CVE-2019-9978-RCE-PoC

CVE-2019-9978 RCE PoC – Exploit del plugin Social Warfare de WordPress De Inclusión Remota de Archivos RFI no autenticada a Ejecución Remota de Código RCE 📌 Descripción Este repositorio contiene una Prueba de Concepto PoC basada en Python que demuestra la explotación de CVE-2019-9978 , una...

WordPress Ultimate Member plugin <= 2.13.1 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Ultimate Member versions = 2.13.1...

WordPress Pie Register plugin <= 3.8.4.13 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Pie Register versions = 3.8.4.13...

WordPress ElementsKit Elementor addons Lite plugin <= 4.0.6 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by nh4tvd in WordPress Plugin ElementsKit Elementor addons Lite versions = 4.0.6...

WordPress AFFI – Affiliate Marketing for WooCommerce plugin <= 1.0.9 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Nixxies in WordPress Plugin AFFI – Affiliate Marketing for WooCommerce versions = 1.0.9...

WordPress Majestic Support plugin <= 1.2.0 - Insecure Direct Object References (IDOR) vulnerability

Insecure Direct Object References IDOR vulnerability discovered by Peter Tang in WordPress Plugin Majestic Support versions = 1.2.0...

CVE-2026-103067

The Memberful - Membership Plugin for WordPress is vulnerable to a Cross-Site Request Forgery (CSRF) vulnerability in the memberful-wp component. This issue impacts versions up to and including 1.81.0 . The vulnerability allows for unauthorized actions to be performed on behalf of a user. Details...

EUVD-2026-90789

Cross-Site Request Forgery CSRF vulnerability in Memberful Memberful - Membership Plugin memberful-wp allows Cross Site Request Forgery.This issue affects Memberful - Membership Plugin: from n/a through 1.81.0...

CVE-2026-103067 WordPress Memberful - Membership Plugin plugin <= 1.81.0 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Memberful Memberful - Membership Plugin memberful-wp allows Cross Site Request Forgery.This issue affects Memberful - Membership Plugin: from n/a through 1.81.0...

CVE-2026-103067 WordPress Memberful - Membership Plugin plugin <= 1.81.0 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Memberful Memberful - Membership Plugin memberful-wp allows Cross Site Request Forgery.This issue affects Memberful - Membership Plugin: from n/a through 1.81.0...

CVE-2026-94250

Allocation of resources without limits or throttling vulnerability in batch-requests plugin in Apache APISIX. An unauthenticated caller can drive a gateway worker into OOM via a route where the batch-requests plugin is used and the batch endpoint is publicly exposed. This issue affects Apache...

CVE-2026-94276

Improper Authentication vulnerability in Apache APISIX. On a route using openid-connect plugin with remote introspection against an authorization server that serves multiple issuers, a token that introspects as active for one issuer may get accepted on a route restricted to another. This issue...

CVE-2026-94212

Improper verification of cryptographic signature vulnerability in Apache APISIX. Any unauthenticated attacker could impersonate any user on every route protected by the saml-auth plugin under default configuration. This issue affects Apache APISIX: from 3.17.0 through 3.18.0. Users are recommende...

WordPress Memberful - Membership Plugin plugin <= 1.81.0 - Cross Site Request Forgery (CSRF) vulnerability

WordPress Memberful - Membership Plugin plugin = 1.81.0 - Cross Site Request Forgery CSRF vulnerability discovered by henise in WordPress Plugin Memberful - Membership Plugin versions = 1.81.0...

CVE-2023-28121

CVE-2023-28121 usage: CVE-2023-28121.py -h -v RHOST RPORT WooCommerce Payments WordPress plugin = 5.6.1 CVE-2023-28121 PoC. Reference: https://nvd.nist.gov/vuln/detail/CVE-2023-28121 positional arguments: RHOST remote host RPORT remote port optional arguments: -h, --help show this help message an...

Cleartext-Storage-vulnerability-CVE-2023-5359-in-W3-Total-Cache

Vulnerabilidad de almacenamiento en texto plano CVE-2023-5359 en W3 Total Cache Afecta a versiones ≤2.7.5 vulnerables a CVE-2023-5359 import requests import re from urllib.parse import urljoin Common paths where credentials are stored CREDENTIALPATHS =...

CVE-2025-4094

CVE-2025-4094 – Complemento Digits de WordPress 8.4.6.1 - Omisión de Autenticación OTP Autor: Saleh Tarawneh ID CVE: CVE-2025-4094 Gravedad: Crítica CVSS 9.8 Estado: Corregido en la versión 8.4.6.1 Descripción de la Vulnerabilidad El complemento Digits de WordPress anterior a la versión 8.4.6.1 e...

CVE-2021-43799

CVE-2021-43798 Grafana 8.x Path Traversal Pre-Auth All credits go to j0v and his tweet https://twitter.com/j0v0x0/status/1466845212626542607 Disclaimer This is for educational purposes only. I am not responsible for your actions. Use at your own discretion. In good faith, I've held back releasing...

CVE-2024-1207

Booking Calendar = 9.9 - Inyección SQL no autenticada CVE-2024-1207 https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/booking/booking-calendar-99-unauthenticated-sql-injection Prueba de concepto: POST /wp-admin/admin-ajax.php HTTP/1.1 Host: vulnerablesite.com User-Agent:...

opac-fast-automation

CVE-2025-65862 — Documentación, Análisis y Herramienta de Automatización Solo con fines de investigación ⚠️ Advertencia Ética y Legal Todo el material de este repositorio se proporciona únicamente para: investigación de seguridad, aprendizaje, análisis de vulnerabilidades, y pruebas en entornos...