CVE-2026-97317

The Giveaways and Contests by RafflePress WordPress plugin before 1.12.27 does not remove the reCAPTCHA secret key from the giveaway settings it embeds in public giveaway pages, allowing unauthenticated visitors to retrieve the secret key of any active giveaway that has reCAPTCHA configured...

CVE-2026-91828

The OMGF | GDPR/DSGVO Compliant, Faster Google Fonts. Easy. WordPress plugin before 6.3.11 does not require authentication or a valid nonce on an action that issues a slow server-side loopback request, allowing unauthenticated attackers to exhaust the site's PHP worker pool and make the entire si...

CVE-2026-91023

The Motors WordPress plugin before 1.4.124 does not properly verify that a user is authorised to modify a listing before processing one of its listing management actions, allowing authenticated attackers with subscriber-level access and above to set metadata on posts they do not own, including...

CVE-2026-81740

The Paytm Payment Gateway WordPress plugin before 2.8.9 does not verify that payment callbacks genuinely originate from the payment provider when its secret key has not been configured, which is its state immediately after activation, allowing unauthenticated attackers to change the status of...

st2-048

St2-048 リモートコード実行の脆弱性 Apache Struts 2 の Struts 2.3.x シリーズにおける Struts 1 プラグインの例である Struts Showcase アプリでの RCE の可能性 http://struts.apache.org/docs/s2-048.html https://cwiki.apache.org/confluence/display/WW/S2-048 使用方法: python St2-048.py set url : http://xx.xx.xx.xx:port/integration/saveGangster.actio...

poc-CVE-2026-23489

POC CVE-2026-23489 CVE-2026-23489 GLPI “Fields” 插件 --cookie-value COOKIEVALUE GLPI session cookie value --php PHP Raw PHP to execute on the server end statements with ';', Dropdowns...

CVE-2026-97318

The Giveaways and Contests by RafflePress WordPress plugin versions prior to 1.12.27 is vulnerable to an unauthenticated stored open redirect . The flaw exists because the plugin fails to properly validate the parent page URL of a giveaway before saving it. An attacker can exploit this to manipul...

CVE-2026-94298

The BuildKit WordPress plugin versions prior to 1.0.29 is vulnerable to a Stored SQL Injection flaw. The root cause is the improper sanitization and escaping of data submitted by contributor-level users before it is stored and subsequently used in a SQL query via the list_content parameter. This ...

EUVD-2026-91195

The BuildKit WordPress plugin before 1.0.29 does not properly sanitise and escape data submitted by contributor-level users before storing it and later using it in a SQL query, allowing a Contributor to inject SQL that runs against the database once the resulting content is published and viewed b...

CVE-2026-91828 OMGF < 6.3.11 - Unauthenticated DoS via do_optimize

The OMGF | GDPR/DSGVO Compliant, Faster Google Fonts. Easy. WordPress plugin before 6.3.11 does not require authentication or a valid nonce on an action that issues a slow server-side loopback request, allowing unauthenticated attackers to exhaust the site's PHP worker pool and make the entire si...

CVE-2026-85004 Popup Maker WP <= 1.4.5 - Subscriber+ Missing Authorization via sgpm_connect

The Popup Maker WordPress plugin through 1.4.5 does not perform a capability check on one of its account-connection actions, only verifying a nonce, allowing authenticated users with minimal privileges such as Subscribers to overwrite a site-wide Popup Maker WordPress plugin through 1.4.5 option...

CVE-2026-81740 Paytm Payment Gateway < 2.8.9 - Unauthenticated Order Status Manipulation via Payment Callback

The Paytm Payment Gateway WordPress plugin before 2.8.9 does not verify that payment callbacks genuinely originate from the payment provider when its secret key has not been configured, which is its state immediately after activation, allowing unauthenticated attackers to change the status of...

CVE-2026-81740

The Paytm Payment Gateway WordPress plugin in versions before 2.8.9 is vulnerable to unauthenticated order status manipulation. The root cause is a failure to verify that payment callbacks genuinely originate from the payment provider when the secret key has not been configured, which is the defa...

WordPress Popup Maker plugin <= 1.4.5 - Subscriber+ Missing Authorization vulnerability

Subscriber+ Missing Authorization vulnerability discovered by Artus KG in WordPress Plugin Popup Maker WP versions = 1.4.5...

EUVD-2026-91201

The Paytm Payment Gateway WordPress plugin before 2.8.9 does not verify that payment callbacks genuinely originate from the payment provider when its secret key has not been configured, which is its state immediately after activation, allowing unauthenticated attackers to change the status of...

CVE-2024-12404

CVE-2024-12404 CF Internal Link Shortcode = 1.1.0 - 未认证 SQL 注入 描述 WordPress 的 CF Internal Link Shortcode 插件在包括 1.1.0 在内的所有版本中，由于对用户提供的参数转义不足，且现有 SQL 查询缺乏充分的预处理，容易通过 'posttitle' 参数受到 SQL 注入攻击。这使得未经认证的攻击者能够将额外的 SQL 查询附加到已有查询中，从而从数据库中提取敏感信息。 详细信息 类型 : 插件 Slug : internal-link-shortcode 受影响版本 : 1.1.0...

CVE-2024-12157

CVE-2024-12157 Popup – MailChimp、GetResponse、ActiveCampaign 統合 = 3.2.6 - 未認証SQLインジェクション 説明 WordPress用プラグイン「Popup – MailChimp、GetResponse、ActiveCampaign 統合」は、3.2.6 以前のすべてのバージョンにおいて、'upcdeletedbrecord' AJAXアクションの 'id'...

agency-toolkit-1023-missing-authorization-to-unauthenticated-arbitrary-options-update

NoCVE Agency Toolkit = 1.0.23 - 認可の欠如による未認証の任意オプション更新 説明 WordPress用プラグインAgency...

CVE-2024-12877

CVE-2024-12877 GiveWP – Donation Plugin and Fundraising Platform = 3.19.2 - 認証なしPHPオブジェクトインジェクション 説明 WordPress用プラグイン「GiveWP – Donation Plugin and Fundraising Platform」は、3.19.2までの全バージョンにおいて、寄付フォームからの 'firstName'...

CVE-2023-6553

CVE-2023-6553 PHP 文件包含导致 RCE — Backup Migration 插件 插件： Backup Migration backup-backup ≤ 1.3.7 CVSS： 9.8（严重） CWE： CWE-98 — 对用于 Include/Require 语句的文件名控制不当 身份验证要求： 无 影响： 远程代码执行 1. 这是什么漏洞？ Backup Migration 是一个相当流行的 WordPress 插件（约 90,000+ 个活跃安装），可帮助用户创建备份副本。在备份过程中，插件有一个名为 backup-heart.php 的文件在后台运行——它通...