CVE-2016-15041-mainwp-dashboard

Лаборатория CVE-2016-15041 — Сохранённый XSS в MainWP Dashboard Уязвимая лаборатория для CVE-2016-15041: неаутентифицированный сохранённый XSS в плагине WordPress MainWP Dashboard версии = 3.1.2. Быстрый старт root@kitploit: docker compose up -d --build Подождите 30 секунд для автоматической...

cve-2019-14206-poc

CVE-2019-14206 - Adaptive Images for WordPress Arbitrary File Deletion 📋 목차 1. 취약점 정보 2. 사전 요구사항 3. 설치 4. 테스트 방법 빠른 테스트 전체 Docker 테스트 Nuclei 테스트 수동 테스트 5. 결과 해석 6. 정리 7. 문제 해결 8. 완화 9. 법적 고지 🎯 취약점 정보 CVE-ID: CVE-2019-14206 심각도: 높음 CVSS 6.5 영향 받는 플러그인: Adaptive Images for WordPress 영향 받는 버전: 0.6.6...

CVE-2025-62950-PoC

설명 이 개념 증명PoC은 Contest Gallery – Upload, Vote & Sell with PayPal and Stripe v. 26.1.2 플러그인에서 발견된 사이트 간 요청 위조CSRF 취약점에 대해 설명합니다. 이 문제로 인해 공격자는 인증된 사용자를 속여 조작된 요청을 실행하게 함으로써 사용자의 동의 없이 갤러리 항목을 삭제할 수 있으며, 이는 무단 콘텐츠 손실과 데이터 무결성 손상으로 이어집니다. 세부 정보 취약점 유형 : 사이트 간 요청 위조CSRF 영향을 받는 플러그인 : 영향 공격자는 사용자의 인지나...

EUVD-2026-74724

The Contact Form 7 Captcha WordPress plugin before 0.1.9 runs the shortcode parser over the whole rendered Contact Form 7 form, including the values a visitor submitted, allowing unauthenticated users to execute arbitrary shortcodes registered on the site...

CVE-2026-85117

Contact Form 7 Captcha WordPress plugin versions 0.1.7 through 0.1.8 are affected by an unauthenticated arbitrary shortcode execution vulnerability. The root cause is that the plugin runs the shortcode parser over the entire rendered Contact Form 7 form, including values submitted by a visitor du...

CVE-2026-85117 Contact Form 7 Captcha 0.1.7 - 0.1.8 - Unauthenticated Arbitrary Shortcode Execution via Form Field Repopulation

The Contact Form 7 Captcha WordPress plugin before 0.1.9 runs the shortcode parser over the whole rendered Contact Form 7 form, including the values a visitor submitted, allowing unauthenticated users to execute arbitrary shortcodes registered on the site...

CVE-2026-83537 WP Express Checkout < 2.5.0 - Unauthenticated Payment Bypass via wpec_process_empty_payment

The WP Express Checkout WordPress plugin before 2.5.0 does not verify server-side that a payment was actually completed before marking an order as paid, allowing unauthenticated users to forge a completed order without paying...

CVE-2026-80440 Hustle < 7.8.14.2 - Unauthenticated Arbitrary Shortcode Execution via Success Message Placeholders

The Hustle WordPress plugin before 7.8.14.2 does not prevent shortcodes in submitted form values from being executed when it substitutes those values into the message it returns after submission, because the guard it applies can be defeated by nesting, allowing unauthenticated users to run any...

CVE-2026-19855 Spam protection, Honeypot, Anti-Spam by CleanTalk < 6.87 - Unauthenticated Arbitrary Shortcode Execution via Comment Text

The CleanTalk WordPress plugin before 6.87 does not prevent unauthenticated, user-supplied comment content from being passed to WordPress's shortcode engine, allowing any visitor to have arbitrary shortcodes registered on the site executed server-side and rendered to every subsequent visitor of t...

WordPress Hustle plugin < 7.8.14.2 - Unauthenticated Arbitrary Shortcode Execution vulnerability

Unauthenticated Arbitrary Shortcode Execution vulnerability discovered by Jakub Herman in WordPress Plugin Hustle versions 7.8.14.2...

CVE-2026-19855

CVE-2026-19855 affects the CleanTalk WordPress plugin (Spam Protection, Honeypot, Anti-Spam) versions prior to 6.87 . The vulnerability allows unauthenticated visitors to inject arbitrary shortcodes via comment text, which are then passed to WordPress's shortcode engine and executed server-side, ...

CVE-2026-80440

Hustle is a WordPress plugin for lead generation and email marketing. Versions prior to 7.8.14.2 are affected by an unauthenticated arbitrary shortcode execution vulnerability. When a user submits a form, the plugin substitutes submitted values into a success message. The guard it applies to prev...

EUVD-2026-74721

The CleanTalk WordPress plugin before 6.87 does not prevent unauthenticated, user-supplied comment content from being passed to WordPress's shortcode engine, allowing any visitor to have arbitrary shortcodes registered on the site executed server-side and rendered to every subsequent visitor of t...

EUVD-2026-74722

The Hustle WordPress plugin before 7.8.14.2 does not prevent shortcodes in submitted form values from being executed when it substitutes those values into the message it returns after submission, because the guard it applies can be defeated by nesting, allowing unauthenticated users to run any...

CVE-2026-85132

The WPLP Cookie Consent WordPress plugin before 4.4.2 does not perform nonce or capability checks on one of its cookie scanner AJAX actions, allowing any authenticated user, such as a subscriber, to read back the automated scan schedule the administrator configured...

CVE-2026-8615

The Reviso Exporter for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check and missing nonce verification on the disconnectcallback function in versions up to, and including, 1.2.3. The function is registered to the...

CVE-2026-85418

The Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More WordPress plugin before 3.0.9 does not validate a user-supplied HTML tag name in one of its Beaver Builder widgets before echoing it into the rendered markup, allowing users with contributor-level access an...

CVE-2026-85037

The Sunshine Photo Cart WordPress plugin before 3.7 does not validate that a client-supplied price identifier belongs to the item being purchased when it is added to the cart, allowing unauthenticated users to buy items at a lower price defined elsewhere on the site and complete an order at that...

CVE-2026-84222

The Kirki WordPress plugin before 6.3.0 does not check whether the requester is allowed to read a post before rendering and returning its page content, allowing unauthenticated users to retrieve the content of pages that are not publicly available, such as private, draft, pending and trashed ones...

CVE-2026-84908

The WPFunnels plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 3.12.13. This is due to the plugin registering the 'wpfnlloadpayment' AJAX action for both authenticated and unauthenticated wpajaxnopriv users and the underlying addofferproducttocart...