CVE-2026-14894

CVE-2026-14894 — Super Forms ≤ 6.3.313 Übersicht Nicht authentifizierter beliebiger Datei-Upload → Remote Code Execution im WordPress-Plugin Super Forms Versionen ≤ 6.3.313. Die Schwachstelle befindet sich im AJAX-Handler , der Datei-Uploads über ein -Feld verarbeitet, ohne die Dateiendung oder d...

CVE-2026-6279

CVE-2026-6279 Avada Builder = 3.15.2 — Unauthenticated RCE via calluserfunc ohne Allowlist Zusammenfassung der Schwachstelle Schwachstelle Remote Code Execution RCE ohne Authentifizierung im Plugin Avada Builder Fusion Builder Version = 3.15.2, verwendet im WordPress-Theme Avada — einem der...

CVE-2026-39492

CVE-2026-39492 — Scanner de Injeção SQL Cega do WP Maps SQLi cega baseada em tempo sem autenticação prévia via bypass de backtick → extração de banco de dados Visão Geral CVE-2026-39492 é uma vulnerabilidade de injeção SQL cega não autenticada de severidade crítica CVSS 9.3 no plugin WP Maps...

CVE-2025-57819-poc

CVE-2025-57819 — FreePBX SQLi non autenticato → RCE Exploit one-shot per l'iniezione SQL non autenticata di Endpoint Manager di FreePBX CVE-2025-57819, concatenata in esecuzione di codice remoto tramite la tabella cronjobs di FreePBX. Solo per test di sicurezza autorizzati / uso CTF. Vulnerabilit...

CVE-2025-11627

Envie uma requisição forjada ao manipulador AJAX com o nonce extraído. root@kitploit: = // 1 find the inline script that contains the AJAX URL const s = ...document.scripts.findsc = sc.textContent.includes'billminozzijserrorcatched'; if !s console.error'Script with ajax URL not found. Is wphead...

WP-Contest-Gallery-28.1.4-Exploit

⚠️ In fase di test Questo PoC è attivamente in fase di test e miglioramento. Le funzionalità possono cambiare tra le versioni. CVE-2026-3180 WordPress Contest Gallery — SQL Injection cieca non autenticata Strumento di valutazione proof-of-concept per CVE-2026-3180 Autore: Sudeepa Wanigarathna ·...

CVE-2026-49049

CVE-2026-49049 — Scanner de RCE AJAX não autenticado do Helix3 JoomShaper para Joomla Scanner/verificador em massa para CVE-2026-49049 : manipulador AJAX não autenticado no plugin Helix3 Framework para Joomla v1.0 – 3.1.0 , corrigido na 3.1.1+. Teste autorizado apenas. Use apenas em sistemas que...

CVE-2026-3891

🚀 CVE-2026-3891 – Pix for WooCommerce अप्रमाणित फ़ाइल अपलोड RCE CVE-2026-3891 के लिए प्रूफ-ऑफ-कॉन्सेप्ट एक्सप्लॉइट – Pix for WooCommerce WordPress प्लगइन ≤ 1.5.0 में अप्रमाणित मनमाना फ़ाइल अपलोड जो रिमोट कोड निष्पादन की ओर ले जाता है। 📖 अवलोकन CVE-2026-3891 Pix for WooCommerce प्लगइन में एक गंभीर...

CVE-2026-61511-PoC-Exploit

CVE-2026-61511 – vBulletin Pre‑Auth RCE Exploit & Verifier ⚠️ ETHICAL USE ONLY – AUTHORIZED SECURITY TESTING This repository provides tools for authorized security professionals, blue teams, and penetration testers only. Unauthorized access to computer systems is illegal under CFAA US, Computer...

CVE-2025-6934

🚨 WordPress OpalEstate प्लगइन - बिना प्रमाणीकरण के विशेषाधिकार वृद्धि भेद्यता 🔎 विवरण WordPress के लिए OpalEstate प्लगइन में इसके AJAX पंजीकरण हैंडलर में एक गंभीर भेद्यता है, जो बिना प्रमाणीकरण वाले उपयोगकर्ताओं को व्यवस्थापक के रूप में पंजीकरण करने की अनुमति देती है। समस्या opalestateregisterfor...

