276850 matches found
CVE-2024-2961
Buddyforms 2.7.7 CNEXT RCE 利用 CVE-2024-2961 和 CVE-2023–26326 实现远程代码执行（RCE） 用法 root@kitploit: git-clone https://github.com/suce0155/CVE-2024-2961buddyforms2.7.7 pip install -r requirements.txt python3 buddyforms2.7.7cnextexploit.py http://site/wp-admin/admin-ajax.php ip port 分析与技术细节 查看我的 博客文章 POC...
CVE-2023-0156
CVE ID : CVE-2023-0156 Vulnerability Type : Directory Traversal Description : The All-In-One Security AIOS plugin for WordPress is vulnerable to directory traversal in versions up to, and including, 5.1.4. This allows authenticated attackers with administrator-level permissions to read the conten...
CVE-2025-2005
CVE-2025-2005 - WordPress Front-End Users 插件中的漏洞 By h4ckxel 快速信息 插件： Front-End Users 受影响版本： ------WebKitForm...
UPGer
UPGer | CVE-2022-4060 - 用户帖子相册 自动批量检测CVE-2022-4060漏洞的工具 - WordPress插件：User Post Gallery install.sh sha1sum install.sh | grep 12345678 md5sum install.sh sha512sum install.sh bash install.sh 使用方法 bash upger.sh yourlist.txt thread 参考 https://nvd.nist.gov/vuln/detail/CVE-2022-4060...
CVE-2025-22710
CVE-2025-22710 1️⃣ Tipo de componente Plugin de WordPress 2️⃣ Detalles del componente Nombre del componente WooCommerce Advanced Bulk Edit Products, Orders, Coupons, Any WordPress Post Type – Smart Manager Versión vulnerable = 8.50.0 Slug del componente smart-manager-for-wp-e-commerce Enlace del...
CVE-2008-1930
CVE-2008-1930 利用技术文档指南 文档信息 目的：教育和授权的安全评估文档 漏洞：CVE-2008-1930 受众：安全分析师、渗透测试人员、学生 环境：受控且授权的测试实验室 目录 1. 引言 2. 范围与目标 3. 实验室环境 4. 方法论概述 5. 工具 1 – NSLookup 6. 工具 2 – Nmap 7. 工具 3 – Searchsploit 8. 工具 4 – Gobuster 9. 工具 5 – WPScan 10. 工具 6 – VirtualBox 11. 工具 7 – CVE-2008-1930 ISO 环境 12. 攻击工作流程 13. 发现文档...
CVE-2025-9049 Nokri – Job Board WordPress Theme <= 1.6.4 - Missing Authorization to Authenticated (Subscriber +) Privilege Escalation via Account Takeover
The Nokri – Job Board WordPress Theme theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'nokriaccountmemberpermissions' function in all versions up to, and including, 1.6.4. This makes it possible for authenticated attackers, with...
EUVD-2026-71992
The Ninja Forms - Save Progress plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 3.0.30. This is due to the lack of capability checks and nonce verification in the 'bulkactions' function. This makes it possible for authenticated attackers, with...
EUVD-2025-210856
The Nokri – Job Board WordPress Theme theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'nokriaccountmemberpermissions' function in all versions up to, and including, 1.6.4. This makes it possible for authenticated attackers, with...
CVE-2025-9049
Nokri – Job Board WordPress Theme (versions up to and including 1.6.4 ) is vulnerable to privilege escalation via account takeover due to a missing capability check on the nokri_account_member_permissions function. An authenticated attacker with Subscriber-level access can create new Subscriber u...
CVE-2026-15550
The Ninja Forms – Save Progress WordPress plugin (versions ≤ 3.0.30) is affected by a missing authorization flaw rooted in the absence of capability checks and nonce verification within the bulk_actions function. Authenticated users holding subscriber-level or higher permissions can leverage this...
CVE-2026-10196
The Mail Mint WordPress plugin (Email Marketing, Newsletter, Email Automation & WooCommerce Emails) is affected by an unauthenticated PHP Object Injection in all versions up to and including 1.31.0 . The root cause is deserialization of untrusted input in the handle_form_submission function, whic...
EUVD-2026-71991
The Mail Mint – Email Marketing, Newsletter, Email Automation & WooCommerce Emails plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.31.0 via deserialization of untrusted input in the 'handleformsubmission' function. This makes it possible for...
CVE-2026-10196 Mail Mint <= 1.31.0 - Unauthenticated PHP Object Injection in Arbitrary Form Fields
The Mail Mint – Email Marketing, Newsletter, Email Automation & WooCommerce Emails plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.31.0 via deserialization of untrusted input in the 'handleformsubmission' function. This makes it possible for...
EUVD-2026-71990
The LearnDash LMS plugin for WordPress is vulnerable to authorization bypass in versions 4.25.0 - 5.1.6. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to enroll arbitrary users in paid courses...
CVE-2023-3460
Ultimate Member - 概述 欢迎来到 Ultimate Member GitHub 仓库！Ultimate Member 是一款功能强大且灵活的用户资料与会员插件，适用于 WordPress。但有时插件会存在漏洞，导致网站被入侵。 重要提示：请注意，Ultimate Member 的版本应低于 5.6.7，以确保兼容性和最佳运行效果。使用超出此范围的版本可能导致意外问题与冲突。 使用 python3 exploit.py 示例： python3 exploit.py https://example.com/register --- Ultimate Member 漏洞利用工...
Trinity-Audio-CVE-Report
Trinity-Audio-CVE-Report Divulgación de CVE-2025-9196 CVE-2025-9196 - Vulnerabilidad en Trinity Audio Este repositorio divulga una vulnerabilidad descubierta en Trinity Audio = 5.20.1,plugin de WordPress desarrollado por sergiotrinity. 🛠 Versión Afectada Producto : Trinity Audio Versión : v5.20.1...
CVE-2024-9796
CVE-2024-9796 WordPress WP-Advanced-Search = 5.0.12 基于时间盲注 IF - 注释 载荷: t=wpautosuggest&f=ifnow=sysdate,SLEEP9,0-- wXyW&l=5&type=0&e=utf-8&q=c&limit=5×tamp=13672261755853'...
CVE-2024-9106
CVE-2024-9106 微信社交登录 = 1.3.0 - 认证绕过 描述： WordPress 的微信社交登录插件在版本 1.3.0 及以下存在认证绕过漏洞。这是由于在社交登录过程中对提供的用户验证不足所致。攻击者如果拥有用户ID，就可以在未认证的情况下以任何现有用户（如管理员）的身份登录。只有在应用密钥未设置（默认值为空）时才能利用此漏洞。只需添加 uid=1 或将 ID 号更改为要登录的账户即可。仅适用于微信。 root@kitploit: CVE: CVE-2024-9106 CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H...
SNORDIAN-s-H5PxAPIkatchu-CVE-Report
SNORDIAN's-H5PxAPIkatchu-CVE-Report 关于 CVE-2025-12904 的披露 CVE-2025-12904 - SNORDIAN 的 H5PxAPIkatchu 漏洞 本仓库披露了在 SNORDIAN 的 H5PxAPIkatchu " ' ※如果 object 中的 id 不存在，操作将失败。 影响 : 存储的脚本可能被执行，存在账户劫持等严重危害的风险。 ❓漏洞成因 insertdata 函数未执行任何权限检查，允许恶意输入在未经认证的情况下被保存。此外，这些条目在管理界面上未经转义即被显示。 insertdata 函数应使用...