CVE-2026-54807

CVE-2026-54807 CVE-2026-54807 Escalada de Privilegios en WooCommerce ║ ║ Asignación de Rol de Administrador no Autenticada a través del Formulario de Registro CANAL DE HERRAMIENTAS Y EXPLOITS PRIV8: https://t.me/+zuUQbKSrHgwyZmI0...

CVE-2026-92923

The Unlimited Elements for Elementor WordPress plugin before 2.0.21 does not sanitise and escape a parameter before using it in a SQL statement, allowing users with a role as low as subscriber to perform blind SQL injection attacks and read arbitrary data from the database. Version 2.0.18 removed...

CVE-2026-88782 Kubio AI Page Builder < 2.9.3 - Contributor+ Stored XSS via Image Gallery Item URL Attribute

The Kubio AI Page Builder WordPress plugin before 2.9.3 does not validate the URI scheme of a user-supplied value before outputting it as a link target, allowing users with the contributor role and above to store a payload which executes in the browser of anyone who follows the link, including an...

CVE-2026-88782

The Kubio AI Page Builder WordPress plugin, in versions prior to 2.9.3 , contains a Stored Cross-Site Scripting (XSS) vulnerability. The root cause is a failure to validate the URI scheme of user-supplied values before they are output as link targets, specifically within the Image Gallery Item UR...

EUVD-2026-91941

The Kubio AI Page Builder WordPress plugin before 2.9.3 does not validate the URI scheme of a user-supplied value before outputting it as a link target, allowing users with the contributor role and above to store a payload which executes in the browser of anyone who follows the link, including an...

EUVD-2026-91933

The MPG WordPress plugin before 4.2.3 does not validate that the dataset source supplied when importing a project is a remote URL before treating it as a local filesystem path and copying that file into a publicly accessible uploads folder. This makes it possible for users with the Editor role an...

CVE-2026-103293

The MPG WordPress plugin before version 4.2.3 is vulnerable to an arbitrary file read flaw. The root cause is a failure to validate that a dataset source supplied during project import is a remote URL; instead, the system treats it as a local filesystem path and copies the content into a publicly...

CVE-2026-101162 WP Ultimate Review < 2.4.4 - Author+ Stored XSS via Review Overview Settings

The WP Ultimate Review WordPress plugin before 2.4.4 does not escape some of its review overview settings before outputting them in posts, which could allow users with a role as low as author to perform Stored Cross-Site Scripting attacks, when author reviews are enabled...

CVE-2026-103293 MPG < 4.2.3 - Editor+ Arbitrary File Read via Project Import

The MPG WordPress plugin before 4.2.3 does not validate that the dataset source supplied when importing a project is a remote URL before treating it as a local filesystem path and copying that file into a publicly accessible uploads folder. This makes it possible for users with the Editor role an...

CVE-2026-15989

CVE-2026-15989 — Super Forms ≤ 6.3.316 — PoC de escalada de privilegios no autenticada Super Forms – Drag & Drop Form Builder WordPress ≤ 6.3.316 — escalada de privilegios no autenticada a través del parámetro role del add-on premium Register & Login. 📋 Descripción general de la vulnerabilidad...

PT-2026-104527

Name of the Vulnerable Software and Affected Versions Kubio AI Page Builder WordPress plugin versions prior to 2.9.3 Description Insufficient validation of the URI scheme in a user-supplied value allows users with the contributor role and above to store a malicious payload. This payload executes ...

CVE-2026-103293: Improper Limitation of a Pathname to a Restricted Directory

The MPG WordPress plugin before 4.2.3 does not validate that the dataset source supplied when importing a project is a remote URL before treating it as a local filesystem path and copying that file into a publicly accessible uploads folder. This makes it possible for users with the Editor role an...

CVE-2026-88782: Improper Neutralization of Input During Web Page Generation

The Kubio AI Page Builder WordPress plugin before 2.9.3 does not validate the URI scheme of a user-supplied value before outputting it as a link target, allowing users with the contributor role and above to store a payload which executes in the browser of anyone who follows the link, including an...

CVE-2025-6758

Real Spaces - Tema de Directorio de Propiedades de WordPress ≤ 3.6 Escalación de Privilegios No Autenticada a Administrador a través de imicagentregister 📝 Descripción CVE-2025-6758 Puntuación CVSS: 9.8 Crítico El tema Real Spaces - Directorio de Propiedades de WordPress para WordPress es...

CVE-2026-104019

OS command injection in the Studio Space startup validation script in Amazon SageMaker Distribution 2.x before 2.14.12, 3.x before 3.9.12, 4.0.x before 4.0.11, 4.1.x before 4.1.11, 4.2.x before 4.2.8, 4.3.x before 4.3.5, and 4.4.x before 4.4.3, as used by Amazon SageMaker Unified Studio, might...

CVE-2026-104019 OS command injection in the Studio Space startup validation script in Amazon SageMaker Distribution when running on Amazon SageMaker Unified Studio

OS command injection in the Studio Space startup validation script in Amazon SageMaker Distribution 2.x before 2.14.12, 3.x before 3.9.12, 4.0.x before 4.0.11, 4.1.x before 4.1.11, 4.2.x before 4.2.8, 4.3.x before 4.3.5, and 4.4.x before 4.4.3, as used by Amazon SageMaker Unified Studio, might...

CVE-2026-103958

Server-side request forgery in the tool server and remote agent connection handling in Loom for AWS before 1.7.0 might allow an authenticated remote user to obtain the credentials of the application's own container role and to read responses from arbitrary internal network locations, via a crafte...

CVE-2026-103958

Loom for AWS versions before 1.7.0 are vulnerable to a Server-side request forgery (SSRF) in the tool server and remote agent connection handling. An authenticated remote user can exploit this by supplying a crafted connection address during the registration, updating, or testing of a tool server...

CVE-2026-103958 Server-side request forgery in the tool server and remote agent connection handling in Loom for AWS

Server-side request forgery in the tool server and remote agent connection handling in Loom for AWS before 1.7.0 might allow an authenticated remote user to obtain the credentials of the application's own container role and to read responses from arbitrary internal network locations, via a crafte...

supahunter

Supabase Hunter OP 模式 针对 Supabase 实例的高级侦察与利用工具。 SupaHunter 是一款强大的 Python 工具，旨在识别、分析和利用配置错误的 Supabase 项目。它不仅仅是简单的表枚举，还提供深度检查能力、基于 Selenium 的密钥提取以及高级权限提升检查。 主要功能 高级发现： OpenAPI 检查： 自动获取并解析 /rest/v1/，以映射整个数据库架构。 RPC 枚举： 探测隐藏的 RPC 函数（getschema、execsql 等）。 智能暴力破解： 使用 SecLists（自动下载）在 OpenAPI 禁用时发现隐藏表。...