CVE-2026-42417

The WordPress ARMember Premium plugin, version 7.8 and below , is vulnerable to an unauthenticated SQL Injection (CWE-89). This flaw allows an attacker to execute arbitrary SQL commands against the database. The vulnerability is categorized with a CRITICAL base severity score of 9.3 , indicating ...

CVE-2026-105701

The ACPT (Premium) plugin for WordPress is vulnerable to Remote Code Execution (RCE) in all versions up to and including 2.0.66 . The root cause is a missing capability check on the REST API form creation endpoint combined with an unsandboxed Twig environment used for rendering email templates. A...

owt

Currently unstable will be updated eventually. Offensive Wifi Toolkit owt created by Brennan Mccown clu3bot This tool compiles some necessary tools for wifi auditing in a unix bash script with a user friendly interface. The goal of owt is to have the smallest file size possible while still...

CVE-2026-103084

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LeapWorx Premium Addons for Elementor premium-addons-for-elementor allows Stored XSS.This issue affects Premium Addons for Elementor: from n/a through 4.11.109...

EUVD-2026-92321

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LeapWorx Premium Addons for Elementor premium-addons-for-elementor allows Stored XSS.This issue affects Premium Addons for Elementor: from n/a through 4.11.109...

CVE-2026-103084

The LeapWorx Premium Addons for Elementor WordPress plugin (versions up to and including 4.11.109 ) is vulnerable to Stored Cross-Site Scripting (XSS) . This issue stems from the improper neutralization of input during web page generation . Exploitation of this vulnerability could lead to the exe...

CVE-2026-103084 WordPress Premium Addons for Elementor plugin <= 4.11.109 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LeapWorx Premium Addons for Elementor premium-addons-for-elementor allows Stored XSS.This issue affects Premium Addons for Elementor: from n/a through 4.11.109...

WordPress Premium Addons for Elementor plugin <= 4.11.109 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by nh4tvd in WordPress Plugin Premium Addons for Elementor versions = 4.11.109...

WordPress Hero Maps Premium <=2.2.1 - Cross-Site Scripting

WordPress Hero Maps Premium plugin 2.2.1 and prior contains an unauthenticated reflected cross-site scripting vulnerability via the views/dashboard/index.php p parameter. id: CVE-2019-19134 info: name: WordPress Hero Maps Premium =2.2.2 or apply the vendor-provided patch to fix the XSS...

GP Premium <= 2.4.0 - Cross-Site Scripting

The GP Premium plugin for WordPress up to 2.4.0 is vulnerable to reflected XSS via the 'message' parameter in inc/verify.php lines 95-101, where a message passed with slactivation=false is URL-decoded and used unsanitized in addsettingserror, allowing XSS payloads to be reflected in admin notices...

CVE-2025-24659

CVE-2025-24659 1️⃣ 구성 요소 유형 WordPress 플러그인 2️⃣ 구성 요소 세부 정보 구성 요소 이름 Premium Packages – Sell Digital Products Securely 취약한 버전 Premium Packages 플러그인은 Download Manager 플러그인https://wordpress.org/plugins/download-manager/의 애드온이므로 Download Manager 플러그인도 설치 및 활성화되어 있어야 합니다. 2. 아래 URL에 접근하면 SQL 쿼리 조건1=1이...

CVE-2024-48392-PoC

CVE-2024-48392 Exploit Overview This repository contains a proof-of-concept PoC exploit for CVE-2024-48392, an XSS vulnerability discovered in Orangescrum self-hosted as well as the premium version. CVE ID: CVE-2024-48392...

telegram-phish-simulator

⚠️ Telegram Phishing Simulator – Educational Security Tool DO NOT USE THIS CODE FOR ILLEGAL ACTIVITIES. This repository is a simulation built for cybersecurity education, awareness, and authorized lab-based testing only. 📚 Table of Contents About Contents Safe Lab Setup How to Run Simulated Attack...

CVE-2018-7852

CVE-2018-7852 영향을 받는 제품 Schneider Electric Modicon M580 버전 2.80 Schneider Electric Modicon M340 버전 3.01 Schneider Electric Modicon Premium 버전 3.20 Schneider Electric Modicon Quantum 버전 3.60 참조 https://www.se.com/ww/en/download/document/SEVD-2019-134-11/...

WordPress ARMember Premium <= 7.3.1 - Unauthenticated SQL Injection

The ARMember Premium plugin for WordPress is vulnerable to SQL Injection via the 'order' parameter of the 'armdirectorypagingaction' AJAX action in all versions up to, and including, 7.3.1. This is due to insufficient escaping on the user-supplied 'order' and 'orderby' parameters and the lack of...

Premium Addons for Elementor - Unauthenticated Information Disclosure

Premium Addons for Elementor plugin for WordPress version 4.11.53 and below contains an unauthenticated information disclosure vulnerability.The vulnerability exists due to a missing authorization check in the gettemplatecontent AJAX handler, allowing unauthenticated attackers to retrieve private...

cryptoquant-key-gen

CryptoQuant Breaker v1.6 — 2026 CryptoQuant 프리미엄 기능 잠금 해제 | 고급 분석 및 실시간 데이터 액세스 설명 CryptoQuant Breaker 는 CryptoQuant의 고급 분석 등급 제한과 실시간 데이터 한도를 우회하도록 설계된 강력한 패처 유틸리티입니다. 전문가 수준의 온체인 분석, 시장 지표, 실시간 암호화폐 데이터 피드에 무제한으로 액세스하세요. 주요 이점 ✅ 무제한 고급 분석 — 모든 프리미엄 CryptoQuant 기능에 액세스 ✅ 실시간 데이터 액세스 — 실시간 시장 데이터...

CVE-2018-7846

CVE-2018-7846 영향을 받는 제품 Schneider Electric Modicon M580 버전 2.90 Schneider Electric Modicon M340 버전 3.10 Schneider Electric Modicon Premium 모든 버전 Schneider Electric Modicon Quantum 모든 버전 참고 자료 https://www.se.com/ww/en/download/document/SEVD-2019-134-11/...

CVE-2018-7844

CVE-2018-7844 영향을 받는 제품 Schneider Electric Modicon M580 모든 버전 Schneider Electric Modicon M340 모든 버전 Schneider Electric Modicon Premium 모든 버전 Schneider Electric Modicon Quantum 모든 버전 참조 https://www.se.com/ww/en/download/document/SEVD-2019-134-11/...

CVE-2018-7843

CVE-2018-7843 영향받는 제품 Schneider Electric Modicon M580 버전 2.80 Schneider Electric Modicon M340 버전 3.10 Schneider Electric Modicon Premium 버전 3.20 Schneider Electric Modicon Quantum 버전 3.60 참고 자료 https://www.se.com/ww/en/download/document/SEVD-2019-134-11/...