329 matches found
PoC-CVE-2022-4939-
PoC-CVE-2022-4939 L'attaccante invia una richiesta appositamente creata all'azione AJAX wpajaxnoprivwcfmajaxcontroller per modificare il modulo di registrazione dell'iscrizione e impostare il ruolo di registrazione a quello di un amministratore. Quindi, il plugin elabora la richiesta e modifica i...
CVE-2026-54807
CVE-2026-54807 CVE-2026-54807 WooCommerce Privilege Escalation β β Unauthenticated Admin Role Assignment via Reg. Form PRΔ°V8 TOOLS AND EXPLOΔ°T CANAL: https://t.me/+zuUQbKSrHgwyZmI0...
CVE-2022-43097
CVE-2022-43097 Alle Details zu CVE-2022-43097 Software: Phpgurukul Benutzerregistrierungs- und Benutzerverwaltungssystem v3.0 Software-Link: https://phpgurukul.com/user-registration-login-and-user-management-system-with-admin-panel/ Beschreibung: Es wurde festgestellt, dass Phpgurukul User...
CVE-2026-5118
π₯ CVE-2026-5118 Divi Form Builder Ein verstecktes Feld. Ein geΓ€nderter Wert. Vollzugriff auf die gesamte Website. 𧨠Was kann ein Angreifer tun? π¬ Schwachstellenanalyse Schwachstellenort root@kitploit: includes/shared/handlers/FormSubmissionHandler.php β createuser Angreifbarer Code root@kitploit:...
CVE-2021-46362
CVE-2021-46362: FreeMarker Server-seitige Template-Injection in Magnolia CMS Eine Schwachstelle fΓΌr Server-seitige Template-Injection SSTI in den Formularen zur Registrierung und zum vergessenen Passwort von Magnolia v6.2.3 und niedriger erlaubt es nicht authentifizierten Angreifern, beliebigen...
CVE-2025-2005
WordPress FEUP Exploit fΓΌr beliebigen Datei-Upload CVE-2025-2005 Dieses Repository bietet einen Proof-of-Concept PoC-Exploit fΓΌr das WordPress Front End Users Plugin Versionen bis 3.2.32, das aufgrund fehlender MIME-/Dateityp-ΓberprΓΌfung im Registrierungsformular anfΓ€llig fΓΌr beliebigen...
CVE-2025-14736
CVE-2025-14736 Frontend Admin by DynamiApps - Escalation dei privilegi non autenticata Autore: Hyun Chiya Informazioni sulla vulnerabilitΓ Campo| Valore ---|--- ID CVE| CVE-2025-14736 Plugin| Frontend Admin by DynamiApps Versioni interessate| B"Extract Nonce acfnonce & Form ID acfform" B --...
CVE-2025-6934
π‘οΈ CVE-2025-6934 - Escalation dei Privilegi Non Autenticata in Opal Estate Pro π Descrizione Il plugin Opal Estate Pro β Property Management and Submission per WordPress, utilizzato dal FullHouse - Real Estate Responsive WordPress Theme , Γ¨ vulnerabile all'Escalation dei Privilegi in tutte le...
CVE-2026-19222
CVE-2026-19222 is an authenticated privilege escalation vulnerability in the Forminator Forms WordPress plugin, affecting versions prior to 1.57.0.7 . The plugin does not consistently enforce the role restriction it applies to registration forms. A user who is permitted to build forms can configu...
CVE-2026-19222 Forminator Forms < 1.57.0.7 - Authenticated Privilege Escalation via Registration Form Role Bypass
The Forminator Forms WordPress plugin before 1.57.0.7 does not consistently enforce the role restriction it applies to registration forms, allowing users who are permitted to build forms to configure one that assigns the administrator role to any visitor who registers through it...
CVE-2026-64970
ATutor is vulnerable to Stored Cross Site Scripting in registration functionality. An attacker can register a new account and enter a JavaScript payload in the phone field during registration. When any authenticated user visits the attacker's public profile, the profile template echoes the phone...
CVE-2026-12251
The Ultimate Member WordPress plugin before 2.12.1 does not filter administrator-level capabilities from the roles it makes selectable on its registration forms, and its post-registration safeguard against elevated accounts is disabled by default, allowing unauthenticated users to register with a...
CVE-2026-12251
CVE-2026-12251 affects the Ultimate Member WordPress plugin prior to 2.12.1. The vulnerability arises because administrator-level capabilities are not filtered from the roles shown on registration forms, and the post-registration safeguard against elevated accounts is disabled by default. Consequ...
CVE-2026-39878
Chamilo LMS versions 1.11.38 and earlier contain a stored cross-site scripting vulnerability in the user registration form that allows any unauthenticated attacker to execute arbitrary JavaScript in an administrator's browser session, leading to full platform admin account takeover. This has been...
Exploit for CVE-2026-54807
CVE-2026-54807 CVE-2026-54807 WooCom...
EUVD-2026-37643
Unauthenticated Privilege Escalation in Registration Form for WooCommerce = 1.0.9 versions...
CVE-2026-54807
Unauthenticated Privilege Escalation in Registration Form for WooCommerce = 1.0.9 versions...
CVE-2026-54807
CVE-2026-54807 affects the WordPress Registration Form for WooCommerce plugin (β€ 1.0.9). The entry documents an unauthenticated privilege escalation vulnerability, with a CVSS 3.1 base score of 9.8 (NETWORK, HIGH impact on confidentiality, integrity, and availability). No exploitation details are...
CVE-2026-54807 WordPress Registration Form for WooCommerce plugin <= 1.0.9 - Privilege Escalation vulnerability
Unauthenticated Privilege Escalation in Registration Form for WooCommerce = 1.0.9 versions...
CVE-2026-54807 WordPress Registration Form for WooCommerce plugin <= 1.0.9 - Privilege Escalation vulnerability
Unauthenticated Privilege Escalation in Registration Form for WooCommerce = 1.0.9 versions...