WordPress Featured Image from URL plugin <= 6.0.7 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by ChuongVN in WordPress Plugin Featured Image from URL versions = 6.0.7...

hdwebmobile-formula-pricing

تسعير صيغة HDWebmobile حدد سعر منتج بناءً على أرقام يدخلها العميل باستخدام صيغة -- يتم تقييمها بأمان، دون استخدام PHP's eval إطلاقًا. WordPress.org: https://wordpress.org/plugins/hdwebmobile-formula-pricing/ المتطلبات: WordPress 6.9+، WooCommerce، PHP 7.4+ الترخيص: GPLv2 أو أحدث الوصف يتيح إضافة...

WordPress Ajax Search Pro plugin <= 4.29.1 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Rafie Muhammad in WordPress Plugin Ajax Search Pro versions = 4.29.1...

WordPress tagDiv Opt-In Builder plugin <= 1.7.6 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Rafie Muhammad in WordPress Plugin tagDiv Opt-In Builder versions = 1.7.6...

WordPress tagDiv Opt-In Builder plugin <= 1.7.6 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Rafie Muhammad in WordPress Plugin tagDiv Opt-In Builder versions = 1.7.6...

WordPress JNews - Pay Writer plugin <= 12.0.1 - SQL Injection vulnerability

WordPress JNews - Pay Writer plugin = 12.0.1 - SQL Injection vulnerability discovered by Rafie Muhammad in WordPress Plugin JNews - Pay Writer versions = 12.0.1...

WordPress Media LIbrary Assistant plugin <= 3.41 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by nh4tvd in WordPress Plugin Media LIbrary Assistant versions = 3.41...

CVE-2024-13513.py

الاستخدام الاستخدام الأساسي bash python3 exploit.py -l targets.txt -e [email protected] الاستخدام المتقدم bash python3 exploit.py -l targets.txt -e [email protected] -t 100 -o /path/to/results شرح المعاملات المعامل الوصف مطلوب الافتراضي -l, --list المسار إلى ملف يحتوي على عناوين URL...

WordPress Taskbuilder plugin <= 6.0.5 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Heinrihs Skrodelis in WordPress Plugin Taskbuilder versions = 6.0.5...

WordPress Search in Place plugin <= 1.5.5 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Nixxies in WordPress Plugin Search in Place versions = 1.5.5...

WordPress 워드프레스 결제 심플페이 plugin <= 5.5.17 - Settings Change vulnerability

Settings Change vulnerability discovered by Mor Golan in WordPress Plugin 워드프레스 결제 심플페이 versions = 5.5.17...

WordPress Product Feed PRO for WooCommerce plugin <= 13.5.7 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Product Feed PRO for WooCommerce versions = 13.5.7...

CVE-2024-0235-PoC

CVE-2024-0235-PoC إضافة EventON لووردبريس قبل الإصدار 4.5.5، وإضافة EventON لووردبريس قبل الإصدار 2.2.7 لا تحتوي على التحقق من الصلاحية في إجراء AJAX، مما يسمح للمستخدمين غير المصادقين باسترداد عناوين البريد الإلكتروني لأي مستخدمين على المدونة الاستخدام: usage: CVE-2024-0235.py -h --url URL...