4008 matches found
CVE-2026-91072
The EWWW Image Optimizer WordPress plugin before 8.8.0 does not confine a WebP-derivative file migration routine to the current site's own uploads directory, letting an attacker with Administrator-level access rename or delete existing WebP-derivative image files outside that scope, including, on...
CVE-2026-82127
The Schema & Structured Data for WP & AMP WordPress plugin before 1.67 does not perform a capability check when saving several of its fields, nor escape them when outputting them back, allowing users with the editor role and above to inject arbitrary web scripts that execute when a higher...
CVE-2026-82127 Schema & Structured Data for WP & AMP < 1.67 - Editor+ Stored XSS via Taxonomy Term Fields
The Schema & Structured Data for WP & AMP WordPress plugin before 1.67 does not perform a capability check when saving several of its fields, nor escape them when outputting them back, allowing users with the editor role and above to inject arbitrary web scripts that execute when a higher...
CVE-2026-82127 Schema & Structured Data for WP & AMP < 1.67 - Editor+ Stored XSS via Taxonomy Term Fields
The Schema & Structured Data for WP & AMP WordPress plugin before 1.67 does not perform a capability check when saving several of its fields, nor escape them when outputting them back, allowing users with the editor role and above to inject arbitrary web scripts that execute when a higher...
CVE-2026-82127
The Schema & Structured Data for WP & AMP WordPress plugin (versions before 1.67 ) is vulnerable to a stored cross-site scripting (XSS) flaw. The vulnerability exists because the plugin fails to perform proper capability checks when saving specific fields and lacks sufficient output escaping . Th...
EUVD-2026-89635
The Schema & Structured Data for WP & AMP WordPress plugin before 1.67 does not perform a capability check when saving several of its fields, nor escape them when outputting them back, allowing users with the editor role and above to inject arbitrary web scripts that execute when a higher...
My Calendar WordPress Plugin - Information Disclosure
My Calendar WordPress plugin = 3.7.6 contains an injection vulnerability caused by unvalidated user input passed to parsestr in mcajaxmcjsaction endpoint, letting unauthenticated attackers access or crash sites via switchtoblog, exploit requires WordPress Multisite or Single Site setup. id:...
tvsz
CVE-2018-6389 PoC node js 多站点带有代理 这个脚本基于 CVE-2018-6389，一个相当棘手的 Wordpress 问题，遗憾的是，尽管该问题已知已久，但开发该平台的团队可能不会修复它。 ！！！重要：在你继续之前！！！ 整个仓库和此处分享的信息可以以任何形式自由使用——复制、修改、升级、共享。但将共享信息用于教学目的之外，例如实验或保护你自己的 Wordpress 平台，很可能违反许多我不熟悉的法律。不要使用该脚本攻击网站！我对你的行为不承担任何责任。使用它即表示你同意这些条款。DDoS 攻击（拒绝服务）针对非自己拥有的网站，可能被视为恐怖袭击。...
CVE-2026-96896 Malcure Malware Shield < 19.9.7 - Multisite Subsite Admin+ Arbitrary File Write and Deletion via wpmr_ajax_request
The Malcure Malware Shield — Removal, Repair, Monitor WordPress plugin before 19.9.7 does not perform an authorisation check on one of its AJAX actions, allowing users with a subsite administrator role on a multisite network to write and delete arbitrary files in the network's shared filesystem,...
By-Poloss..-..CVE-2026-15038-POC
🚨 CVE-2026-15038 — Toma de Control de Administrador en InfiniteWP Client Toma de Control de Cuenta de Administrador sin Autenticación en WordPress Multisite 📋 Visión General El plugin InfiniteWP Client para WordPress getoption'iwpclientactionmessageid' && !$iwpmmbcore-getoption'iwpclientpublickey...
WordPress InfiniteWP Client plugin < 1.13.6 - Unauthenticated Administrator Account Takeover on Multisite vulnerability
Unauthenticated Administrator Account Takeover on Multisite vulnerability discovered by Jakub Herman in WordPress Plugin InfiniteWP Client versions 1.13.6...
WP < 7.1.1 - Admin+ Network-Wide Plugin Activation on Multisite
Description WordPress does not properly restrict plugin activation on Multisite in some cases, which could allow site administrators to activate an installed plugin network-wide...
WP < 7.1.1 - Admin+ Stored XSS via Custom Header
Description WordPress does not sanitise and escape some custom header settings before outputting them back in an admin screen in some cases, which could allow users with a high role, such as site administrators on Multisite, to perform Stored XSS attacks against other users, such as super...
WP < 7.1.1 - Admin+ CSS Injection on Multisite via XML-RPC
Description WordPress does not properly enforce the capability required to edit custom CSS when publishing customizer changes through XML-RPC in some cases, which could allow site administrators on Multisite, who are denied that capability, to inject arbitrary CSS into the site...
CVE-2026-85130
The WPLP Cookie Consent WordPress plugin before 4.4.4 does not escape a value submitted through a public endpoint for the JavaScript context it is later output in on an administrative screen, allowing unauthenticated users to run arbitrary JavaScript in the session of an administrator who interac...
CVE-2026-85130 WPLP Cookie Consent < 4.4.4 - Unauthenticated Stored XSS via Consent Logs
The WPLP Cookie Consent WordPress plugin before 4.4.4 does not escape a value submitted through a public endpoint for the JavaScript context it is later output in on an administrative screen, allowing unauthenticated users to run arbitrary JavaScript in the session of an administrator who interac...
CVE-2026-85130 WPLP Cookie Consent < 4.4.4 - Unauthenticated Stored XSS via Consent Logs
The WPLP Cookie Consent WordPress plugin before 4.4.4 does not escape a value submitted through a public endpoint for the JavaScript context it is later output in on an administrative screen, allowing unauthenticated users to run arbitrary JavaScript in the session of an administrator who interac...
EUVD-2026-81337
The WPLP Cookie Consent WordPress plugin before 4.4.4 does not escape a value submitted through a public endpoint for the JavaScript context it is later output in on an administrative screen, allowing unauthenticated users to run arbitrary JavaScript in the session of an administrator who interac...
CVE-2026-85130
The WPLP Cookie Consent WordPress plugin (versions before 4.4.4 ) contains an unauthenticated stored XSS vulnerability. The root cause is a failure to escape values submitted through a public endpoint before they are output in a JavaScript context on an administrative screen. This allows unauthen...
CVE-2026-85130: Improper Neutralization of Input During Web Page Generation
The WPLP Cookie Consent WordPress plugin before 4.4.4 does not escape a value submitted through a public endpoint for the JavaScript context it is later output in on an administrative screen, allowing unauthenticated users to run arbitrary JavaScript in the session of an administrator who interac...