wphardening

WPHardening Fortify the security of any WordPress installation. ❮ NOTE ❯ This tool releases new versions on a regular basis. Make sure to update your dependencies frequently to get the latest version. Check out the changelog or CHANGELOG.md to learn about the new features. Installation Installing...

wp-mail-masta-exploit

WordPress 플러그인 Mail Masta 1.0 - CVE-2016-10956 익스플로잇 이 스크립트는 WordPress 플러그인 Mail Masta 1.0의 CVE-2016-10956 취약점을 악용하여 wp-config.php에서 자격 증명을 추출합니다. 사용 방법 1. 저장소를 클론합니다: git clone https://github.com/Hakchoven/wp-mail-masta-exploit.git 2. 디렉토리로 이동합니다: cd wp-mail-masta-exploit/ 3. 대상 URL을 인수로 스크립트를...

CVE-2023-6972-Exploit-Arbitrary-File-Deletion

CVE-2023-6972 개념 증명 PoC 설명 이 리포지토리는 CVE-2023-6972 에 대한 개념 증명PoC 익스플로잇을 포함합니다. 해당 취약점은 Wordpress Backup Migration 플러그인 참고: 이 익스플로잇에 대한 포괄적인 기술 분석, 전체 사례 연구 및 근본 원인 분석은 https://medium.com/@phantomhat/cve-2023-6972-wordpress-backup-migration-1-3-9-arbitrary-file-deletion-case-study-ccea1c5f8c4e에서 확인...

wp-allowed-hosts

WP 허용 호스트 이 플러그인은 CVE-2017-8295로 알려진 취약점이 공개된 후 만들어졌습니다. 이 플러그인은 번거로움 없이 해당 공격으로부터 보호해 줍니다. wp-config.php에 간단한 한 줄을 추가하기만 하면 됩니다. 설치 여기에서 플러그인을 다운로드하여 사이트에 업로드하기만 하면 됩니다. 사용법 다음 줄을 wp-config.php에 추가하기만 하면 됩니다. // WP Allowed Hosts Plugin define 'WPALLOWEDHOSTS', 'mysit.com' ; 여러 도메인을 추가할 수도 있습니다. ...

Config-Exploiter

Config-Exploiter Config-Exploiter : Joomla 및 Wordpress 웹사이트에서 config.php 파일을 덤프합니다. Belahsan Ouerghi 제작. 설치 sudo apt-get install git git clone https://github.com/TunisianEagles/Config-Exploiter.git cd Config-Exploiter chmod +x install.sh sudo ./install.sh chmod +x config-exploiter.sh...

CVE-2023-47504-POC

CVE-2023-47504 PoC CVE-2023-47504에 대한 익스플로잇. NIST에 따르면, 이 취약점은 인증되지 않은 사용자가 Elementor Website Builder 플러그인의 기능에 접근할 수 있도록 허용해야 합니다. 취약점에 대한 연구와 Patchstack에서 취약점을 설명하는...

wordpress-true-ranker-cve-2021-39312

WordPress 플러그인 The True Ranker 2.2.2 - 임의 파일 읽기 CVE-2021-39312 에 대한 Python PoCProof-of-Concept로, The True Ranker seo-local-rank WordPress 플러그인 버전 ≤ 2.2.2 에 영향을 미칩니다. 취약점 세부 정보 CVE: CVE-2021-39312 유형: 임의 파일 읽기 영향을 받는 플러그인: The True Ranker 영향을 받는 버전: ≤ 2.2.2 공급업체 홈페이지:...

CVE-2024-6460

CVE-2024-6460 Grow by Tradedoubler 2.0.22 - 인증되지 않은 LFI 사용법 usage: CVE-2024-6460.py -h -u URL -U USERNAME -P PASSWORD -c COMPONENT Grow by Tradedoubler 2.0.22 - Unauthenticated LFI options: -h, --help show this help message and exit -u URL, --url URL Target WordPress site URL e.g.,...

CVE-2026-97150

When converting baserCMS4-style addons to baserCMS5-style ones, BcAddonMigrator includes "config.php" from the addon, which means the PHP code in the file is executed. Arbitrary files on the system may be read or deleted by an administrative user...

CVE-2026-97150

When converting baserCMS4-style addons to baserCMS5-style ones, BcAddonMigrator includes "config.php" from the addon, which means the PHP code in the file is executed. Arbitrary files on the system may be read or deleted by an administrative user...

CVE-2025-1281

CVE-2025-1281 affects the BM Content Builder WordPress plugin in all versions prior to 3.17.1 . The vulnerability stems from insufficient file path validation in the ux_cb_remove_layout_ajax() and ux_cb_tools_export_ajax() functions, allowing an authenticated attacker with Subscriber-level access...

PT-2026-89754

The UsersWP plugin for WordPress is vulnerable to Arbitrary File Deletion in versions up to, and including, 1.2.70 via the upload file remove AJAX handler. The plugin stores the value of an account 'file' form field taken directly from $ POST when no real $ FILES upload is provided process accoun...

CVE-2026-87929

MaxSite CMS through 109.6 ships with a hardcoded session encryption key in application/config/config.php that is never changed during installation, allowing unauthenticated attackers to forge administrator session cookies. Attackers can mint a malicious cisession cookie with administrator...

CVE-2026-87929 MaxSite CMS through 109.6 Authentication Bypass via Hardcoded Encryption Key

MaxSite CMS through 109.6 ships with a hardcoded session encryption key in application/config/config.php that is never changed during installation, allowing unauthenticated attackers to forge administrator session cookies. Attackers can mint a malicious cisession cookie with administrator...

CVE-2026-87929: Use of Hard-coded Cryptographic Key

MaxSite CMS through 109.6 ships with a hardcoded session encryption key in application/config/config.php that is never changed during installation, allowing unauthenticated attackers to forge administrator session cookies. Attackers can mint a malicious cisession cookie with administrator...

CVE-2026-86308

A flaw was found in light0011 cms. A remote attacker could exploit a vulnerability in the Debug Mode component by manipulating the DBDEBUG argument. This could lead to information disclosure from the App/Common/Conf/config.php file...

CVE-2026-86308

A vulnerability was detected in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. This issue affects some unknown processing of the file App/Common/Conf/config.php of the component Debug Mode. The manipulation of the argument DBDEBUG results in...

CVE-2026-86308 light0011 cms Debug Mode config.php information disclosure

A vulnerability was detected in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. This issue affects some unknown processing of the file App/Common/Conf/config.php of the component Debug Mode. The manipulation of the argument DBDEBUG results in...

EUVD-2026-72405

A vulnerability was detected in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. This issue affects some unknown processing of the file App/Common/Conf/config.php of the component Debug Mode. The manipulation of the argument DBDEBUG results in...

CVE-2026-86308 light0011 cms Debug Mode config.php information disclosure

A vulnerability was detected in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. This issue affects some unknown processing of the file App/Common/Conf/config.php of the component Debug Mode. The manipulation of the argument DBDEBUG results in...