935 matches found
CVE-2021-24762
概述 本仓库记录了通过HTTP扫描检测到的CVE-2021-24762漏洞，该漏洞存在于一个WordPress实例中。 该漏洞发现于WordPress的AJAX端点： /wp-admin/admin-ajax.php 此端点通常被WordPress插件和主题用于处理异步请求。如果AJAX操作的验证不当或实现不安全，攻击者可能滥用该端点。 扫描结果 以下结果来自漏洞扫描： CVE-2021-24762 http critical http://192.168.31.128/wordpress-5.1.15/wordpress/wp-admin/admin-ajax 提取的信息 字段| 值...
CVE-2024-50450
CVE-2024-50450 WordPress Meta Data and Taxonomies Filter MDTF = 1.3.3.4 - 未认证的任意短代码执行 描述： MDTF – Meta Data and Taxonomies Filter WordPress 插件在所有版本（包括 1.3.3.4）中均存在任意短代码执行漏洞。这是由于该软件允许用户执行一个操作，而在运行 doshortcode 之前未正确验证某个值。这使得未认证的攻击者能够执行任意短代码。 root@kitploit: 发布时间：2024-10-24 00:00:00 CVE：CVE-2024-50450...
0-click-RCE-Exploit-for-CVE-2024-51793
CVE-2024-51793 / 0-Click RCE 漏洞利用 作者: Joshua Provoste https://x.com/JoshuaProvoste/status/1858668072279626138 本仓库包含一个针对 CVE-2024-51793 的概念验证利用程序，该漏洞是一个存在漏洞的 WordPress 插件中的未经验证的任意文件上传漏洞，可导致远程命令执行（RCE）。 脚本功能 该脚本滥用一个存在漏洞的 admin-ajax.php 操作，在无需身份验证的情况下上传 PHP 载荷。上传后，它会检测目标操作系统，并提供一个交互式远程 Shell 用于执行命令。...
EUVD-2026-83616
QloApps through 1.7.0 contains a path traversal vulnerability in the getEmailHTML action of admin/ajax.php that allows authenticated back-office users to read arbitrary files. Attackers can supply relative path sequences in the email parameter to bypass directory restrictions and access sensitive...
CVE-2026-93988
QloApps through 1.7.0 contains a path traversal vulnerability in the getEmailHTML action of admin/ajax.php that allows authenticated back-office users to read arbitrary files. Attackers can supply relative path sequences in the email parameter to bypass directory restrictions and access sensitive...
CVE-2026-93988 QloApps through 1.7.0 Arbitrary File Read via getEmailHTML
QloApps through 1.7.0 contains a path traversal vulnerability in the getEmailHTML action of admin/ajax.php that allows authenticated back-office users to read arbitrary files. Attackers can supply relative path sequences in the email parameter to bypass directory restrictions and access sensitive...
CVE-2026-93988
QloApps versions through 1.7.0 contain a path traversal vulnerability in the getEmailHTML action of admin/ajax.php. An authenticated back-office user can supply relative path sequences in the email parameter to bypass directory restrictions and read arbitrary files , including database credential...
CVE-2026-93988 QloApps through 1.7.0 Arbitrary File Read via getEmailHTML
QloApps through 1.7.0 contains a path traversal vulnerability in the getEmailHTML action of admin/ajax.php that allows authenticated back-office users to read arbitrary files. Attackers can supply relative path sequences in the email parameter to bypass directory restrictions and access sensitive...
CVE-2024-52430
CVE-2024-52430 Lis Video Gallery = 0.2.1 - 未认证的PHP对象注入 描述 Lis Video Gallery WordPress插件在版本0.2.1及以下存在PHP对象注入漏洞，攻击者可通过反序列化不可信输入进行利用。这使得未认证的攻击者能够注入一个PHP对象。受影响软件中不存在已知的POP链。如果目标系统上安装了其他插件或主题中存在POP链，攻击者可能利用该漏洞删除任意文件、获取敏感数据或执行代码。 root@kitploit: CVE: CVE-2024-52430 CVSS:...
CVE-2026-93988: Improper Limitation of a Pathname to a Restricted Directory
QloApps through 1.7.0 contains a path traversal vulnerability in the getEmailHTML action of admin/ajax.php that allows authenticated back-office users to read arbitrary files. Attackers can supply relative path sequences in the email parameter to bypass directory restrictions and access sensitive...
CVE-2026-89064: Insufficiently Protected Credentials
The All-in-One WP Migration and Backup plugin for WordPress is vulnerable to Insufficient Credential Protection in versions up to, and including, 7.110. This is due to the Ai1wmMainController::init method — registered on the admininit hook, which fires unauthenticated on admin-ajax.php and...
Exploit for CVE-2026-19598
CVE-2026-19598 — Pods WordPress Plugin Unauthenticated Privile...
CVE-2026-81203: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in SourceCodester Simple Online Food Ordering System 1.0. This affects an unknown function of the file /admin/ajax.php?action=login2. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...
PT-2026-81164
The Events Manager – Calendar, Bookings, Tickets, and more! plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 7.3.7.4 via the em options save function. This makes it possible for authenticated attackers, with administrator-level access and above, to...
CVE-2026-76997
A weakness has been identified in SourceCodester Simple Online Food Ordering System 1.0. The affected element is an unknown function of the file /admin/ajax.php?action=savecategory. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The...
EUVD-2026-63395
A security vulnerability has been detected in SourceCodester Simple Online Food Ordering System 1.0. The impacted element is an unknown function of the file /admin/ajax.php?action=deletecategory. Such manipulation of the argument ID leads to sql injection. It is possible to launch the attack...
CVE-2026-76995
A vulnerability was identified in SourceCodester Simple Online Food Ordering System 1.0. This issue affects some unknown processing of the file /admin/ajax.php?action=savemenu. The manipulation of the argument img leads to unrestricted upload. The attack is possible to be carried out remotely. Th...
EUVD-2026-63394
A weakness has been identified in SourceCodester Simple Online Food Ordering System 1.0. The affected element is an unknown function of the file /admin/ajax.php?action=savecategory. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The...
CVE-2026-76997
CVE-2026-76997 is a SQL injection vulnerability in SourceCodester Simple Online Food Ordering System 1.0 , located in the file /admin/ajax.php?action=save_category. Manipulation of the ID parameter allows a remote, authenticated attacker to inject SQL queries. The vulnerability is rated MEDIUM se...