CVE-2025-4380

CVE-2025-4380 - Эксплойт Local File Inclusion LFI для плагина Ads Pro = 4.89 Описание Этот Python-эксплойт нацелен на плагин Ads Pro ≤ 4.89 для WordPress, уязвимый к Local File Inclusion LFI через AJAX-действие bsapreviewcallback. Неаутентифицированный злоумышленник может использовать эту...

CVE-2025-5815-Nuclei-Template

📄 Template Nuclei pour CVE-2025-5815 🚀 Aperçu Ce dépôt contient un template Nuclei spécialement conçu pour détecter une Vulnérabilité de Désactivation Non Authentifiée de la Journalisation des Bots CVE-2025-5815 dans le plugin WordPress Traffic Monitor. Ce problème permet à des attaquants non...

CVE-2025-5287

CVE-2025-5287 PoC Exploit d'injection SQL non authentifiée pour WordPress Likes and Dislikes Plugin ≤ 1.0.0 📖 Description Ce script Python est un exploit de preuve de concept PoC pour CVE-2025-5287 , ciblant une vulnérabilité dans le WordPress Likes and Dislikes Plugin ≤ 1.0.0. La vulnérabilité...

WP Maps Pro (wp-google-map-gold) <= 6.1.0 - Unauthenticated Administrator Account Creation

The WP Maps Pro plugin for WordPress is vulnerable to Privilege Escalation via Administrator Account Creation in all versions up to, and including, 6.1.0. This is due to the wpgmptempaccessajax AJAX action being registered with wpajaxnopriv and protected only by a nonce check using the...

Youzify < 1.2.0 - Unauthenticated SQLi

The Youzify WordPress plugin before 1.2.0 does not sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to an unauthenticated SQL injection id: CVE-2022-1950 info: name: Youzify 1.2.0 - Unauthenticated SQLi author:...

ARMember < 3.4.8 - Unauthenticated Admin Account Takeover

The ARMember WordPress plugin before 3.4.8 is vulnerable to account takeover even the administrator due to missing nonce and authorization checks in an AJAX action available to unauthenticated users, allowing them to change the password of arbitrary users by knowing their username. id:...

WordPress KiviCare <2.3.9 - SQL Injection

WordPress KiviCare plugin before 2.3.9 contains a SQL injection vulnerability. The plugin does not sanitize and escape some parameters before using them in SQL statements via the ajaxpost AJAX action with the getdoctordetails route. An attacker can possibly obtain sensitive information, modify...

WordPress WOOCS < 1.3.7.5 - Cross-Site Scripting

WordPress WOOCS plugin before 1.3.7.5 is susceptible to cross-site scripting. The plugin does not sanitize and escape the woocsinordercurrency parameter of the woocsgetproductspricehtml AJAX action, available to both unauthenticated and authenticated users, before outputting it back in the...

Web Directory Free < 1.7.0 - SQL Injection

The plugin does not sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection with different techniques like UNION, Time-Based and Error-Based. id: CVE-2024-3552 info: name: Web Directory Free 1.7.0 - SQL...

CVE-2022-0739

CVE-2022-0739 BookingPress 1.0.11 - SQL Injection non autenticata Il plugin non riesce a sanificare correttamente i dati POST forniti dall'utente prima che vengano utilizzati in una query SQL costruita dinamicamente tramite l'azione AJAX bookingpressfrontgetcategoryservices disponibile per utenti...

CVE-2020-36708

CVE-2020-36708 – WordPress Epsilon Framework Function Injection PoC Überblick CVE-2020-36708 ist eine Sicherheitslücke im Epsilon Framework für WordPress, die es nicht authentifizierten Angreifern ermöglicht, über die AJAX-Aktion epsilonframeworkajaxaction beliebige PHP-Klassenmethoden aufzurufen...

CVE-2026-81346

The Frontend Admin by DynamiApps WordPress plugin before 3.29.11 does not perform a capability check on one of its AJAX actions, allowing any authenticated user, such as a subscriber, to delete arbitrary membership plans...

EUVD-2026-68065

The Frontend Admin by DynamiApps WordPress plugin before 3.29.11 does not perform a capability check on one of its AJAX actions, allowing any authenticated user, such as a subscriber, to delete arbitrary membership plans...

CVE-2026-81346 Frontend Admin by DynamiApps < 3.29.11 - Subscriber+ Arbitrary Membership Plan Deletion

The Frontend Admin by DynamiApps WordPress plugin before 3.29.11 does not perform a capability check on one of its AJAX actions, allowing any authenticated user, such as a subscriber, to delete arbitrary membership plans...

CVE-2026-81346

The Frontend Admin by DynamiApps WordPress plugin, prior to version 3.29.11 , fails to perform a capability check on one of its AJAX actions . This missing authorization check allows any authenticated user with the Subscriber role or higher to delete arbitrary membership plans . The root cause is...

CVE-2026-16600

CVE-2026-16600 affects the SmartAIPress WordPress plugin through 1.2.0 . The root cause is a missing capability check on the AJAX action smartaipress_openai_upload_and_set_featured_image, combined with the absence of URL validation before a server-side fetch. This allows any user with subscriber-...

EUVD-2026-68043

The SmartAIPress WordPress plugin through 1.2.0 does not perform a capability check on one of its AJAX actions and does not validate a user-supplied URL before fetching it server-side, allowing users with subscriber-level access and above to make the site retrieve arbitrary internal or external...

CVE-2025-39459-Nuclei-Template

📄 Template Nuclei per CVE-2025-39459 🚀 Panoramica Questo repository contiene un template Nuclei progettato specificamente per rilevare una Vulnerabilità di Escalation dei Privilegi non Autenticata CVE-2025-39459 nel tema WordPress Real Estate 7. Questo problema consente ad attaccanti non...

CVE-2024-12849-Poc

CVE-2024-12849-Poc 📜 Beschreibung Das Plugin Error Log Viewer By WP Guru für WordPress ist in allen Versionen bis einschließlich 1.0.1.3 anfällig für beliebiges Dateilesen Arbitrary File Read über die AJAX-Aktion wpajaxnoprivelvwplogdownload. Dadurch ist es nicht authentifizierten Angreifern...

CVE-2024-9061

CVE-2024-9061 WP Popup Builder – Popup Forms and Marketing Lead Generation = 1.3.5 - Esecuzione Arbitraria di Shortcode Non Autenticata tramite wpajaxnoprivshortcodeApiAdd Descrizione Il plugin WP Popup Builder – Popup Forms and Marketing Lead Generation per WordPress è vulnerabile all'esecuzione...