EUVD-2026-94303

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in AF themes WP Post Author wp-post-author allows Blind SQL Injection.This issue affects WP Post Author: from n/a through 4.0.0...

CVE-2026-42708 WordPress WP Post Author plugin <= 4.0.0 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in AF themes WP Post Author wp-post-author allows Blind SQL Injection.This issue affects WP Post Author: from n/a through 4.0.0...

CVE

Таблица CVE Номер CVE| Тип| Компания/Продукт| Описание| Ссылка на статью| Ссылка на репозиторий ---|---|---|---|---|--- CVE-2026-9680| SQL-инъекция| Alibaba RDS MCP Servers| Уточняется| Уточняется| Уточняется CVE-2026-50335| Локальное повышение привилегий| Windows July 2026| Уточняется| Уточняетс...

nuclei-wordfence-cve

Nuclei + Wordfence = ♥ 85,006 Nuclei Templates for WordPress Security Scanning 🥳 Level up your WordPress security game! This project's got a treasure trove of fresh Nuclei templates for WordPress. Scan for weaknesses in Core, plugins, and themes – all based on the latest intel from Wordfence.com...

WordPress Catch Breadcrumb <1.5.4 - Cross-Site Scripting

WordPress Catch Breadcrumb plugin before 1.5.4 contains a reflected cross-site scripting vulnerability via the s parameter a search query. Also affected are 16 themes if the plugin is enabled: Alchemist and Alchemist PRO, Izabel and Izabel PRO, Chique and Chique PRO, Clean Enterprise and Clean...

WordPress Bello Directory & Listing Theme <1.6.0 - Cross-Site Scripting

WordPress Bello Directory & Listing theme before 1.6.0 contains a reflected cross-site scripting vulnerability. It does not properly sanitize and escape the listinglistview, btbblistingfieldmylat, btbblistingfieldmylng, btbblistingfielddistancevalue, btbblistingfieldmylatdefault,...

Themes Coder Ecommerce <= 1.3.4 - SQL Injection

The Themes Coder Ecommerce WordPress plugin through 1.3.4 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection. id: CVE-2024-13726 info: name: Themes Coder Ecommerce = 1.3.4 - SQL...

All Thrive Themes and Plugins - Unauthenticated Option Update

The Thrive Optimize WordPress plugin before 1.4.13.3, Thrive Comments WordPress plugin before 1.4.15.3, Thrive Headline Optimizer WordPress plugin before 1.3.7.3, Thrive Leads WordPress plugin before 2.3.9.4, Thrive Ultimatum WordPress plugin before 2.3.9.4, Thrive Quiz Builder WordPress plugin...

Wordpress Multiple Themes - Reflected Cross-Site Scripting

All of the above Aapna WordPress theme through 1.3, Anand WordPress theme through 1.2, Anfaust WordPress theme through 1.1, Arendelle WordPress theme before 1.1.13, Atlast Business WordPress theme through 1.5.8.5, Bazaar Lite WordPress theme before 1.8.6, Brain Power WordPress theme through 1.2,...

Multiple Thrive Themes < 2.0.0 - Arbitrary File Upload

Thrive “Legacy” Rise by Thrive Themes WordPress theme before 2.0.0, Luxe by Thrive Themes WordPress theme before 2.0.0, Minus by Thrive Themes WordPress theme before 2.0.0, Ignition by Thrive Themes WordPress theme before 2.0.0, FocusBlog by Thrive Themes WordPress theme before 2.0.0, Squared by...

wpscvn

wpscvn is a tool for pentesters, website owner to test if their websites had some vulnerable plugins or themes The author does not hold any responsibility for the bad use of this tool, remember that attacking targets without prior consent is illegal and punished by law. requires : Python 3 usage ...

CVE-2022-0316_wordpress_multiple_themes_exploit

Wordpress Multiple themes - Unauthenticated Arbitrary File Upload CVE-2022-0316 Неавторизованная произвольная загрузка файлов в нескольких темах от ChimpStudio и PixFill. За дополнительными эксплойтами и эксклюзивными обращайтесь ко мне в Telegram @KtN1990. Затронутые темы westand footysquare...

wpbullet

wpBullet Une analyse statique de code pour les plugins/thèmes WordPress et PHP Installation Clonez simplement le dépôt, installez les dépendances et exécutez le script $ git clone https://github.com/webarx-security/wpbullet wpbullet $ cd wpbullet $ pip install -r requirements.txt $ python...

wpBullet

wpBullet Статический анализ кода для плагинов/тем WordPress и PHP Установка Просто клонируйте репозиторий, установите зависимости и запустите скрипт $ git clone https://github.com/webarx-security/wpbullet wpbullet $ cd wpbullet $ pip install -r requirements.txt $ python wpbullet.py Использование...

CVE-2026-39778

Unauthenticated Cross Site Scripting XSS in Ansar Import – One Click Starter Sites – for Elementor & Themes = 2.1.2 versions...

EUVD-2026-93027

Unauthenticated Cross Site Scripting XSS in Ansar Import – One Click Starter Sites – for Elementor & Themes = 2.1.2 versions...

CVE-2026-39778

The Ansar Import – One Click Starter Sites – for Elementor & Themes WordPress plugin, version

CVE-2026-39778 WordPress Ansar Import – One Click Starter Sites – for Elementor & Themes plugin <= 2.1.2 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Ansar Import – One Click Starter Sites – for Elementor & Themes = 2.1.2 versions...

Microsoft Edge (Chromium) < 154.0.4258.37 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 154.0.4258.37. It is, therefore, affected by multiple vulnerabilities as referenced in the September 25, 2026 advisory. - Type confusion in V8 in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveragin...

CVE-2023-38146-Poc

Preuve de concept PoC pour l'exploit ThemeBleed CVE-2023-38146 Thèmes Windows 11 Fortement inspiré de https://github.com/gabe-k/themebleed qui ne fonctionne que sous Windows c'est pourquoi j'ai décidé d'écrire celui-ci. Utilisation de code modifié depuis impacket smbserver.py...