CVE-2025-6934

🛡️ CVE-2025-6934 - Opal Estate Pro 中的未认证权限提升 📝 描述 用于 WordPress 的 Opal Estate Pro – 房产管理与提交 插件（被 FullHouse - 房地产响应式 WordPress 主题 使用）在所有版本（包括 1.7.5 ）中均存在 权限提升 漏洞。 CVE 编号: CVE-2025-6934 CVSS 评分: 9.8（严重） 发布时间: 2025年6月30日 ⚙️ 脚本信息 此 Python 利用脚本通过以下方式自动化权限提升过程： 通过 readme.txt 验证易受攻击的插件版本。 从注册页面获取所需的 nonce...

CVE-2026-54807

CVE-2026-54807 CVE-2026-54807 WooCommerce 权限提升 ║ ║ 通过注册表单进行未经验证的管理员角色分配 PRİV8 工具与漏洞利用频道: https://t.me/+zuUQbKSrHgwyZmI0...

CVE-2022-43097

CVE-2022-43097 CVE-2022-43097 の詳細情報 ソフトウェア: Phpgurukul User Registration & User Management System v3.0 ソフトウェアリンク: https://phpgurukul.com/user-registration-login-and-user-management-system-with-admin-panel/ 説明: Phpgurukul User Registration & User Management System v3.0 には、登録フォームとログインページの first nam...

PoC-CVE-2022-4939-

PoC-CVE-2022-4939 攻撃者は、wpajaxnoprivwcfmajaxcontroller AJAX アクションに特別に細工されたリクエストを送信し、会員登録フォームを変更して登録ロールを管理者に設定します。その後、プラグインはリクエストを処理し、ユーザーが管理者ロールで登録できるように会員登録フォームを変更します。攻撃者は、変更された会員登録フォームを送信することで、管理者ロールを持つ新しいユーザーとして登録できます。...

WordPress Registration Form for WooCommerce plugin 1.1.0-1.1.2 - Contributor+ Privilege Escalation vulnerability

Contributor+ Privilege Escalation vulnerability discovered by Sai Praneeth Koti in WordPress Plugin Registration Form for WooCommerce versions 1.1.0-1.1.2...

CVE-2025-14736

CVE-2025-14736 Frontend Admin by DynamiApps - 未认证权限提升 作者： Hyun Chiya 漏洞信息 字段| 值 ---|--- CVE ID| CVE-2025-14736 插件| Frontend Admin by DynamiApps 受影响版本| B"Extract Nonce acfnonce & Form ID acfform" B -- C"Construct POST payload with 'role'='administrator'" C -- D"POST to /wp-admin/admin-ajax.php" D ...

CVE-2026-81431

The Registration Form for WooCommerce WordPress plugin before 1.1.3 does not validate that the form referenced during registration is a legitimate registration form, reading the permitted-role allow-list from an arbitrary attacker-controlled post instead. A user able to create a post Contributor...

CVE-2026-81431 Registration Form for WooCommerce 1.1.0 - 1.1.2 - Contributor+ Privilege Escalation via Unvalidated tgwcfb_id

The Registration Form for WooCommerce WordPress plugin before 1.1.3 does not validate that the form referenced during registration is a legitimate registration form, reading the permitted-role allow-list from an arbitrary attacker-controlled post instead. A user able to create a post Contributor...

EUVD-2026-75266

The Registration Form for WooCommerce WordPress plugin before 1.1.3 does not validate that the form referenced during registration is a legitimate registration form, reading the permitted-role allow-list from an arbitrary attacker-controlled post instead. A user able to create a post Contributor...

CVE-2026-81431 Registration Form for WooCommerce 1.1.0 - 1.1.2 - Contributor+ Privilege Escalation via Unvalidated tgwcfb_id

The Registration Form for WooCommerce WordPress plugin before 1.1.3 does not validate that the form referenced during registration is a legitimate registration form, reading the permitted-role allow-list from an arbitrary attacker-controlled post instead. A user able to create a post Contributor...

CVE-2026-81431

The Registration Form for WooCommerce WordPress plugin versions 1.1.0 through 1.1.2 fails to validate the tgwcfb_id parameter during registration, reading the permitted-role allow-list from an arbitrary attacker-controlled post rather than a legitimate registration form. A user with Contributor o...

PT-2026-89294

The Registration Form for WooCommerce WordPress plugin before 1.1.3 does not validate that the form referenced during registration is a legitimate registration form, reading the permitted-role allow-list from an arbitrary attacker-controlled post instead. A user able to create a post Contributor...

CVE-2021-46362

CVE-2021-46362: Inyección de plantillas del lado del servidor FreeMarker en Magnolia CMS Una vulnerabilidad de inyección de plantillas del lado del servidor SSTI en los formularios de Registro y Contraseña Olvidada de Magnolia v6.2.3 y versiones anteriores permite a atacantes no autenticados...

CVE-2026-5118

🔥 CVE-2026-5118 Divi Form Builder One hidden field. One changed value. Full access to the entire website. 🧨 What an Attacker Can Do? 🔬 Vulnerability Analysis Vulnerability Location root@kitploit: includes/shared/handlers/FormSubmissionHandler.php → createuser Vulnerable Code root@kitploit: // Lin...

CVE-2025-2005

Exploit de Subida Arbitraria de Archivos en WordPress FEUP CVE-2025-2005 Este repositorio proporciona un exploit de Prueba de Concepto PoC para el plugin Front End Users de WordPress versiones hasta 3.2.32, el cual es vulnerable a subida arbitraria de archivos debido a la falta de validación de...

EUVD-2026-72066

The B2BKing — Ultimate WooCommerce B2B and Wholesale Plugin — Wholesale Prices, Bulk Order Form & More WordPress plugin before 5.2.40 does not verify that a role selected during registration is one actually offered on the registration form, allowing unauthenticated users to assign themselves to...

CVE-2026-19222

CVE-2026-19222 is an authenticated privilege escalation vulnerability in the Forminator Forms WordPress plugin, affecting versions prior to 1.57.0.7 . The plugin does not consistently enforce the role restriction it applies to registration forms. A user who is permitted to build forms can configu...

CVE-2026-19222 Forminator Forms < 1.57.0.7 - Authenticated Privilege Escalation via Registration Form Role Bypass

The Forminator Forms WordPress plugin before 1.57.0.7 does not consistently enforce the role restriction it applies to registration forms, allowing users who are permitted to build forms to configure one that assigns the administrator role to any visitor who registers through it...

CVE-2026-19222 Forminator Forms < 1.57.0.7 - Authenticated Privilege Escalation via Registration Form Role Bypass

The Forminator Forms WordPress plugin before 1.57.0.7 does not consistently enforce the role restriction it applies to registration forms, allowing users who are permitted to build forms to configure one that assigns the administrator role to any visitor who registers through it...

CVE-2026-64970

ATutor is vulnerable to Stored Cross Site Scripting in registration functionality. An attacker can register a new account and enter a JavaScript payload in the phone field during registration. When any authenticated user visits the attacker's public profile, the profile template echoes the phone...