Lucene search
+L

12679 matches found

Cvelist
Cvelist
•added 2026/10/05 6:08 p.m.•28 views

CVE-2026-97283 WordPress Advanced Post Manager plugin <= 4.5.5 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in Liquid Web / StellarWP Advanced Post Manager advanced-post-manager allows Object Injection.This issue affects Advanced Post Manager: from n/a through 4.5.5...

9.8CVSS0.00355EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/10/05 6:08 p.m.•14 views

CVE-2026-97283 WordPress Advanced Post Manager plugin <= 4.5.5 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in Liquid Web / StellarWP Advanced Post Manager advanced-post-manager allows Object Injection.This issue affects Advanced Post Manager: from n/a through 4.5.5...

9.8CVSS5.8AI score0.00355EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2026/10/05 4:51 p.m.•11 views

WordPress Advanced Posts Listing – Show Post List Easily plugin <= 1.0.8 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Mohamed Bassia in WordPress Plugin Advanced Posts Listing – Show Post List Easily versions = 1.0.8...

7.5CVSS5.8AI score0.00299EPSS
SaveExploits0Affected Software1
Kitploit
Kitploit
•added 2026/10/05 4:30 p.m.•11 views

CVE-2018-16712

CVE-2018-16712 CVE-2018-16712 の PoC コード 詳細はこちら @ https://downwithup.github.io/CVEPosts.html 脆弱なソフトウェア ダウンロード @: https://www.iobit.com/en/advancedsystemcarefree.php...

6.8CVSS6.4AI score0.01347EPSS
SaveExploits2References1
Kitploit
Kitploit
•added 2026/10/05 3:22 p.m.•15 views

CVE-2023-30777

CVE-2023-30777 Advanced Custom Fields WordPress 플러그인에서 반사형 XSS 취약점에 대한 개념 증명PoC URL 생성기. PoC 생성자: Alucard0x1 익스플로잇 크레딧: https://patchstack.com/articles/reflected-xss-in-advanced-custom-fields-plugins-affecting-2-million-sites/...

7.1CVSS7.4AI score0.3785EPSS
SaveExploits3
Kitploit
Kitploit
•added 2026/10/05 2:40 p.m.•22 views

CVE-2024-9796

CVE-2024-9796 WP-Advanced-Search 3.3.9.2 - 認証なしSQLインジェクション 説明 PoCのSQLインジェクションは、WordPressのユーザーとハッシュをダンプします。 免責事項: このスクリプトは教育目的のみで使用してください。 違法な目的で使用しないでください。 もし使用した場合、その責任はすべてあなたにあります。私はいかなる誤用についても責任を負いません。 脆弱性の詳細情報 https://wpscan.com/vulnerability/2ddd6839-6bcb-4bb8-97e0-1516b8c2b99b/ 使用方法: 成功した試行...

9.8CVSS7.5AI score0.02996EPSS
SaveExploits4
AstraLinux
AstraLinux
•added 2026/10/05 11:39 a.m.•11 views

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ALSA: usx2y: Use sndcardfreewhenclosed when there is a disconnection. The USB disconnection callback should be short and not too long. Alternatively, the current code uses sndcardfree when there is a disconnection, but this waits...

5.5CVSS6.2AI score0.00211EPSS
SaveExploits0References2
Kitploit
Kitploit
•added 2026/10/05 10:39 a.m.•23 views

CVE-2024-9796

CVE-2024-9796 POC SQLi - CVE-2024-9796 CVE-2024-9796 취약점에 대한 기능적 PoC입니다. 이 취약점은 WordPress의 WP Advanced Search 자동 완성 플러그인에 영향을 미치며, 정제되지 않은 GET 매개변수를 통해 SQL 인젝션SQL Injection을 허용합니다. 📌 설명 이 취약점은 공격자가 자동 완성 엔드포인트의 t 매개변수를 통해 임의의 SQL 쿼리를 주입할 수 있도록 합니다:...

9.8CVSS7.7AI score0.02996EPSS
SaveExploits4
Patchstack
Patchstack
•added 2026/10/05 10:05 a.m.•8 views

WordPress Advanced Google reCAPTCHA plugin <= 5.40 - Broken Authentication vulnerability

Broken Authentication vulnerability discovered by Asim Alshaya in WordPress Plugin Advanced Google reCAPTCHA versions = 5.40...

5.3CVSS5.8AI score0.00256EPSS
SaveExploits0Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/05 12:00 a.m.•7 views

CVE-2026-97283: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in Liquid Web / StellarWP Advanced Post Manager advanced-post-manager allows Object Injection.This issue affects Advanced Post Manager: from n/a through 4.5.5...

