CVE-2025-1306

Newscrunch エクスプロイト CVE-2025-1306 🚨 概要 このエクスプロイトは、Newscrunch WordPress テーマ の クロスサイトリクエストフォージェリ CSRF から任意ファイルアップロード に至る脆弱性 CVE-2025-1306 を標的としています。newscrunchinstallandactivateplugin 関数に nonce 検証 が欠如しているため、認証されていない攻撃者 は、ログイン済みの管理者をだまして任意のファイルをサーバーにアップロードさせ、リモートコード実行 RCE につなげることができます。 🔥 脆弱性の詳細 CVE ID...

CVE-2026-11784-Optimole-CSRF

CVE-2026-11784: Optimole WordPress 플러그인의 CSRF로 인한 임의 파일 덮어쓰기 요약 Optimole WordPress 플러그인버전 = 4.2.5에서 발견된 CSRFCross-Site Request Forgery 취약점으로 인해, 인증되지 않은 공격자가 nonce 검증 부재로 인해 wpajaxoptmlreplacefile AJAX 액션을 통해 기존 미디어 라이브러리 자산을 무단으로 덮어쓸 수 있습니다. CVE ID : CVE-2026-11784 취약점 유형 : CSRF Cross-Site Reque...

CVE-2021-24356

CVE-2021-24356 Simple 301 Redirects by BetterLinks - 2.0.0 – 2.0.3 - 구독자 + 임의 플러그인 설치 설명 플러그인의 AJAX 액션에 대한 기능 검사와 nonce 검사가 부족하여, 인증된 사용자가 취약한 사이트에 임의의 플러그인을 설치할 수 있었습니다. 사용 방법 root@kitploit: $ python3 CVE-2021-24356.py --url http://wordpress.lan --username user --password useruser1 --slug...

CVE-2025-2539

CVE-2025-2539 - WordPress File Away = 3.9.9.0.1 - 任意ファイル読み取り 🔥 脆弱性の概要 WordPressプラグイン File Away バージョン = 3.9.9.0.1 には、認証なしの任意ファイル読み取りの脆弱性があります。 これにより、攻撃者はプラグインのAJAXエンドポイントへの巧妙に細工されたリクエストを通じて、wp-config.php などのサーバー上の任意のファイルを読み取ることができます。 この脆弱性は、admin-ajax.php 経由で fileaway-stats...

CVE-2026-92410 Sign-up Sheets < 2.4.0 - Arbitrary Sign-up Deletion via CSRF

The Sign-up Sheets WordPress plugin before 2.4.0 does not properly validate the CSRF nonce that protects its sign-up deletion action, allowing attackers to delete sign-up records via a forged request handled in the session of a logged-in user with the required capability...

EUVD-2026-83674

The Sign-up Sheets WordPress plugin before 2.4.0 does not properly validate the CSRF nonce that protects its sign-up deletion action, allowing attackers to delete sign-up records via a forged request handled in the session of a logged-in user with the required capability...

CVE-2026-92410 Sign-up Sheets < 2.4.0 - Arbitrary Sign-up Deletion via CSRF

The Sign-up Sheets WordPress plugin before 2.4.0 does not properly validate the CSRF nonce that protects its sign-up deletion action, allowing attackers to delete sign-up records via a forged request handled in the session of a logged-in user with the required capability...

CVE-2026-92410

The Sign-up Sheets WordPress plugin before 2.4.0 does not properly validate the CSRF nonce that protects its sign-up deletion action, allowing attackers to delete sign-up records via a forged request handled in the session of a logged-in user with the required capability...

CVE-2024-32444

CVE-2024-32444 2025年1月24日時点で、この脆弱性にはパッチが存在しないため、これは単なる製品検出テンプレートです。RealHome WordPressテーマに関連するすべての製品が影響を受けます。 このテーマでは、inspiryajaxregister 関数を介してユーザーが新しいアカウントを登録できますが、認可チェックが適切に行われず、nonce検証も実装されていません。...

CVE-2026-93394

libmongoc (MongoDB C driver) contains a flaw in its SCRAM authentication implementation where the client continues the handshake and transmits the client proof even after detecting a nonce mismatch in the server's first message. An attacker with a man-in-the-middle position can inject a crafted s...

libmongoc SCRAM client nonce-validation bypass

A flaw in libmongoc's SCRAM authentication implementation caused the client to continue the authentication handshake and transmit the client proof even when a nonce mismatch was detected in the server's first message. An unauthorized party with a man-in-the-middle position could exploit this by...

EUVD-2026-81353

The Invisible Anti-Spam & CAPTCHA — reCAPTCHA Alternative for All Forms WordPress plugin before 5.1.1 does not check the user's capabilities in its message deletion AJAX action, and only tests that a nonce parameter is present rather than validating it, allowing any authenticated user, such as a...

CVE-2026-91010

The Invisible Anti-Spam & CAPTCHA — reCAPTCHA Alternative for All Forms WordPress plugin before 5.1.1 does not check the user's capabilities in its message deletion AJAX action, and only tests that a nonce parameter is present rather than validating it, allowing any authenticated user, such as a...

CVE-2026-80172

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Insufficient Verification of Data Authenticity vulnerability. An unauthenticated attacker with remote access could exploit this, leading to unauthorized access. This...

CVE-2026-80172

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Insufficient Verification of Data Authenticity vulnerability. An unauthenticated attacker with remote access could exploit this, leading to unauthorized access. This...

CVE-2026-80172

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Insufficient Verification of Data Authenticity vulnerability. An unauthenticated attacker with remote access could exploit this, leading to unauthorized access. This...

EUVD-2026-74853

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Insufficient Verification of Data Authenticity vulnerability. An unauthenticated attacker with remote access could exploit this, leading to unauthorized access. This...

CVE-2026-80172

Dell Secure Connect Gateway (SCG) 5.0 Appliance and Application versions contain an Insufficient Verification of Data Authenticity vulnerability. An unauthenticated remote attacker can repeatedly reuse a captured request to generate ADMIN access and refresh tokens , since there is no nonce valida...

CVE-2026-82185

The WPLP Cookie Consent WordPress plugin before 4.4.2 does not have capability or nonce checks on some of its A/B testing actions, allowing any authenticated user, such as a subscriber, to overwrite the cookie banner configuration shown to every visitor and to irreversibly reset the stored A/B te...

EUVD-2026-71742

Trueview T18161 S 6.0.23.4 contains an improper verification in MQTT command processing. An attacker with network access can replay or modify captured MQTT messages, including security-related nonce, timestamp, and signature fields, and the device accepts the modified messages and executes the...