CVE-2025-6220

Ultimate Addons for Contact Form 7 1: lo: mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000 link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo validlft forever preferredlft forever inet6 ::1/128 scope host validlft forever preferredlft forever 2: eth0...

CVE-2017-0213-

CVE-2017-0213 CMD에서 관리자 권한을 얻기 취약 대상 제품| 버전| 업데이트| 테스트 ---|---|---|--- Windows 10| | | √ Windows 10| 1511| | Windows 10| 1607| | Windows 10| 1703| | √ Windows 7| | SP1| √ Windows 8.1| | | Windows RT 8.1| | | Windows Server 2008| | SP2| Windows Server 2008| R2| SP1| Windows Server 2012| | | Window...

CVE-2026-2002-poc

요약 WordPress용 Forminator Forms – Contact Form, Payment Form & Custom Form Builder 플러그인은 1.50.2를 포함한 모든 버전에서 formname 매개변수를 통한 Stored Cross-Site Scripting저장형 XSS 취약점에 노출되어 있습니다. 이는 불충분한 입력 검증sanitization과 출력 이스케이핑escaping 때문입니다. 이로 인해 관리자administrator 수준 접근 권한을 가진 인증된 공격자가 페이지에 임의의 웹 스크립트를 주입할 수...

CVE-2025-7431

개념 증명 – CVE-2025-7431 Knowledge Base = 2.3.1 - 인증된 관리자+ 저장형 크로스 사이트 스크립팅 플러그인 슬러그 경유 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N ------- 4.4 취약점 개요 인증된 공격자관리자는 WordPress용 Knowledge Base 플러그인의 설정에 악성 숏코드 콘텐츠를 주입하여 저장형 크로스 사이트 스크립팅XSS 취약점을 악용할 수 있습니다. 재현 단계 1. 테스터가 다음 경로로 이동합니다: root@kitploit:...

Masteriyo LMS <= 1.7.2 - Unauthenticated Privilege Escalation

The Masteriyo LMS – eLearning and Online Course Builder for WordPress plugin for WordPress is vulnerable to privilege escalation due to a missing capability check on the updateloggedinuser function in all versions up to, and including, 1.7.2. This makes it possible for unauthenticated attackers t...

Ultimate Member < 2.1.12 - Unauthenticated Privilege Escalation via User Meta

An issue was discovered in the Ultimate Member plugin before 2.1.12 for WordPress, aka Unauthenticated Privilege Escalation via User Meta. An attacker could supply an array parameter for sensitive metadata, such as the wpcapabilities user meta that defines a user's role. During the registration...

HyperComments <= 1.2.2 - Arbitrary Options Update

The HyperComments plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the hcrequesthandler function in all versions up to, and including, 1.2.2. This makes it possible for unauthenticated attackers to...

EUVD-2025-210888

The Translate WordPress with GTranslate WordPress plugin before 3.0.10 does not validate one of its settings before the bundled front-end scripts build markup from it, allowing users with a role as high as administrator to store JavaScript that runs in the session of any visitor to the site...

CVE-2026-22241

🚨 CVE-2026-22241 - Open eClass 테마 가져오기 원격 코드 실행 📌 취약점 요약 널리 사용되는 오픈소스 학습 관리 시스템LMS인 Open eClass일명 GUnet eClass의 테마 가져오기Theme Import 기능에 심각한 무제한 파일 업로드Unrestricted File Upload 취약점이 존재합니다. 인증된 관리자가 악성 ZIP 파일을 업로드하여 서버에서 원격 코드 실행RCE 을 유발할 수 있습니다. ⚠️ 영향받는 버전 버전| 상태 ---|--- Open eClass 4.2| 취약함 Open...

CVE-2025-10046

CVE-2025-10046 - ELEX WooCommerce Google Shopping Автор: Byte Reaper Описание CVE-2025-10046 — это уязвимость SQL-инъекции в плагине ELEX WooCommerce Google Shopping Product Feed для WordPress, версии 1.4.3 и более ранние. Проблема находится в файле includes/elex-manage-feed-ajax.php, где парамет...

vcenter_saml_login

vCenter SAML 로그인 도구 vCenter 백업에서 IdPIdentity Provider 인증서를 추출하고 Administrator로 로그인하기 위한 도구 배경 일반적으로 엔지니어링 진행 중 파일 서버에 있는 vCenter 백업에 접근하거나 최근 CVE를 통해 VCSA 호스트의 root 권한을 획득하게 됩니다. vCenter vSphere UI에 로그인하면 더 많은 시스템과 기밀 정보에 쉽게 접근할 수 있을 뿐만 아니라 고객에게 이러한 발견의 영향을 보여줄 수 있습니다. data.mdb 파일에는 인증서가 포함되어 있으며...

CVE-2026-36392

FairSketch Rise CRM Version 3.9.6 is vulnerable to Cross Site Scripting XSS. An authenticated administrator can inject arbitrary JavaScript into an item's title, which is stored server-side and executed in the browser of any client user who visits the store page, enabling session hijacking, accou...

CVE-2026-47156 MantisBT: SOAP API Authentication Bypass with Privilege Escalation to Administrator

MantisBT is an open source bug tracker. Versions 2.28.3 and earlier contain a critical authentication bypass in the SOAP API's mcichecklogin function. Any user knowing any valid cookiestring can authenticate as any other user knowing their username, including the administrator, without knowing th...

WordPress WP BackItUp Community Edition plugin <= 2.1.0 - Authenticated (Administrator+) Path Traversal to Arbitrary File Read vulnerability

Authenticated Administrator+ Path Traversal to Arbitrary File Read vulnerability discovered by Nikola Kojic in WordPress Plugin WP BackItUp versions = 2.1.0...

CVE-2026-26212 Rara One Click Demo Import < 1.3.5 Arbitrary File Upload RCE

Rara One Click Demo Import plugin for WordPress before 1.3.5 contains an arbitrary file upload vulnerability that allows authenticated attackers with Administrator privileges to upload arbitrary PHP files by passing a false value to wphandleupload that disables WordPress core's file type validati...

CVE-2026-80099 Various Newfold Plugins Various Versions - Unauthenticated Authentication Bypass via Bearer Token Validation with Empty Secret

Several Newfold plugins are vulnerable to Authentication Bypass. The vulnerability exists because the plugins bundle the wp-module-data module. In the module, the authenticate method — registered on the restauthenticationerrors filter and therefore evaluated for every unauthenticated REST API...

CVE-2026-19778

The WPMR Google Feed Manager for WooCommerce – Sell on Google Merchant Center & Shopping plugin for WordPress is vulnerable to time-based SQL Injection via the 'feed' parameter in all versions up to, and including, 2.23.7 due to insufficient escaping on the user supplied parameter and lack of...

EUVD-2026-74715

The Quentn WP WordPress plugin before 1.2.15 does not properly sanitise and escape a parameter before using it in an SQL query, allowing high privilege users such as administrators to perform SQL injection attacks...

CVE-2026-19800

The Mail Mint – Email Marketing, Newsletter, Email Automation & WooCommerce Emails plugin for WordPress is vulnerable to SQL Injection via the 'status' parameter in all versions up to, and including, 1.31.0 due to insufficient escaping on the user supplied parameter and lack of sufficient...

EUVD-2026-74608

The Ninja Forms – The Contact Form Builder That Grows With You plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.14.6 via deserialization of untrusted input . This makes it possible for authenticated attackers, with administrator-level access and...