CVE-2026-63030-WP2Shell

CVE-2026-63030 | WP2Shell تم استغلاله بواسطة gr1tx WP2Shell هو إثبات مفهوم PoC مبني على بايثون لـ CVE-2026-63030. يقوم بإجراء تحقق قائم على الوقت من الثغرات الأمنية عبر WordPress Batch API ويُنشئ تقارير مفصلة بصيغة HTML و JSON. المشروع مُخصّص لـ تقييمات الأمان المصرّح بها، اختبار الاختراق، التحقق...

wp2shell-checker

root@kitploit: \ \ / / \ / || | | | | | | | \ \ /\ / /| | | \ | || | | | | | | \ V V / | // / | | || || | // || ||/|| ||||| wp2shell-checker | WordPress Batch API Desync Detector كاشف/مدقق لثغرة RCE قبل المصادقة في واجهة REST Batch API الخاصة بنواة ووردبريس صُنع بواسطة 0xjessie21 — الأمن...

wordpress-skelersecurity-core-security-CVE-2026-63030

SkelerSecurity Core Security Plugin إجراء تخفيفي مركّز ومؤقت للوصول غير الموثق إلى نقطة نهاية REST Batch API في نواة ووردبريس. نظرة عامة SkelerSecurity Core Security Plugin يتطلب مصادقة قبل أن يعالج ووردبريس الطلبات الموجهة إلى مسار REST Batch API في النواة: /wp-json/batch/v1 /?restroute=/batch/v...

CVE-2026-63030

CVE-2026-63030: wp2shell WordPress Batch API Desynchronization SQL Injection Exploit CVE-2026-63030 wp2shell भेद्यता के माध्यम से उपयोगकर्ताओं और पासवर्ड हैश को निकालने के लिए प्रूफ ऑफ कॉन्सेप्ट उपकरण। भेद्यता जानकारी CVE : CVE-2026-63030 wp2shell Companion CVE : CVE-2026-60137 प्रकार : Pre-Auth...

Exploit for Interpretation Conflict in Wordpress

CVE-2026-63030 | WP2Shell xpl0ited by gr1txhttps://gith...

WordPress 5.6+ SkelerSecurity Core Security Plugin REST Batch API Mitigation

This WordPress plugin provides a temporary mitigation for the REST Batch API vulnerability chain commonly referred to as "wp2shell." It requires authentication before requests to the /wp-json/batch/v1 and ?restroute=/batch/v1 endpoints are processed, preventing unauthenticated exploitation of the...

Exploit for CVE-2026-60137

wp2shell Pre-authentication Remote Code Execution against Wor...

WordPress vulnerabilities can be addressed through Automattic.

There are two vulnerabilities present in WordPress Core 6.8.6, 6.9.5, and 7.0.2. An unauthorized malicious individual can exploit these vulnerabilities to execute arbitrary code remotely. To do this, a malicious HTTP request must be sent to the batch API of a WordPress site. Since vulnerabilities...

InvenTree 安全漏洞

InvenTree is an open-source inventory management system developed by InvenTree. It provides robust low-level inventory control and parts tracking capabilities. Versions of InvenTree prior to 1.2.6 contained security vulnerabilities. These vulnerabilities stemmed from the batch operation API...

ipa: Batch API logging user passwords to /var/log/httpd/error_log

A flaw was found in the way that FreeIPA's batch processing API logged operations. This included passing user passwords in clear text on FreeIPA masters. Batch processing of commands with passwords as arguments or options is not performed by default in FreeIPA but is possible by third-party...

RHEL 8 : idm:DL1 (RHSA-2020:1269)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:1269 advisory. Red Hat Identity Management IdM is a centralized authentication, identity management, and authorization solution for both traditional and...

Scientific Linux Security Update : ipa on SL7.x x86_64 (20200205)

Security Fixes : - ipa: Denial of service in IPA server due to wrong use of berscanf CVE-2019-14867 - ipa: Batch API logging user passwords to /var/log/httpd/errorlog CVE-2019-10195 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description...

ipa: Batch API logging user passwords to /var/log/httpd/error_log

A flaw was found in the way that FreeIPA's batch processing API logged operations. This included passing user passwords in clear text on FreeIPA masters. Batch processing of commands with passwords as arguments or options is not performed by default in FreeIPA but is possible by third-party...

Important: Red Hat Security Advisory: ipa security and bug fix update

An update for ipa is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...

ipa: Batch API logging user passwords to /var/log/httpd/error_log

A flaw was found in the way that FreeIPA's batch processing API logged operations. This included passing user passwords in clear text on FreeIPA masters. Batch processing of commands with passwords as arguments or options is not performed by default in FreeIPA but is possible by third-party...

EntityBulkDelete - Critical - Cross Site Scripting (XSS) - SA-CONTRIB-2015-089

EntityBulkDelete module allows you to delete entities in bulk using the Batch API. The module doesn't sufficiently sanitize user supplied text in some administration pages, thereby exposing a Cross Site Scripting vulnerability. This vulnerability is mitigated by the fact that an attacker must be...