CVE-2026-13607

The File Uploads Addon for WooCommerce WordPress plugin, in versions through 1.7.6 , is vulnerable to unauthenticated direct file access. The root cause is that customer-uploaded files are stored in a publicly web-accessible uploads directory where the plugin's intended access restrictions are in...

CVE-2026-78371

The File Uploads Addon for WooCommerce WordPress plugin versions before 1.7.6 contains a vulnerability where it fails to verify the identity of users requesting customer-uploaded files. This lack of authorization allows unauthenticated attackers to download files belonging to other customers if t...

CVE-2026-13607 File Uploads Addon for WooCommerce <= 1.7.6 - Unauthenticated Direct File Access

The File Uploads Addon for WooCommerce WordPress plugin through 1.7.6 stores customer-uploaded files in a publicly web-accessible uploads directory and the access restriction it generates is ineffective, so an unauthenticated attacker who knows or guesses a file's name can retrieve...

CVE-2026-13607 File Uploads Addon for WooCommerce <= 1.7.6 - Unauthenticated Direct File Access

The File Uploads Addon for WooCommerce WordPress plugin through 1.7.6 stores customer-uploaded files in a publicly web-accessible uploads directory and the access restriction it generates is ineffective, so an unauthenticated attacker who knows or guesses a file's name can retrieve...

CVE-2026-78371 File Uploads Addon for WooCommerce 1.7.2 - 1.7.5 - Unauthenticated Customer Uploaded File Disclosure

The File Uploads Addon for WooCommerce WordPress plugin before 1.7.6 does not verify that the person requesting a customer-uploaded file is the customer who uploaded it, allowing unauthenticated attackers who know or guess a file's name to download other customers' uploaded files...

EUVD-2026-92261

The File Uploads Addon for WooCommerce WordPress plugin through 1.7.6 stores customer-uploaded files in a publicly web-accessible uploads directory and the access restriction it generates is ineffective, so an unauthenticated attacker who knows or guesses a file's name can retrieve...

CVE-2026-84169 UPI QR Code Payment Gateway <= 1.4.3 - Unauthenticated Cross-Order Payment-Status Forgery

The UPI QR Code Payment Gateway WordPress plugin through 1.4.3 does not verify that a payment-confirmation request actually belongs to the order and customer it claims to confirm, allowing unauthenticated attackers to mark an arbitrary order as paid without making any payment...

EUVD-2026-92260

The UPI QR Code Payment Gateway WordPress plugin through 1.4.3 does not verify that a payment-confirmation request actually belongs to the order and customer it claims to confirm, allowing unauthenticated attackers to mark an arbitrary order as paid without making any payment...

CVE-2026-84169

The UPI QR Code Payment Gateway WordPress plugin, affecting versions through 1.4.3 , contains a vulnerability where it fails to verify if a payment-confirmation request belongs to the specific order and customer it claims to confirm. This lack of authorization allows unauthenticated attackers to ...

CVE-2021-29447-PoC

CVE-2021-29447-PoC 概述 CVE-2021-29447 是一个 XML 外部实体（XXE）注入漏洞，影响运行在 PHP 8.0+ 环境下的 WordPress 版本 5.6–5.7（已在 5.7.1 中修复）。该漏洞存在于用于媒体元数据解析的 getID3 库中。 WordPress 通过 getID3 处理 WAV 文件的 iXML 块，该库使用 LIBXMLNOENT 标志调用 simplexmlloadstring。该标志显式启用了外部实体替换，从而绕过了 PHP 8 默认的 XXE 保护（已弃用的 libxmldisableentityloader）。 1...

CVE-2025-69080

Exploit LFI del Tema Gecko CVE-2025-69080 Vulnerabilidad de Inclusión Local de Archivos LFI sin autenticación en el Tema Gecko de WordPress = 1.9.8 ⚠️ Descripción Este exploit apunta a una vulnerabilidad de Inclusión Local de Archivos de alta severidad CVSS 8.1 en el tema JanStudio Gecko de...

CVE-2025-4334

CVE-2025-4334 - Simple User Registration --form Argumentos: -u / --url → URL base de WordPress ej. https://target.com/wordpress/ --form → URL completa del formulario de registro ej. https://target.com/wpr/default-registration/ Ejemplo: python3 CVE-2025-4334.py -u https://example.com/wordpress...

CVE-2026-6271

CVE-2026-6271 — Career Section WordPress插件RCE扫描器 插件: Career Section career-section CVE ID: CVE-2026-6271 CVSS Score: 9.8 Critical CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 漏洞类型: 未认证任意文件上传 → 远程代码执行 受影响版本: 任何未认证的访问者都可以获得有效的nonce并通过验证检查。 缺少文件类型验证 // templates/single-csection.php —...

CVE-2024-56067

CVE-2024-56067 WP SuperBackup = 2.3.3 - Falta de autorización para la descarga no autenticada de archivos de copia de seguridad Descripción El plugin Super Backup & Clone - Migrate for WordPress para WordPress es vulnerable a acceso no autorizado debido a una falta de comprobación de capacidades ...

CVE-2026-8206-Lab

CVE-2026-8206 - Laboratorio de apropiación de cuentas en Kirki Laboratorio Docker local para demostrar CVE-2026-8206 en el plugin de WordPress Kirki. Este repositorio compara las versiones reales del plugin Kirki: vuln: Kirki 6.0.6 patched: Kirki 6.0.7 El laboratorio es solo local y vincula los...

CVE-2019-1698

TRAN CONG DANH - SVTT - Mentor: LUU VAN LAN - CVE-2019-1698 - Día de inicio: 30/07/2024 Revisa el diff del código entre la versión con vulnerabilidad y la versión con el código corregido: Referencia de código 1:...

CVE-2024-34568

Exploit Title: LetterPress = 1.2.1 - Cookie Stealing Vulnerability Exploit Author: SANU P.L CVE: CVE-2024-34568 CVSS: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L 参考链接: https://nvd.nist.gov/vuln/detail/CVE-2024-34568...

CVE-2024-10924-PoC

PoC MFA 认证绕过 Really Simple Security WordPress 插件 | CVE-2024-10924 我们访问 WordPress 网页，会发现它通过该漏洞插件启用了 MFA： 我们必须运行 PoC 并提供访问数据： 自动地，浏览器将通过管理面板内的临时 .html 文件打开。 要自动部署一个可重现场景的脆弱环境，可以使用以下仓库： https://github.com/Trackflaw/CVE-2024-10924-Wordpress-Docker...

wp2shell-lab

mini-wp-rest Una reimplementación compacta y sin dependencias de una pequeña parte de la API REST de WordPress — lo justo para servir una colección pública de entradas y ejecutar varias subpeticiones en un solo viaje de ida y vuelta. Útil para enseñar cómo encajan el enrutamiento de WordPress,...

CVE-2025-14156

CVE-2025-14156 Fox LMS – WordPress LMS 插件 1.0.4.7 - 1.0.5.1 – 通过 'createOrder' 实现未认证权限提升 ⚠️ CVE-2025-14156 – Fox LMS WordPress 未认证权限提升利用工具 🛡️ 漏洞概述 Fox LMS – WordPress LMS 插件（v1.0.4.7 至 v1.0.5.1）– 通过createOrder 实现未认证权限提升 所有版本直到并包括 1.0.5.1 的 Fox LMS for WordPress...