CVE-2025-0316-Exploit

CVE-2025-0316-Exploit Kit di Exploit CVE-2025-0316 🚨 Exploit di Auth Bypass per il Plugin WordPress WP Directorybox Manager 🔥 Script di exploit automatizzato per CVE-2025-0316 — Auth Bypass tramite azione AJAX vulnerabile. ⚠️ Avviso Legale Questo strumento è destinato esclusivamente a: Ricerca...

CVE-2020-36708

CVE-2020-36708 – WordPress Epsilon Framework Function Injection PoC Überblick CVE-2020-36708 ist eine Sicherheitslücke im Epsilon Framework für WordPress, die es nicht authentifizierten Angreifern ermöglicht, über die AJAX-Aktion epsilonframeworkajaxaction beliebige PHP-Klassenmethoden aufzurufen...

CVE-2022-0739-Exploitation

CVE-2022-0739-Exploitation Eine Ausnutzung von CVE-2022-0739. Es geht um das BookingPress WordPress-Plugin vor Version 1.0.11. Durch die Verwendung der AJAX-Aktion bookingpressfrontgetcategoryservices verfügbar für nicht authentifizierte Benutzer, was zu einer nicht authentifizierten SQL-Injectio...

CVE-2025-4380

CVE-2025-4380 - Plugin Ads Pro = 4.89 - Exploit di Local File Inclusion LFI Descrizione Questo exploit in Python prende di mira il plugin Ads Pro ≤ 4.89 per WordPress, vulnerabile a Local File Inclusion LFI tramite l'azione AJAX bsapreviewcallback. Un attaccante non autenticato può sfruttare ques...

CVE-2024-12849-Poc

CVE-2024-12849-Poc 📜 Descrizione Il plugin Error Log Viewer By WP Guru per WordPress è vulnerabile alla Lettura Arbitraria di File in tutte le versioni fino alla 1.0.1.3 inclusa tramite l'azione AJAX wpajaxnoprivelvwplogdownload. Ciò consente ad attaccanti non autenticati di leggere il contenuto ...

CVE-2024-10958-WPPA-Exploit

WordPress WP Photo Album Plus Arbitrary Shortcode Execution CVE-2024-10958 Codice PoC per la vulnerabilità di esecuzione arbitraria di shortcode non autenticata presente nel plugin WordPress WP Photo Album Plus. Dettagli Versioni interessate: = 8.8.08.007 Punteggio CVSS: 7.3 Alto Tipo di...

CVE-2025-13486-POC

CVE-2025-13486 Prova de Conceito Uma exploração de Prova de Conceito PoC para CVE-2025-13486, uma vulnerabilidade de Execução Remota de Código no plugin WordPress Advanced Custom Fields: Extended ACFE. Visão Geral da Vulnerabilidade Esta vulnerabilidade existe nas versões 0.9.0.5 a 0.9.1.1 do ACF...

CVE-2026-19632 TranslatePress – Multilingual <= 3.3.1 - Unauthenticated Account Takeover via Password Reset Link Disclosure

CVE-2026-19632 affects the TranslatePress – Multilingual WordPress plugin (all versions ≤ 3.3.1). An unauthenticated attacker can retrieve a plaintext administrator password-reset URL via the trp_get_translations_regular AJAX action, which exposes dictionary rows from the secondary-language trans...

CVE-2024-11728

CVE-2024-11728 KiviCare – Clinic & Patient Management System EHR Plugin WordPress – PoC di SQL Injection non autenticata Questo repository contiene uno script Proof of Concept PoC per sfruttare una vulnerabilità di SQL Injection nel plugin WordPress KiviCare – Clinic & Patient Management System...

CVE-2021-24499

CVE-2021-24499 | Workreap - Freelance Marketplace and Directory WordPress Theme 2.2.2 - Caricamento File Arbitrario WordPress Theme Workreap 2.2.2 - Caricamento File Non Autenticato che Porta a Esecuzione di Codice Remota Un potente e accurato strumento di sfruttamento di massa per la vulnerabili...

WP Maps Pro (wp-google-map-gold) <= 6.1.0 - Unauthenticated Administrator Account Creation

The WP Maps Pro plugin for WordPress is vulnerable to Privilege Escalation via Administrator Account Creation in all versions up to, and including, 6.1.0. This is due to the wpgmptempaccessajax AJAX action being registered with wpajaxnopriv and protected only by a nonce check using the...

ARMember < 3.4.8 - Unauthenticated Admin Account Takeover

The ARMember WordPress plugin before 3.4.8 is vulnerable to account takeover even the administrator due to missing nonce and authorization checks in an AJAX action available to unauthenticated users, allowing them to change the password of arbitrary users by knowing their username. id:...

Youzify < 1.2.0 - Unauthenticated SQLi

The Youzify WordPress plugin before 1.2.0 does not sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to an unauthenticated SQL injection id: CVE-2022-1950 info: name: Youzify 1.2.0 - Unauthenticated SQLi author:...

WordPress KiviCare <2.3.9 - SQL Injection

WordPress KiviCare plugin before 2.3.9 contains a SQL injection vulnerability. The plugin does not sanitize and escape some parameters before using them in SQL statements via the ajaxpost AJAX action with the getdoctordetails route. An attacker can possibly obtain sensitive information, modify...

WordPress WOOCS < 1.3.7.5 - Cross-Site Scripting

WordPress WOOCS plugin before 1.3.7.5 is susceptible to cross-site scripting. The plugin does not sanitize and escape the woocsinordercurrency parameter of the woocsgetproductspricehtml AJAX action, available to both unauthenticated and authenticated users, before outputting it back in the...

Web Directory Free < 1.7.0 - SQL Injection

The plugin does not sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection with different techniques like UNION, Time-Based and Error-Based. id: CVE-2024-3552 info: name: Web Directory Free 1.7.0 - SQL...

CVE-2026-17089 Events Manager <= 7.4.0.1 - Reflected Cross-Site Scripting via 'header_format' Parameter

The Events Manager – Calendar, Bookings, Tickets, and more! plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'headerformat' parameter in all versions up to, and including, 7.4.0.1 due to insufficient input sanitization and output escaping. This makes it possible for...

CVE-2026-75982

The LearnPress plugin for WordPress is vulnerable to unauthorized modification of arbitrary WordPress options in versions up to, and including, 4.4.4 via the learnpresscreatepage AJAX action. The LPAdminAjax::createpage handler only checks the editpages capability and a wprest nonce both availabl...

CVE-2026-75982 LearnPress <= 4.4.4 - Missing Authorization to Authenticated (Editor+) Limited Option Update via 'field_name' Parameter

The LearnPress plugin for WordPress is vulnerable to unauthorized modification of arbitrary WordPress options in versions up to, and including, 4.4.4 via the learnpresscreatepage AJAX action. The LPAdminAjax::createpage handler only checks the editpages capability and a wprest nonce both availabl...

CVE-2026-75982 LearnPress <= 4.4.4 - Missing Authorization to Authenticated (Editor+) Limited Option Update via 'field_name' Parameter

The LearnPress plugin for WordPress is vulnerable to unauthorized modification of arbitrary WordPress options in versions up to, and including, 4.4.4 via the learnpresscreatepage AJAX action. The LPAdminAjax::createpage handler only checks the editpages capability and a wprest nonce both availabl...