9.8CVSS5.8AI score0.00355EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/05 12:00 a.m.•6 views

PT-2026-106094

Deserialization of Untrusted Data vulnerability in Liquid Web / StellarWP Advanced Post Manager advanced-post-manager allows Object Injection.This issue affects Advanced Post Manager: from n/a through 4.5.5...

9.8CVSS5.8AI score0.00355EPSS
SaveExploits0References3
Kitploit
Kitploit
•added 2026/10/04 2:49 p.m.•16 views

CVE-2024-2387

CVE-2024-2387 Advanced Form Integration – WooCommerce 및 Contact Form 7을 Google Sheets와 기타 플랫폼에 연결 = 1.82.0 - integrationid를 통한 SQL Injection 및 Reflected Cross-Site Scripting 설명 Advanced Form Integration – WooCommerce 및 Contact Form 7을 Google Sheets와 기타 플랫폼에 연결하는 WordPress 플러그인은 버전 1.82.0까지의 모든 버전...

6.1CVSS7.4AI score0.01639EPSS
SaveExploits2
Kitploit
Kitploit
•added 2026/10/04 11:42 a.m.•13 views

CVE-2025-13486

🔴 CVE-2025-13486 - Advanced Custom Fields Extended ACFE WordPress 플러그인 익스플로잇 📋 개요 CVE-2025-13486 에 대한 개념 증명 익스플로잇입니다. Advanced Custom Fields: Extended ACFE WordPress 플러그인의 치명적인 취약점으로, 원격 코드 실행을 통해 권한 상승이 가능합니다. 🎯 취약점 세부 정보 항목| 세부 내용 ---|--- CVE ID| CVE-2025-13486 플러그인| Advanced Custom Fields:...

9.8CVSS8.1AI score0.67623EPSS
SaveExploits11References3
Kitploit
Kitploit
•added 2026/10/04 9:12 a.m.•23 views

CVE-2022-47447

CVE-2022-47447 POC CSRF - CVE-2022-47447 ⚠️ 교육 목적 및 승인된 환경에서만 사용하십시오. CVE-2022-47447 취약점에 대한 기능적 PoC입니다. 이 취약점은 취약한 WordPress 플러그인에 영향을 미치며, 인증된 사용자를 대상으로 CSRFCross-Site Request Forgery 공격을 허용합니다. 취약한 URL: /wp-admin/admin.php?page=WPAdvancedSearchCallbackStyles...

8.8CVSS8AI score0.0026EPSS
SaveExploits1
Patchstack
Patchstack
•added 2026/10/03 5:44 p.m.•11 views

WordPress Advanced Post Manager plugin <= 4.5.5 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Peter Tang in WordPress Plugin Advanced Post Manager versions = 4.5.5...

9.8CVSS5.8AI score0.00355EPSS
SaveExploits0Affected Software1
EUVD
EUVD
•added 2026/10/03 6:38 a.m.•20 views

EUVD-2026-91963

The Smart Manager – Advanced WooCommerce Bulk Edit & Inventory Management plugin for WordPress is vulnerable to generic SQL Injection via the 'accessprivileges' parameter in all versions up to, and including, 8.97.0 due to insufficient escaping on the user supplied parameter and lack of sufficien...

8.8CVSS5.7AI score0.0037EPSS
SaveExploits0References10
NVD
NVD
•added 2026/10/02 10:17 a.m.•15 views

CVE-2026-94180

Authorization Bypass Through User-Controlled Key vulnerability in Monetizemore Advanced Ads allows Retrieve Embedded Sensitive Data. This issue affects Advanced Ads: from n/a through 2.0.26...

4.3CVSS0.00281EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/02 9:39 a.m.•16 views

EUVD-2026-91340

Authorization Bypass Through User-Controlled Key vulnerability in Monetizemore Advanced Ads allows Retrieve Embedded Sensitive Data. This issue affects Advanced Ads: from n/a through 2.0.26...

4.3CVSS5.8AI score0.00281EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/02 9:39 a.m.•53 views

CVE-2026-94180 WordPress Advanced Ads plugin <= 2.0.26 - Sensitive Data Exposure vulnerability

Authorization Bypass Through User-Controlled Key vulnerability in Monetizemore Advanced Ads allows Retrieve Embedded Sensitive Data. This issue affects Advanced Ads: from n/a through 2.0.26...

4.3CVSS0.00281EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/10/02 9:39 a.m.•10 views

CVE-2026-94180 WordPress Advanced Ads plugin <= 2.0.26 - Sensitive Data Exposure vulnerability

Authorization Bypass Through User-Controlled Key vulnerability in Monetizemore Advanced Ads allows Retrieve Embedded Sensitive Data. This issue affects Advanced Ads: from n/a through 2.0.26...

4.3CVSS5.8AI score0.00281EPSS
SaveExploits0References1
Rows per page
Query Builder