acltoolkit

acltoolkit acltoolkit is an ACL abuse swiss-army knife. It implements multiple ACL abuses. Table of Contents acltoolkit Table of Contents Installation Usage Commands get-objectacl set-objectowner give-genericall give-dcsync add-groupmember set-logonscript Installation pip install acltoolkit-ad or...

CVE-2026-19658

CVE-2026-19658 — Give Tributes Unauthenticated PHP Object Injection Python 3 proof-of-concept scanner and donation-chain exploit helper for CVE-2026-19658 in the WordPress add-on Give - Tributes Liquid Web / GiveWP. | ---|--- Platform| WordPress plugin requires GiveWP core Component| Give -...

Give WP Plugin < 3.19.0 - Cross-Site Scripting

The plugin does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin. id: CVE-2024-11921 info: name: Give WP Plugin 3.19.0 - Cross-Site Scripting author: Splint3r7...

WordPress GiveWP <2.17.3 - Cross-Site Scripting

WordPress GiveWP plugin before 2.17.3 contains a cross-site scripting vulnerability. The plugin does not sanitize and escape the formid parameter before returning it in the response of an unauthenticated request via the givecheckoutlogin AJAX action. An attacker can inject arbitrary script in the...

CVE-2026-115966

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bPlugins Typing Text – Give your texts many typing effects text-typing allows Stored XSS.This issue affects Typing Text – Give your texts many typing effects: from n/a through 2.2.0...

CVE-2026-115966 WordPress Typing Text – Give your texts many typing effects plugin <= 2.2.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bPlugins Typing Text – Give your texts many typing effects text-typing allows Stored XSS.This issue affects Typing Text – Give your texts many typing effects: from n/a through 2.2.0...

CVE-2026-115966

The Typing Text – Give your texts many typing effects WordPress plugin (versions n/a through 2.2.0 ) is susceptible to a Stored Cross-Site Scripting (XSS) vulnerability. This issue stems from Improper Neutralization of Input During Web Page Generation , allowing an attacker to inject malicious sc...

EUVD-2026-110044

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bPlugins Typing Text – Give your texts many typing effects text-typing allows Stored XSS.This issue affects Typing Text – Give your texts many typing effects: from n/a through 2.2.0...

WordPress Typing Text – Give your texts many typing effects plugin <= 2.2.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by V1T in WordPress Plugin Typing Text – Give your texts many typing effects versions = 2.2.0...

WordPress GiveWP plugin < 4.19.0.1 - Give Worker+ Arbitrary Page Modification vulnerability

Give Worker+ Arbitrary Page Modification vulnerability discovered by Karthik Ramakrishnan in WordPress Plugin GiveWP versions 4.19.0.1...

WordPress GiveWP plugin < 4.19.0.1 - Give Worker+ Stored XSS vulnerability

Give Worker+ Stored XSS vulnerability discovered by Karthik Ramakrishnan in WordPress Plugin GiveWP versions 4.19.0.1...

WordPress GiveWP plugin < 4.19.0.1 - Give Manager+ Path Traversal vulnerability

Give Manager+ Path Traversal vulnerability discovered by Karthik Ramakrishnan in WordPress Plugin GiveWP versions 4.19.0.1...

WordPress Give Tributes plugin <= 2.3.1 - Unauthenticated PHP Object Injection vulnerability

Unauthenticated PHP Object Injection vulnerability discovered by Voyag3r-Security in WordPress Plugin Give Tributes versions = 2.3.1...

Exploit for CVE-2026-19658

CVE-2026-19658 — Give Tributes Unauthenticated PHP Object Inje...

CVE-2026-19658

The Give Tributes plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.3.1 via deserialization of untrusted input . This makes it possible for unauthenticated attackers to inject a PHP Object. No known POP chain is present in the vulnerable software,...

CVE-2026-19658 Give Tributes <= 2.3.1 - Unauthenticated PHP Object Injection via 'give_tributes_ecard_notify[recipient][personalized][]' Parameter

The Give Tributes plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.3.1 via deserialization of untrusted input . This makes it possible for unauthenticated attackers to inject a PHP Object. No known POP chain is present in the vulnerable software,...

EUVD-2026-84269

The Give Tributes plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.3.1 via deserialization of untrusted input . This makes it possible for unauthenticated attackers to inject a PHP Object. No known POP chain is present in the vulnerable software,...

CVE-2026-19658 Give Tributes <= 2.3.1 - Unauthenticated PHP Object Injection via 'give_tributes_ecard_notify[recipient][personalized][]' Parameter

The Give Tributes plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.3.1 via deserialization of untrusted input . This makes it possible for unauthenticated attackers to inject a PHP Object. No known POP chain is present in the vulnerable software,...

CVE-2026-19658

Give Tributes WordPress plugin (≤ 2.3.1 ) is vulnerable to PHP Object Injection via deserialization of untrusted input in the give_tributes_ecard_notify[recipient][personalized][] parameter, exploitable by unauthenticated attackers. No known POP chain exists within the plugin itself, so impact de...

CVE-2026-19658: Deserialization of Untrusted Data

The Give Tributes plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.3.1 via deserialization of untrusted input . This makes it possible for unauthenticated attackers to inject a PHP Object. No known POP chain is present in the vulnerable software,...