CVE-2026-82212

The Nexi XPay Build WordPress plugin through 7.6.2 does not correctly validate the security token on its payment notification route, accepting the request when the target order has no stored token, which allows unauthenticated attackers to mark arbitrary orders as paid, or to mark genuinely paid...

CVE-2026-105322

The Magee Shortcodes WordPress plugin through 2.1.1 does not restrict the recipient of some of its unauthenticated contact-form actions, allowing unauthenticated users to send arbitrary emails to any address through the site mail relay...

CVE-2026-105316

The Magee Shortcodes WordPress plugin through 2.1.1 does not sanitise and escape user input in some of its AJAX actions, which are available to unauthenticated users, before reflecting it back in the response, leading to Reflected Cross-Site Scripting...

CVE-2026-104678

The CP Media Player WordPress plugin before 1.3.4 does not perform a capability check on its settings-page handler, allowing users with only Contributor-level access to create, modify, duplicate and delete the site-wide media player configurations and change a CP Media Player WordPress plugin...

CVE-2026-104953

The MPG WordPress plugin before 4.2.3 does not properly validate the structure of imported project data before using it in a database query, allowing users with the Editor role or higher to perform SQL injection attacks and read sensitive data such as password hashes...

CVE-2026-103378

The Geliver Akıllı Kargo Pazaryeri WordPress plugin before 3.1.1 does not prevent unauthenticated access to a log file it stores within its own web-accessible directory, into which it writes the site's carrier integration key while processing requests from unauthenticated users, allowing attacker...

CVE-2026-103681

The Frontend Dashboard WordPress plugin before 3.0.0 does not perform a capability check in one of its AJAX actions, allowing authenticated users with low privileges, such as subscribers, to delete the Frontend Dashboard WordPress plugin before 3.0.0's configured profile and post form fields...

CVE-2026-104049

The Academy LMS WordPress plugin before 4.0.0 does not verify course enrollment or object ownership when returning a lesson's content through one of its REST API routes, allowing users with a self-registerable student account to read the full content of arbitrary lessons, including lessons of pai...

CVE-2021-24145

CVE-2021-24145 Vulnérabilité de téléchargement de fichier WordPress, plugin Modern Events Calendar Lite WordPress antérieur à 5.16.5 https://nvd.nist.gov/vuln/detail/CVE-2021-24145 Ordre d'installation et d'exécution 1. Installation de WordPress Lors de l'installation, veuillez effectuer la...

CVE-2025-2539

POC - CVE-2025-2539 File Away Отказ от ответственности : Данный Proof of Concept POC предназначен только для образовательных и этических целей тестирования. Использование этого инструмента для атак на цели без предварительного взаимного согласия незаконно. Конечный пользователь несёт...

Jira-Scan

Jira-Scan ТЕСТИРОВАНО ТОЛЬКО С PYTHON 3 Укажите список веб-сайтов для тестирования без http или https, и этот инструмент проверит каждый из них на уязвимость SSRF. Используйте VPS от DigitalOcean CVE-2017-9506 IconUriServlet из Atlassian OAuth Plugin версий от 1.3.0 до 1.9.12 и от 2.0.0 до 2.0.4...

CVE-2016-15041-mainwp-dashboard

Лаборатория CVE-2016-15041 — Сохранённый XSS в MainWP Dashboard Уязвимая лаборатория для CVE-2016-15041: неаутентифицированный сохранённый XSS в плагине WordPress MainWP Dashboard версии = 3.1.2. Быстрый старт docker compose up -d --build Подождите 30 секунд для автоматической настройки...

cve-2019-14206-poc

CVE-2019-14206 - Adaptive Images pour WordPress - Suppression arbitraire de fichiers 📋 Table des matières 1. À propos de la vulnérabilité 2. Prérequis 3. Installation 4. Méthodes de test Test rapide Test complet avec Docker Test avec Nuclei Test manuel 5. Interprétation des résultats 6. Nettoyage...

cve-2025-65099

Доказательство концепции для CVE-2025-65099 Более подробная информация приведена в опубликованной статье. Техника yarnPath Уязвимое окружение для yarnPath можно инициализировать следующим образом: docker run --rm -v "$PWD":/poc -it --workdir /poc ubuntu bash -c 'apt-get update -qq &&...

CVE-2025-53652-Jenkins-Git-Parameter-Analysis

CVE-2025-53652: Уязвимость невалидированного ввода плагина Git Parameter для Jenkins. Краткое описание Эта уязвимость возникает из-за того, что управляемый пользователем ввод из параметров сборки Jenkins небезопасно внедряется в команду Git checkout. Пользовательский ввод предоставляется в качест...

x64dbg

x64dbg An open-source binary debugger for Windows, aimed at malware analysis and reverse engineering of executables you do not have the source code for. There are many features available and a comprehensive plugin system to add your own. You can find more information on the blog! Screenshots |...

skills

Маркетплейс навыков Trail of Bits Маркетплейс плагинов Claude Code от Trail of Bits, предоставляющий навыки для улучшения безопасности анализа, тестирования и процессов разработки с помощью ИИ. Codex может загрузить этот маркетплейс через свою совместимость с маркетплейсом Claude. Также см.:...

CVE-2026-82212 Nexi XPay Build <= 7.6.2 - Unauthenticated Payment Bypass via NPG Notification Handler

The Nexi XPay Build WordPress plugin through 7.6.2 does not correctly validate the security token on its payment notification route, accepting the request when the target order has no stored token, which allows unauthenticated attackers to mark arbitrary orders as paid, or to mark genuinely paid...

EUVD-2026-94194

The Magee Shortcodes WordPress plugin through 2.1.1 does not restrict the recipient of some of its unauthenticated contact-form actions, allowing unauthenticated users to send arbitrary emails to any address through the site mail relay...

CVE-2026-86833 MetForm < 4.3.1 - Unauthenticated HTML Injection in Notification Emails via Field Shortcodes

The MetForm WordPress plugin before 4.3.1 does not sanitize or escape submitted form-field values before inserting them into the HTML body of its email notifications, allowing unauthenticated attackers to inject arbitrary markup into the administrator and submitter notification emails the site...