CVE-2024-9061

CVE-2024-9061 WP Popup Builder – Popup-Formulare und Marketing-Lead-Generierung = 1.3.5 - Nicht authentifizierte willkürliche Shortcode-Ausführung über wpajaxnoprivshortcodeApiAdd Beschreibung Das Plugin WP Popup Builder – Popup-Formulare und Marketing-Lead-Generierung für WordPress ist anfällig...

CVE-2023-6985

CVE-2023-6985 10Web AI Assistant – AI content writing assistant = 1.0.18 - Mancanza di autorizzazione per l'installazione/attivazione arbitraria di plugin per utenti autenticati Subscriber+ Descrizione Il plugin 10Web AI Assistant – AI content writing assistant per WordPress è vulnerabile alla...

CVE-2023-30486

CVE-2023-30486 Square = 2.0.0 - Autorizzazione mancante tramite activateplugin Descrizione Il tema Square per WordPress è vulnerabile all'attivazione non autorizzata di plugin a causa della mancanza di un controllo delle capacità sulla funzione activateplugin chiamata tramite un'azione AJAX nelle...

CVE-2024-12252

SEO LAT Auto Post = 2.2.1 - Esecuzione di codice remoto Descrizione Il plugin SEO LAT Auto Post per WordPress è vulnerabile alla sovrascrittura di file a causa di una mancata verifica delle capability sull'azione AJAX remoteupdate in tutte le versioni fino alla 2.2.1 inclusa. Ciò consente ad...

CVE-2025-0316-Exploit

CVE-2025-0316-Exploit Boîte à outils d'exploitation CVE-2025-0316 🚨 Exploit de contournement d'authentification pour le plugin WordPress WP Directorybox Manager 🔥 Script d'exploitation automatisé pour CVE-2025-0316 — Contournement d'authentification via une action AJAX vulnérable. ⚠️ Avis légal Ce...

CVE-2020-36708

CVE-2020-36708 – WordPress Epsilon Framework Function Injection PoC Überblick CVE-2020-36708 ist eine Sicherheitslücke im Epsilon Framework für WordPress, die es nicht authentifizierten Angreifern ermöglicht, über die AJAX-Aktion epsilonframeworkajaxaction beliebige PHP-Klassenmethoden aufzurufen...

CVE-2025-4380

CVE-2025-4380 - Plugin Ads Pro = 4.89 - Exploit di Local File Inclusion LFI Descrizione Questo exploit in Python prende di mira il plugin Ads Pro ≤ 4.89 per WordPress, vulnerabile a Local File Inclusion LFI tramite l'azione AJAX bsapreviewcallback. Un attaccante non autenticato può sfruttare ques...

CVE-2022-0739-Exploitation

CVE-2022-0739-Exploitation Eine Ausnutzung von CVE-2022-0739. Es geht um das BookingPress WordPress-Plugin vor Version 1.0.11. Durch die Verwendung der AJAX-Aktion bookingpressfrontgetcategoryservices verfügbar für nicht authentifizierte Benutzer, was zu einer nicht authentifizierten SQL-Injectio...

CVE-2024-12849-Poc

CVE-2024-12849-Poc 📜 Descrizione Il plugin Error Log Viewer By WP Guru per WordPress è vulnerabile alla Lettura Arbitraria di File in tutte le versioni fino alla 1.0.1.3 inclusa tramite l'azione AJAX wpajaxnoprivelvwplogdownload. Ciò consente ad attaccanti non autenticati di leggere il contenuto ...

CVE-2024-10958-WPPA-Exploit

WordPress WP Photo Album Plus Arbitrary Shortcode Execution CVE-2024-10958 Codice PoC per la vulnerabilità di esecuzione arbitraria di shortcode non autenticata presente nel plugin WordPress WP Photo Album Plus. Dettagli Versioni interessate: = 8.8.08.007 Punteggio CVSS: 7.3 Alto Tipo di...

CVE-2025-13486-POC

CVE-2025-13486 Prova de Conceito Uma exploração de Prova de Conceito PoC para CVE-2025-13486, uma vulnerabilidade de Execução Remota de Código no plugin WordPress Advanced Custom Fields: Extended ACFE. Visão Geral da Vulnerabilidade Esta vulnerabilidade existe nas versões 0.9.0.5 a 0.9.1.1 do ACF...

CVE-2026-19632 TranslatePress – Multilingual <= 3.3.1 - Unauthenticated Account Takeover via Password Reset Link Disclosure

CVE-2026-19632 affects the TranslatePress – Multilingual WordPress plugin (all versions ≤ 3.3.1). An unauthenticated attacker can retrieve a plaintext administrator password-reset URL via the trp_get_translations_regular AJAX action, which exposes dictionary rows from the secondary-language trans...

CVE-2024-11728

CVE-2024-11728 KiviCare – Clinic & Patient Management System EHR Plugin WordPress – PoC di SQL Injection non autenticata Questo repository contiene uno script Proof of Concept PoC per sfruttare una vulnerabilità di SQL Injection nel plugin WordPress KiviCare – Clinic & Patient Management System...

CVE-2021-24499

CVE-2021-24499 | Workreap - Freelance Marketplace and Directory WordPress Theme 2.2.2 - Caricamento File Arbitrario WordPress Theme Workreap 2.2.2 - Caricamento File Non Autenticato che Porta a Esecuzione di Codice Remota Un potente e accurato strumento di sfruttamento di massa per la vulnerabili...

WP Maps Pro (wp-google-map-gold) <= 6.1.0 - Unauthenticated Administrator Account Creation

The WP Maps Pro plugin for WordPress is vulnerable to Privilege Escalation via Administrator Account Creation in all versions up to, and including, 6.1.0. This is due to the wpgmptempaccessajax AJAX action being registered with wpajaxnopriv and protected only by a nonce check using the...

ARMember < 3.4.8 - Unauthenticated Admin Account Takeover

The ARMember WordPress plugin before 3.4.8 is vulnerable to account takeover even the administrator due to missing nonce and authorization checks in an AJAX action available to unauthenticated users, allowing them to change the password of arbitrary users by knowing their username. id:...

Youzify < 1.2.0 - Unauthenticated SQLi

The Youzify WordPress plugin before 1.2.0 does not sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to an unauthenticated SQL injection id: CVE-2022-1950 info: name: Youzify 1.2.0 - Unauthenticated SQLi author:...

WordPress KiviCare <2.3.9 - SQL Injection

WordPress KiviCare plugin before 2.3.9 contains a SQL injection vulnerability. The plugin does not sanitize and escape some parameters before using them in SQL statements via the ajaxpost AJAX action with the getdoctordetails route. An attacker can possibly obtain sensitive information, modify...

WordPress WOOCS < 1.3.7.5 - Cross-Site Scripting

WordPress WOOCS plugin before 1.3.7.5 is susceptible to cross-site scripting. The plugin does not sanitize and escape the woocsinordercurrency parameter of the woocsgetproductspricehtml AJAX action, available to both unauthenticated and authenticated users, before outputting it back in the...

Web Directory Free < 1.7.0 - SQL Injection

The plugin does not sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection with different techniques like UNION, Time-Based and Error-Based. id: CVE-2024-3552 info: name: Web Directory Free 1.7.0 - SQL...