CVE-2026-91073 Subscribe Forms 1.4.1 - 1.6.2 - Author+ Stored XSS via Attention Effect Form Setting

The Subscribe Forms WordPress plugin before 1.6.3 does not sanitise and escape one of its form settings before outputting it in a page, allowing authenticated users with the Author role and above to perform Stored Cross-Site Scripting attacks that execute in the browser of any visitor who views a...

CVE-2026-91025 Booking Manager < 2.1.21 - Subscriber+ Arbitrary User Plugin Meta Modification via IDOR

The Booking Manager WordPress plugin before 2.1.21 does not verify that a request to modify a user's Booking Manager WordPress plugin before 2.1.21-specific settings targets the requesting user's own account, allowing any authenticated user with subscriber-level access and above to create or...

EUVD-2026-85057

The Booking Manager WordPress plugin before 2.1.21 does not verify that a request to modify a user's Booking Manager WordPress plugin before 2.1.21-specific settings targets the requesting user's own account, allowing any authenticated user with subscriber-level access and above to create or...

WordPress Booking Manager plugin < 2.1.21 - Subscriber+ Arbitrary User Plugin Meta Modification vulnerability

Subscriber+ Arbitrary User Plugin Meta Modification vulnerability discovered by Choriyev Qahramon ciprobe in WordPress Plugin Booking Manager versions 2.1.21...

WordPress Paymob for WooCommerce plugin < 4.1.14 - Unauthenticated Saved Card Token Write to Any User vulnerability

Unauthenticated Saved Card Token Write to Any User vulnerability discovered by Salúa Es-sair in WordPress Plugin Paymob for WooCommerce versions 4.1.14...

CVE-2026-86608 WP Recipe Maker 9.8.0 - 10.8.1 - Unauthenticated DoS via Unbounded User Meta Insertion

The WP Recipe Maker WordPress plugin before 10.8.2 does not have any authorisation check in one of its REST routes, nor does it bound what that route stores, allowing unauthenticated users to write unlimited data into any user's metadata and to permanently prevent that account, including an...

CVE-2026-86608

The WP Recipe Maker WordPress plugin (versions 9.8.0-10.8.1 ) is vulnerable to an unauthenticated Denial of Service (DoS) . The flaw exists because one of the plugin's REST routes lacks proper authorization checks and fails to bound the data it stores. This allows unauthenticated attackers to wri...

CVE-2026-84150 Directorist < 8.9.5 - Subscriber+ Cross-User Favorites Read and Write via REST Favorites Endpoint

The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.9.5 does not verify that the target user of a REST route matches the authenticated caller before reading and modifying that user's saved favorites, allowing any authenticated user with...

CVE-2026-84150

The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin is vulnerable in versions before 8.9.5 . The application fails to verify if the target user of a REST route matches the authenticated caller when accessing or modifying saved favorites. This allows any auth...

WordPress Directorist: AI-Powered Business Directory, Listings & Classified Ads plugin < 8.9.5 - Subscriber+ Cross-User Favorites Read and Write vulnerability

Subscriber+ Cross-User Favorites Read and Write vulnerability discovered by Revanth Hari Narayana Matte in WordPress Plugin Directorist versions 8.9.5...

EUVD-2026-85030

The WP OAuth Server Login with WordPress WordPress plugin before 6.4.0 does not bind the OpenID Connect identity assertion it issues to the authorization grant being exchanged, returning instead the assertion belonging to whichever user authenticated most recently, which allows users with the...

EUVD-2026-85028

The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.50 does not properly sanitise and restrict HTML in user-submitted content before storing it and rendering it to other users, allowing users with subscriber-level accounts and above to perform stored HTML injection, such as embedding...

CVE-2018-7691

CVE-2018-7691 SSC REST APIには、安全でないダイレクトオブジェクト参照（IDOR）の脆弱性が含まれており、認証されたユーザーがPOSTメソッドを使用してローカルユーザーおよびLDAPユーザーの任意の詳細にアクセスし、GETメソッドを使用して他のユーザーのFortifyプロジェクトの任意の詳細にアクセスできるようになります。 Exploit-DBでの公開: https://www.exploit-db.com/exploits/45990 PacketStormでの公開:...

LegacyHive

LegacyHive : Windows user profile service arbitrary hive load elevation of privileges vulnerability The PoC requires another standard user credentials and a third username which can be an administrator account, if the PoC is successful, it will end up mounting the target user hive in current user...

CVE-2024-44762-webmin-userenum

このリポジトリには README がありません。...

CVE-2026-32996

CVE-2026-32996 認証済みドメインユーザーによるバックアップサーバー上のVeeamリモートコード実行（RCE）。 技術的な詳細についてはブログ記事を確認してください。 https://github.com/user-attachments/assets/8a570332-1cf6-4905-9107-8fcb973c9ce7 PoC root@kitploit: CVE-2026-32996.exe "whoami C:\pwned.txt" + Found Svc.VeeamEndpointBackup.log Searching for valid GUIDs... +...

WordPress-NotificationX-CVE-2024-1698

セットアップ root@kitploit: docker-compose up --build クリーンアップ root@kitploit: docker-compose down テスト root@kitploit: Measure-Command curl.exe http://localhost/wp-json/notificationx/v1/analytics -Method Post -Body 'nxid=1337&type=clicks=IFASCIISUBSTRINGselect userpass from wpusers where...

CVE-2025-65300

CVE-2025-65300 説明 CVE-2025-65300: Coohom SaaSプラットフォームにおける保存型クロスサイトスクリプティング（XSS）の脆弱性 公開日: 2025-10-28 最終更新: 2025-10-28 報告者: Phisit Pupiw ベンダー: Coohom CWE: CWE-79 – クロスサイトスクリプティング 概要 保存型クロスサイトスクリプティング（XSS）の脆弱性が、Coohom SaaSプラットフォームのAccount Settings → Profile →...

rConfig 3.9.4 - Cross-Site Scripting

rConfig 3.9.4 is vulnerable to reflected XSS. The configDevice.php file improperly validates user input. An attacker can exploit this vulnerability by crafting arbitrary JavaScript in the rid GET parameter of devicemgmnt.php id: CVE-2020-12259 info: name: rConfig 3.9.4 - Cross-Site Scripting...

Jira Server and Data Center - Information Disclosure

Jira Server and Data Center is susceptible to information disclosure. An attacker can enumerate users via the /ViewUserHover.jspa endpoint and thus potentially access sensitive information, modify data, and/or execute unauthorized operations. Affected versions are before version 7.13.6, from...