FreePBX-SQLi-RCE

FreePBX CVE-2025-57819 - अनऑथेंटिकेटेड SQLi से RCE PoC केवल शैक्षिक एवं सुरक्षा अनुसंधान - कृपया नीचे कानूनी सूचना देखें CVE-2025-57819 के लिए शोषण प्रमाण-अवधारणा PoC, FreePBX में एक गंभीर अनऑथेंटिकेटेड SQL इंजेक्शन भेद्यता जो रिमोट कोड निष्पादन की अनुमति देती है। यह PoC आधिकारिक पैच जारी होने के...

CVE-2023-6700

CVE-2023-6700 Cookie Information | Free GDPR Consent Solution = 2.0.22 - Authentifiziert Subscriber+ Beliebige Optionen aktualisieren Beschreibung: Das Plugin Cookie Information | Free GDPR Consent Solution für WordPress ist anfällig für beliebige Option-Updates aufgrund einer fehlenden...

JoomShaper Helix3 <=3.1.0 - Unauthenticated Arbitrary JSON File Write

JoomShaper Helix3 template framework versions 1.0 through 3.1.0 for Joomla expose an unauthenticated AJAX handler plgajaxhelix3 accessible via the Joomla comajax component. The onAjaxHelix3 plugin method processes dataaction=save requests without any authentication check or CSRF token validation...

CVE-2026-3891

CVE-2026-3891 — Pix for WooCommerce अप्रमाणित फ़ाइल अपलोड RCE Nonce लीक → certificatecrtpath अपलोड → कोड निष्पादन अवलोकन CVE-2026-3891 एक गंभीर-स्तर CVSS 9.8 अप्रमाणित मनमाना फ़ाइल अपलोड भेद्यता है Pix for WooCommerce WordPress प्लगइन linknacional द्वारा संस्करणों में ≤ 1.5.0 ।...

majordomo-CVE-2026-27174-poc

majordomo-CVE-2026-27174-poc Ein Proof-of-Concept, das eine nicht authentifizierte Remote-Codeausführung über die PHP-Konsolenfunktion des Admin-Panels in MajorDomo Major Domestic Module ausnutzt. Schwachstelle Das Admin-Panel von MajorDoMo stellt über /admin.php eine PHP-Auswertungskonsole berei...

Winter: CSRF through AJAX handler names reachable as backend page actions

Impact Affected versions of Winter CMS allow a backend AJAX handler to be invoked by a plain top-level GET navigation with no CSRF token. Backend\Classes\Controller::actionExists accepted any public method on a controller as a page action, so handler-shaped names were never reserved from URL...

GHSA-FM29-4MQ3-PHG6 Winter: ImportExportController AJAX handlers bypass granular import/export permission gate

Impact Affected versions of Winter CMS did not enforce the ImportExportController behavior's granular access control on the handlers that actually perform the work. The behavior supports per-operation access control through the importpermissions and exportpermissions configuration keys, enforced ...

Winter: ImportExportController AJAX handlers bypass granular import/export permission gate

Impact Affected versions of Winter CMS did not enforce the ImportExportController behavior's granular access control on the handlers that actually perform the work. The behavior supports per-operation access control through the importpermissions and exportpermissions configuration keys, enforced ...

CVE-2026-1492

CVE-2026-1492 User Registration & Membership = 5.1.2 - Escalada de Privilégios Não Autenticada via Registro de Associação 🔴 Visão Geral da Vulnerabilidade CVE-2026-1492 — Escalada de Privilégios Não Autenticada via Registro de Associação Descrição: O plugin User Registration & Membership para...

CVE-2026-18315

The TrueBooker – Appointment Booking and Scheduler System plugin for WordPress is vulnerable to Authorization Bypass Through User-Controlled Key leading to Account Takeover in all versions up to, and including, 1.2.6. This is due to the adminusercreatecus AJAX handler lacking any authentication o...