576 matches found
CVE-2026-115498
The Slim Jetpack plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'g-website Website contact-field' parameter in all versions up to, and including, 2.7.0.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...
CVE-2026-115498
The Slim Jetpack plugin for WordPress (versions up to and including 2.7.0.1 ) is vulnerable to Stored Cross-Site Scripting (XSS) . The flaw exists in the g-website (Website contact-field) parameter due to insufficient input sanitization and output escaping. Because nonce and authentication checks...
CVE-2026-115498 Slim Jetpack <= 2.7.0.1 - Unauthenticated Stored Cross-Site Scripting via Contact Form 'Website' Field
The Slim Jetpack plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'g-website Website contact-field' parameter in all versions up to, and including, 2.7.0.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...
EUVD-2026-116807
The Slim Jetpack plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'g-website Website contact-field' parameter in all versions up to, and including, 2.7.0.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...
WordPress Slim Jetpack plugin <= 2.7.0.1 - Unauthenticated Stored Cross-Site Scripting vulnerability
Unauthenticated Stored Cross-Site Scripting vulnerability discovered by Yaniv Haliwa in WordPress Plugin Slim Jetpack versions = 2.7.0.1...
CVE-2018-20966
CVE-2018-20966: XSS in woocommerce-jetpack 3.8.0 Testbed for the above mentioned vulnerability...
CVE-2026-22356
CVE-2026-22356: Jetpack CRM Path Traversal Vulnerability and RCE Warning: This tool should only be used in authorized test environments. The user is solely responsible for illegal use. 📥 Requirements pip3 install requests urllib3 $ python3 exploit.py https://example.com --rce --cmd "id" + Target ...
Android-Security-Masterclass
Android Security Masterclass 🛡️📱 Official OWASP Project — A Hands-on OWASP MASVS/MASTG Security Training Lab for Android Developers & Pentesters — Mirror Architecture: Vulnerable ↔ Secure ↔ Attacker 📖 Overview The Android Security Masterclass is an official OWASP project designed with a Mirror...
wordpress-jetpack-broken-access-control-vulnerable-application
wordpress-jetpack-broken-access-control-vulnerable-application This is a vulnerable application to test the exploit for the Jetpack 13.9.1 broken access control CVE-2024-9926. WARNING! This application contains serious security vulnerabilities. Run it at your own risk! It is recommended using a...
CVE-2026-40808
Subscriber Broken Access Control in Jetpack VideoPress = 3.6 versions...
CVE-2026-40808 WordPress Jetpack VideoPress plugin <= 3.6 - Broken Access Control vulnerability
Subscriber Broken Access Control in Jetpack VideoPress = 3.6 versions...
CVE-2026-40808
The Jetpack VideoPress WordPress plugin (versions
CVE-2026-40808 WordPress Jetpack VideoPress plugin <= 3.6 - Broken Access Control vulnerability
Subscriber Broken Access Control in Jetpack VideoPress = 3.6 versions...
EUVD-2026-96542
Subscriber Broken Access Control in Jetpack VideoPress = 3.6 versions...
PT-2026-109761
Subscriber Broken Access Control in Jetpack VideoPress = 3.6 versions...
CVE-2026-40808: Missing Authorization
Subscriber Broken Access Control in Jetpack VideoPress = 3.6 versions...
CVE-2026-106601
Authentication Bypass Using an Alternate Path or Channel vulnerability in Automattic Jetpack jetpack allows Password Recovery Exploitation.This issue affects Jetpack: from n/a through 16.2...
CVE-2026-106602
Authentication Bypass Using an Alternate Path or Channel vulnerability in Automattic Jetpack jetpack allows Password Recovery Exploitation.This issue affects Jetpack: from n/a through 16.2...
EUVD-2026-95743
Authentication Bypass Using an Alternate Path or Channel vulnerability in Automattic Jetpack jetpack allows Password Recovery Exploitation.This issue affects Jetpack: from n/a through 16.2...
CVE-2026-106602 WordPress Jetpack plugin <= 16.2 - Broken Authentication vulnerability
Authentication Bypass Using an Alternate Path or Channel vulnerability in Automattic Jetpack jetpack allows Password Recovery Exploitation.This issue affects Jetpack: from n/a through 16.2...