CVE-2022-45354

Download Monitor = 4.7.60 - Sensitive Information Exposure via REST API CVE-2022-45354:version found on http://wordpress.lan Details : CVE-2022-45354:version matched at http://wordpress.lan Protocol : HTTP Full URL : http://wordpress.lan/wp-content/plugins/download-monitor/readme.txt Timestamp :...

wp-file-manager-CVE-2020-25213

WP-file-manager expoit CVE-2020-25213 WP-file-manager wordpress plugin 6.9 vulnerable to unauthenticated arbitary file upload resulting in full compromise of the system. For More more details refer to my writeup published here Disclaimer I haven't discovered this vulnerability & neither taking an...

wordpress-cve-2018-6389

WordPress-CVE-2018-6389 WordPress Core - 'load-scripts.php' رفض الخدمة = 4.9.4 التاريخ: 05/02/2018 رابط البرنامج: WordPress الإصدار: = 4.9.4 تم الاختبار على: KaLi Linux 2018.1 CVE: CVE-2018-6389 اكتشفه: Barak Tawily الاستغلال بفضل: Javier Olmedo كيفية الاستخدام؟ انسخ هذا المستودع root@kitploit: g...

CVE-2023-32243-Detection-and-Mitigation-in-WordPress

🔐 CVE-2023-32243 – Détection et atténuation dans WordPress 📘 Titre du projet : Détection et atténuation de la CVE-2023-32243 dans le plugin Essential Addons for Elementor pour WordPress 🧠 Résumé Ce projet explore l'exploitation et la prévention de la CVE-2023-32243 , une vulnérabilité critique...

CVE-2025-2563

CVE-2025-2563 The User Registration & Membership WordPress plugin before 4.1.2 does not prevent users to set their account role when the Membership Addon is enabled, leading to a privilege escalation issue and allowing unauthenticated users to gain admin privileges 🔴 Vulnerability Overview...

Config-Exploiter

Config-Exploiter Config-Exploiter : dump config.php File From Joomla And Wordpress Websites Programmed By Belahsan Ouerghi . Installation root@kitploit: sudo apt-get install git git clone https://github.com/TunisianEagles/Config-Exploiter.git cd Config-Exploiter chmod +x install.sh sudo...

CVE-2025-6254

CVE-2025-6254 — Doctreat Core = 1.6.8 — Unauthenticated Privilege Escalation via Role Injection 🔥 Vulnerability Summary The WordPress plugin Doctreat Core versions = 1.6.8 is vulnerable to an unauthenticated privilege escalation vulnerability. This critical flaw allows unauthenticated attackers t...

WORDPRESS-CVE-2024-25600-EXPLOIT-RCE

WORDPRESS-CVE-2024-25600-EXPLOIT-RCE WORDPRESS-CVE-2024-25600-EXPLOIT-RCE - WordPress Bricks Builder Exécution de code à distance RCE...

cve-2019-9787_csrf_poc

CVE-2019-9787 CSRF PoC Overview PoC of CVE-2019-9787 CSRF WordPress Version 5.0 refference Do not use this except for test purpose. Installation root@kitploit: $ docker-compose up -d 1. access http://localhost:8080/ and install WordPress. you only have to create WP admin account. 2. access...

CVE-2023-5561-PoC

PoC CVE-2023-5561 - الكشف عن عناوين البريد الإلكتروني للمستخدمين في ووردبريس الوصف يستغل هذا السكربت ثغرة CVE-2023-5561 في ووردبريس لتعداد وكشف عناوين البريد الإلكتروني للمستخدمين عبر نقطة النهاية /wp-json/wp/v2/users. المتطلبات Python 3.x مكتبة requests قم بتثبيت المكتبة المطلوبة: root@kitploit:...

WP_CROP_RCE

تقرير تحليل WordPress Image CROP RCE POC & Dockekfile : https://github.com/synod2/WPCROPRCE يتناول هذا المستند الثغرتين CVE-2019-8942 وCVE-2019-8943، المعروفتين باسم WordPress Image CROP RCE، واللتين تم اكتشافهما في إصدارات Wordpress السابقة للإصدارين 4.9.9 و5.0.1. رقم CVE| تاريخ الإفصاح| الوصف...

CVE-2024-10924-Wordpress-Docker

CVE-2024-10924 : ثغرة تجاوز المصادقة في إضافة Really Simple Security لووردبريس في Docker الوصف إضافات Really Simple Security المجانية، الاحترافية، والمتعددة المواقع الاحترافية لووردبريس، الإصدارات 9.0.0 إلى 9.1.1.1، تتأثر بثغرة تجاوز المصادقة. تنشأ هذه المشكلة من معالجة الأخطاء غير الصحيحة في دال...

github-dorks

Github Dorks Github Search is a quite powerful and useful feature that can be used to search for sensitive data on repositories. Collection of Github dorks can reveal sensitive personal and/or organizational information such as private keys, credentials, authentication tokens, etc. This list is...

CVE-2026-11613

CVE-2026-11613 — Divi Ajax Filter RCE...

CVE-2019-8943

CVE-2019-8943 WordPress 5.0.0 - Image Remote Code Execution Exploit of CVE-2019-8942 and CVE-2019-8943 using python : ExploitDB : https://www.exploit-db.com/exploits/49512 The original exploit for metasploit : WordPress Core 5.0.0 - Crop-image Shell Upload Metasploit :...

Wordpress-DOS

CVE-2018-6389 exploit for Wordpress sites A small DOS script targeting an unpatched vulnerability in wordpress sites. Uses /wp-admin/load-scripts.php to request additional scripts from hosting server. Includes large list of scripts as request payload This implementation is for testing purposes on...

CVE-2024-4295-Poc

CVE-2024-4295-Poc CVE-2024-4295 Email Subscribers by Icegram Express editsubscriberstatus \email-subscribers\lite\includes\db\class-es-db-lists-contacts.php:616 EmailSubscribersPublic-esemailsubscribeinit \email-subscribers\lite\public\class-email-subscribers-public.php:178 WPHook-applyfilters...

WP-GDPR-Compliance-Plugin-Exploit

Exploit of Vulnerability CVE-2018-19207 in WP GDPR Compliance Plugin WordPress This python script creates a user with role admin. Change the varbiables baseurl, username, email for your specific case. A working email is needed, because an email is sent to this adress in order to setup a password...

wp_hunter

wphunter Static analysis to search for vulnerabilities in Wordpress plugins. root@kitploit: / \ / \ / | \ / | \ // /| / \ | / \ / \ \ \ / | | \ Y / | / | \ | \ /| | / /\ / ||| /|/|| /| \ | / // / / / | Author: @JosueEncinar Starting the process Total plugins 87509 Starting the analisys...

base-wordpress

BASE-WORDPRESS هذا جزء من Cved: أداة لإدارة حاويات دوكر المعرضة للخطر. Cved: https://github.com/git-rep-src/cved مصدر الصورة: https://github.com/cved-sources/base-wordpress الصورة مبنية على: https://github.com/Medicean/VulApps/tree/master/base/wordpress...