290269 matches found
CVE-2026-19794
CVE-2026-19794 WP-Stats = 2.56 - Unauthenticated Stored Cross-Site Scripting Plugin URL https://wordpress.org/plugins/wp-stats/ Description Unauthenticated reflected XSS in the statsauthor GET parameter of statspage. The sanitization filter striptags is applied before urldecode, allowing an...
CVE-2025-47646
CVE-2025-47646 PoC Unauthenticated Privilege Escalation exploit for WordPress PSW Front-end Login Registration Plugin β€ 1.12 π Description This Python script is a proof-of-concept PoC exploit for CVE-2025-47646 , targeting a vulnerability in the WordPress PSW Front-end Login Registration Plugin β€...
CVE-2018-20463
CVE-2018-20463 There is a security vulnerability in WordPress JSmol2WP Plugin version 1.07. Attackers can exploit this vulnerability to read arbitrary files. Optional Arguments: -h, --help show this help message and exit -u url, --url url Target url eg:"http://127.0.0.1" -f file, --file file...
CVE-2026-78006-POC
CVE-2026-78006-POC POC for CVE-2026-78006 The Events Calendar = 6.17.4 - Unauthenticated PHP Object Injection to Remote Code Execution CONTACT telegram for any ask : @soldout0O π Support the Project If you appreciate my work, consider supporting the project via USDT TRC20:...
CVE-2025-25101
π CVE-2025-25101 - WordPress Munk Sites Plugin = 1.0.7 - CSRF to Arbitrary Plugin Installation π Overview CVE-2025-25101 is a Cross-Site Request Forgery CSRF vulnerability in the MetricThemes Munk Sites plugin for WordPress versions β€ 1.0.7. This vulnerability allows an unauthenticated attacker t...
grails-javamelody-sample-app
Grails Javamelody Sample App Grails sample application using the Javamelody plugin version 1.44 to illustrate the CVE-2013-4378 vulnerability...
CVE-2026-67413
A flaw was found in rabbitmq-server. An authenticated user with permissions to bind and publish messages can cause a Denial of Service DoS by submitting specially crafted pattern-matching expressions to the Java Message Service JMS topic exchange plugin. Because the message broker evaluates these...
CVE-2026-67230
A flaw was found in RabbitMQ. When the Web STOMP plugin is enabled, the WebSocket handler fails to enforce maximum frame size limits or login timeouts prior to client authentication. An unauthenticated remote attacker can exploit this vulnerability by sending a continuous stream of small frames t...
CVE-2026-67223
A flaw was found in rabbitmq-server. When the service uses the Lightweight Directory Access Protocol LDAP authentication plugin with a configured user Distinguished Name DN pattern, it fails to properly escape special characters in the username. A remote attacker can exploit this vulnerability by...
CVE-2026-67222
A flaw was found in rabbitmq-server. An authenticated remote attacker with policymaker privileges can exploit this issue when the Shovel or Federation plugin is enabled by supplying a specially crafted authentication mechanism value. This causes the server to permanently exhaust Erlang virtual...
nate158g-m-w-n-l-p-d-a-o-e
nate158g-m-w-n-l-p-d-a-o-e This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-frameworkclass MetasploitModule 'Wordpress Popular Posts Authenticated RCE', 'Description' = %q This exploit requires Metasploit to have a FQDN and the...
CVE-2025-6058
β‘ WPBookit = 1.0.4 - Unauthenticated Arbitrary File Upload π Description The WPBookit plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the imageuploadhandle function, which is hooked via the addbookingtype route in all versions up to, and...
jenkinsci__workflow-cps-plugin_CVE-2022-25173_2646-v6ed3b5b01ff1
Pipeline: Groovy Plugin Introduction A key component of the Pipeline plugin suite, this provides the standard execution engine for Pipeline steps, based on a custom Groovy interpreter that runs inside the Jenkins controller process. In principle other execution engines could be supported, with...
PPLorer
PPLorer PPLorer is an IDA plugin that resolves PPL calls to the actual underlying PPL function. Installation 1. install ida-netnode somewhere IDA can import it 2. clone the repository and symlink /.idapro/plugins/pplorer.py to pplorer.py in the cloned repo Usage Preliminary Analysis 1. open an ID...
CVE-2024-51788
π CVE-2024-51788 - WordPress The Novel Design Store Directory Plugin = 4.3.0 - Unauthenticated Arbitrary File Upload π¨ Overview CVE-2024-51788 is a newly disclosed critical vulnerability affecting the The Novel Design Store Directory WordPress plugin = v4.3.0. This flaw allows unauthenticated...
CVE-2026-11613
CVE-2026-11613 β Divi Ajax Filter RCE | ---|--- Plugin| Divi Ajax Filter Divi Engine, premium β bukan di wordpress.org SVN Affected| semua versi = 5.1.2 lab memakai 3.1.8.4 dari mirror Patched| 5.1.3 11/08/2026 Tipe| CWE-98 β PHP Local File Inclusion, unauthenticated CVSS| 9.8 Critical...
copy-as-yara
Copy as YARA Author: alden Copy disassembly nicely formatted for YARA rules. Description: This is a really simple plugin that allows you to copy disassembly in a way that can be used in YARA rules. You have the option to either copy the assembly code as it is or use address wildcarding to create...
x64dbg-xfg-marker
x64dbg XFG Marker Plugin Microsoft eXtended Flow Guard XFG is a control-flow integrity CFI technique that extends CFG with function call signatures. Each signature is 8 bytes long, and is located right before the target function. Since the signature is located in the code section, x64dbg gets...
NOP_Plugin
NOPPlugin Plugin for NOPing instructions in IDA. The creation of the plugin was inspired by Vidar Stealer I was trying to remove the junk bytes / instructions. Before: After: Instructions Paste the NOPPlugin.py file under "plugins" subdirectory of IDA. To NOP the instructions out just select the...