CVE-2025-2005

CVE-2025-2005 WordPress Front End Users Plugin = 3.2.32 ist anfällig für willkürlichen Datei-Upload WordPress Front-End Users Plugin Exploit Schwachstelleninformationen Plugin-Name : Front-End Users Plugin Betroffene Version : = 3.2.32 Schwachstellentyp : Arbitrary File Upload CVSS-Score : 10...

WordPress ListingPro plugin <= 2.9.12 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Rafie Muhammad in WordPress Plugin ListingPro versions = 2.9.12...

cve-2026-63030-lab

CVE-2026-63030 — wp2shell Lab RCE ohne Authentifizierung im WordPress-Kern durch REST-API-Batch-Routen-Verwechslung + SQL-Injection Übersicht wp2shell ist eine Verkettung von zwei unabhängigen Schwachstellen mit jeweils geringem Schweregrad im WordPress-Kern, die in Kombination einem nicht...

Wordpress-CVE-2020-35749

Wordpress Plugin Simple Job Board 2.9.3 LFI-Schwachstelle CVE-2020-35749 Exploit Zusammenfassung Das WordPress-Plugin Simple Job Board ist anfällig für eine Directory-Traversal-Schwachstelle, da es die vom Benutzer bereitgestellte Eingabe nicht ausreichend überprüft. Die Ausnutzung dieses Problem...

CVE-2026-14894

CVE-2026-14894 Beliebiger Datei-Upload Nxploited Mass Exploiter — Super Forms & Elementor Pro 🩸 Treten Sie unserem Telegram bei für die neuesten exklusiven 0-Days & weaponized CVEs 📡 Kanal: https://t.me/KNxploited 👤 Nxploited | @Kxploit Ein hochgeschwindigkeits-, multithreaded Mass Exploiter, der...

CVE-2024-22145

CVE-2024-22145 InstaWP Connect = 0.1.0.8 - Autorizzazione mancante per aggiornamento arbitrario delle opzioni Subscriber+ Descrizione: Il plugin InstaWP Connect – 1-click WP Staging & Migration per WordPress è vulnerabile a modifiche non autorizzate dei dati a causa di un controllo di capacità...

-CVE-2022-1609

CVE-2022-1609 Bash PoC für CVE-2022-1609 WordPress Weblizar Backdoor Wie installieren? wget https://raw.githubusercontent.com/0xSojalSec/CVE-2022-1609/main/exploit.sh chmod +x exploit.sh ./exploit.sh Wie benutzt man es? GH0ST3exP10it$ ./exploit.sh http://127.0.0.1:8080 + Targeting...

CVE-2025-5394

🚨 CVE-2025-5394 - Nicht authentifizierter beliebiger Plugin-Upload im Alone Theme 📌 Betroffenes Produkt: Alone – Charity Multipurpose Non-profit WordPress Theme Versionen: = 7.8.3 CVE: CVE-2025-5394 CVSS-Score: 9.8 Kritisch 🔥 Zusammenfassung der Sicherheitslücke: Das Alone Theme für WordPress ist...

CVE-2026-32488

CVE-2026-32488 CVE-2026-32488 Assegna il valore nonce a una variabile $NONCE = "c82a4f80ba" curl.exe -s -X POST "http://localhost/wp-admin/admin-ajax.php" -d "action=userregistrationuserformsubmit" -d "urfrontendformnonce=$NONCE" -d "formid=6" -d...

WordPress SafeSnap – Verified WordPress Backup & Restore plugin <= 2.1.2 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin SafeSnap – Verified WordPress Backup & Restore versions = 2.1.2...

WordPress Museder RestoreOne plugin <= 2.7.276 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Museder RestoreOne versions = 2.7.276...

WordPress Norvis Backup plugin <= 1.1.0 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Norvis Backup versions = 1.1.0...

WordPress Sitemovr plugin <= 1.0.1 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Sitemovr versions = 1.0.1...

WordPress Snapshotify – All-in-One Backup & Restore & Migrate plugin <= 1.3.2 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Snapshotify All-in-One Backup & Restore & Migrate versions = 1.3.2...

WordPress Tourfic Pro plugin <= 1.17.3 - Privilege Escalation vulnerability

Privilege Escalation vulnerability discovered by Jamaal ahmed in WordPress Plugin Tourfic Pro versions = 1.17.3...

tvsz

CVE-2018-6389 PoC node js multisite with proxy Questo script è basato su CVE-2018-6389, un problema piuttosto insidioso di Wordpress che, purtroppo, probabilmente non verrà risolto dal team che sviluppa la piattaforma, nonostante sia noto da molto tempo. !!! IMPORTANTE PRIMA DI PROSEGUIRE !!!...

CVE-2023-30777

CVE-2023-30777 Generatore di URL Proof of Concept PoC per una vulnerabilità XSS riflessa nel plugin Advanced Custom Fields di WordPress. PoC generato da: Alucard0x1 Crediti dell'exploit: https://patchstack.com/articles/reflected-xss-in-advanced-custom-fields-plugins-affecting-2-million-sites/...

CVE-2026-2631

CVE-2026-2631 Datalogics Ecommerce Delivery – Datalogics PoC / Exploit-Skript: CVE-2026-2631.py Autor: Khaled Alenazi Nxploited – Nxploited ZeroDay Hub Kontakt: Telegram: @Kxploit 🧬 Schwachstellenübersicht Plugin: Datalogics Ecommerce Delivery – Datalogics WordPress Betroffene Versionen: 2.6.60...

wp2shell-Wordpress-TOWN

wp2shell von: lucifer0xf Nicht authentifizierte Remote-Code-Ausführung für WordPress-Core-POC CVE-2026-63030 + CVE-2026-60137 wp2shell-Exploit für eine kritische Sicherheitslücken-Kette im WordPress-Core. Er kombiniert einen REST-API-Batch-Routen-Confusion-Bug mit einer SQL-Injection in WPQuery, ...

EUVD-2026-92444

LearnPress plugin for WordPress through 4.4.9.1 contains a stored cross-site scripting vulnerability that allows authenticated instructors to inject scripts via quiz question hint and explanation fields. Attackers with the Instructor role can submit unsanitized payloads through the updatequestion...