EUVD-2026-74757

The WPMR Google Feed Manager for WooCommerce – Sell on Google Merchant Center & Shopping plugin for WordPress is vulnerable to time-based SQL Injection via the 'feed' parameter in all versions up to, and including, 2.23.7 due to insufficient escaping on the user supplied parameter and lack of...

WordPress WP Crowdfunding plugin <= 2.2.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability

Authenticated Subscriber+ Stored Cross-Site Scripting vulnerability discovered by Wordfence PRISM in WordPress Plugin WP Crowdfunding versions = 2.2.1...

WordPress Shopping Cart & eCommerce Store plugin <= 5.9.3 - Authenticated (Store Manager+) Privilege Escalation to ec_ajax_save_page_default_options AJAX Action vulnerability

Authenticated Store Manager+ Privilege Escalation to ecajaxsavepagedefaultoptions AJAX Action vulnerability discovered by Wordfence PRISM in WordPress Plugin WP EasyCart versions = 5.9.3...

WordPress WPLP Cookie Consent – Cookie Banner & Consent Management for GDPR, CCPA & Google Consent Mode plugin <= 4.4.1 - Unauthenticated Stored Cross-Site Scripting vulnerability

Unauthenticated Stored Cross-Site Scripting vulnerability discovered by Naoya Takahashi nakko in WordPress Plugin WP Cookie Notice for GDPR, CCPA & ePrivacy Consent versions = 4.4.1...

WordPress User Role Editor – PublishPress Capabilities: Access Control and User Roles plugin <= 2.50.0 - Authenticated (Editor+) Privilege Escalation to Fresh-Install Default Capability Grant vulnerability

Authenticated Editor+ Privilege Escalation to Fresh-Install Default Capability Grant vulnerability discovered by Wordfence PRISM in WordPress Plugin PublishPress Capabilities versions = 2.50.0...

CVE-2026-83537

The WP Express Checkout WordPress plugin before 2.5.0 does not verify server-side that a payment was actually completed before marking an order as paid, allowing unauthenticated users to forge a completed order without paying...

CVE-2026-19855

The CleanTalk WordPress plugin before 6.87 does not prevent unauthenticated, user-supplied comment content from being passed to WordPress's shortcode engine, allowing any visitor to have arbitrary shortcodes registered on the site executed server-side and rendered to every subsequent visitor of t...

WordPress YITH WooCommerce Waitlist Premium plugin <= 3.35.0 - Authenticated (Subscriber+) Privilege Escalation to Admin vulnerability

Authenticated Subscriber+ Privilege Escalation to Admin vulnerability discovered by Michele Genito in WordPress Plugin YITH WooCommerce Waitlist Premium versions = 3.35.0...

WordPress WP plugin Bluehost plugin <= 4.19.0 - Unauthenticated Authentication Bypass vulnerability

Unauthenticated Authentication Bypass vulnerability discovered by sorin vasile in WordPress Plugin WP Plugin Bluehost versions = 4.19.0...

WordPress WP plugin Web plugin <= 2.3.5 - Unauthenticated Authentication Bypass vulnerability

Unauthenticated Authentication Bypass vulnerability discovered by sorin vasile in WordPress Plugin WP Plugin Web versions = 2.3.5...

WordPress WP plugin Crazy Domains plugin <= 2.5.2 - Unauthenticated Authentication Bypass vulnerability

Unauthenticated Authentication Bypass vulnerability discovered by sorin vasile in WordPress Plugin WP Plugin Crazy Domains versions = 2.5.2...

WordPress WP Module Data plugin <= 2.9.7 - Unauthenticated Authentication Bypass vulnerability

Unauthenticated Authentication Bypass vulnerability discovered by sorin vasile in WordPress Plugin WP Module Data versions = 2.9.7...

WordPress WP plugin Hostgator plugin <= 3.2.0 - Unauthenticated Authentication Bypass vulnerability

Unauthenticated Authentication Bypass vulnerability discovered by sorin vasile in WordPress Plugin WP Plugin Hostgator versions = 3.2.0...

WordPress Next-Cart Store to WooCommerce Migration plugin <= 3.9.8 - Unauthenticated Authentication Bypass via Default '__token__' Fallback in REST Migration Endpoint vulnerability

Unauthenticated Authentication Bypass via Default 'token' Fallback in REST Migration Endpoint vulnerability discovered by Samuele Santonicola in WordPress Plugin Next-Cart Store to WooCommerce Migration versions = 3.9.8...

CVE-2026-3844

Explotación Masiva de CVE-2026-3844 CVE-2026-3844 – Breeze Cache WordPress =2.4.4 permite la subida de archivos sin autenticación mediante fetchgravatarfromremote cuando el alojamiento local de gravatar está habilitado. Instalación Descargar el repositorio root@kitploit: git clone...

EUVD-2026-74726

The Checkout Custom Fields Builder for WooCommerce plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.1.5. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated...

CVE-2016-15041-mainwp-dashboard

CVE-2016-15041 Lab - MainWP Dashboard 存储型 XSS CVE-2016-15041 漏洞实验室：MainWP Dashboard WordPress 插件 = 3.1.2 中未经验证的存储型 XSS。 快速开始 root@kitploit: docker compose up -d --build 等待约 30 秒自动设置。实验室准备就绪时会打印横幅： root@kitploit: docker compose logs -f wordpress 访问 资源| 网址 / 凭据 ---|--- WordPress|...

cve-2019-14206-poc

CVE-2019-14206 - WordPress自适应图片任意文件删除 📋 目录 1. 关于漏洞 2. 前提条件 3. 安装 4. 测试方法 快速测试 完整Docker测试 使用Nuclei测试 手动测试 5. 结果解读 6. 清理 7. 故障排除 8. 缓解措施 9. 法律声明 🎯 关于漏洞 CVE-ID: CVE-2019-14206 严重性: 高危 CVSS 6.5 受影响插件: WordPress自适应图片 受影响版本: /dev/null || echo "PHP不可用（可选）" 🚀 安装 步骤1：克隆或下载文件 root@kitploit:...

CVE-2025-62950-PoC

描述 本概念验证（PoC）描述了在 Contest Gallery – Upload, Vote & Sell with PayPal and Stripe v. 26.1.2 插件中发现的一个跨站请求伪造（CSRF）漏洞。该问题允许攻击者诱骗已认证用户执行精心构造的请求，从而在用户不知情的情况下删除图库项目，导致未经授权的内容丢失，影响数据完整性。 详情 漏洞类型 ：跨站请求伪造（CSRF） 受影响插件 ： 影响 攻击者可在用户不知情或未明确许可的情况下触发非预期操作，尤其是删除图库项目。成功利用该漏洞可能导致未经授权的内容删除，威胁系统内的数据完整性。 参考 WPScan...

EUVD-2026-74724

The Contact Form 7 Captcha WordPress plugin before 0.1.9 runs the shortcode parser over the whole rendered Contact Form 7 form, including the values a visitor submitted, allowing unauthenticated users to execute arbitrary shortcodes registered on the site...