exploit_cve-2023-26326_using_cve-2024-2961

Exploit BuddyForms CVE-2023-26326 using Iconv CVE-2024-2961 This work was done by me, Omar Elshopky, and Nour El Dien Bassiouny. This repository contains an exploit for the WordPress BuddyForms Plugin CVE-2023-26326, initially reported in the advisory by Joshua Martinelle. The exploit leverages a...

CVE-2024-2961

Buddyforms 2.7.7 CNEXT RCE Abusing CVE-2024-2961 and CVE-2023–26326 to RCE Usage git-clone https://github.com/suce0155/CVE-2024-2961buddyforms2.7.7 pip install -r requirements.txt python3 buddyforms2.7.7cnextexploit.py http://site/wp-admin/admin-ajax.php ip port Analysis and Technical Details Che...

CVE-2026-81785

Unauthenticated Broken Access Control in BuddyForms = 2.9.0 versions...

CVE-2026-81785 WordPress BuddyForms plugin <= 2.9.0 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in BuddyForms = 2.9.0 versions...

EUVD-2026-75518

Unauthenticated Broken Access Control in BuddyForms = 2.9.0 versions...

CVE-2026-81785

CVE-2026-81785 affects the WordPress BuddyForms plugin , versions 2.9.0 and earlier . The vulnerability is an unauthenticated Broken Access Control flaw, meaning an attacker can exploit it over the network without any credentials or user interaction. The CVSS v3.1 score is 6.5 (Medium) , with low...

CVE-2026-81785 WordPress BuddyForms plugin <= 2.9.0 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in BuddyForms = 2.9.0 versions...

PT-2026-89432

Unauthenticated Broken Access Control in BuddyForms = 2.9.0 versions...

CVE-2026-81785: Missing Authorization

Unauthenticated Broken Access Control in BuddyForms = 2.9.0 versions...

WordPress BuddyForms plugin <= 2.9.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Peng Zhou in WordPress Plugin BuddyForms versions = 2.9.0...

CVE-2018-21003

The buddyforms plugin before 2.2.8 for WordPress has SQL injection...

CVE-2025-62973

Missing Authorization vulnerability in Themekraft BuddyForms buddyforms allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects BuddyForms: from n/a through = 2.9.0...

CVE-2025-62973

Missing Authorization vulnerability in Themekraft BuddyForms buddyforms allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects BuddyForms: from n/a through 2.10.2...

CVE-2025-62973

Missing Authorization vulnerability in Themekraft BuddyForms buddyforms allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects BuddyForms: from n/a through = 2.9.0...

CVE-2025-62973 WordPress BuddyForms plugin <= 2.10.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in Themekraft BuddyForms buddyforms allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects BuddyForms: from n/a through 2.10.2...

EUVD-2025-35972

Missing Authorization vulnerability in Themekraft BuddyForms buddyforms allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects BuddyForms: from n/a through = 2.9.0...

CVE-2025-62973 WordPress BuddyForms plugin <= 2.10.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in Themekraft BuddyForms buddyforms allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects BuddyForms: from n/a through 2.10.2...

CVE-2025-62973

CVE-2025-62973 is a Missing Authorization / Broken Access Control vulnerability in Themekraft BuddyForms WordPress plugin, affecting BuddyForms versions from the earliest through 2.9.0. The issue allows Accessing Functionality Not Properly Constrained by ACLs. Public records (NVD, Red Hat, CIRCL,...

CVE-2025-62973: Missing Authorization

Missing Authorization vulnerability in Themekraft BuddyForms buddyforms allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects BuddyForms: from n/a through 2.10.2...

WordPress plugin BuddyForms has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...