3 matches found
WordPress Product Slider Pro - Supply Chain Backdoor RCE
Compromised Product Slider Pro builds execute attacker-controlled expressions via X-Cache-Status/X-Cache-Key headers. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Product Slider Pro for WooCommerce - Supply Chain Backdoor RCE""" import base64 import secrets from kittysploit import from...
10CVSS6AI score0.01656EPSS
SaveExploits5References3
EUVD-2026-9395
The Seraphinite Accelerator plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.28.14 via the seraphaccelapi AJAX action with fn=GetData. This is due to the OnAdminApiGetData function not performing any capability checks. This makes it...
4.3CVSS5.9AI score0.00328EPSS
SaveExploits0References5
20