CVE-2024-3293-Poc

CVE-2024-3293-Poc rtMedia para WordPress, BuddyPress y bbPress get \buddypress-media\app\helper\RTMediaModel.php:61 RTMediaModel-getmedia \buddypress-media\app\helper\RTMediaModel.php:227 RTMediaQuery-populatemedia \buddypress-media\app\main\routers\query\RTMediaQuery.php:869...

CVE-2024-6386

CVE-2024-6386 - RCE via Twig SSTI en WPML PoC PoC en Python+Selenium Investigación detallada en ruso: CVE-2024-6386 CVSS Puntuación base: 9.9 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H Resumen En WPML tienes disponible el uso de Shortcodes de WordPress específicos que te permiten crear...

CVE-2024-3105-PoC

CVE-2024-3105 PoC Woody代码片段 – WordPress的插入页眉页脚代码、AdSense广告插件在所有版本，包括2.5.0及更早版本中，通过'insertphp'短代码存在远程代码执行漏洞。这是由于该插件未限制高级授权用户使用该功能。这使得经过身份验证的攻击者，具有贡献者级别及以上访问权限，能够在服务器上执行代码。 信息 基础评分：9.9 严重 向量：CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H 软件类型：插件 软件标识：insert-php 修复措施：更新至版本2.5.1或更新的补丁版本 受影响版本： NUL";...

CVE-2025-7431

Prueba de concepto – CVE-2025-7431 Knowledge Base = 2.3.1 - Cross-Site Scripting almacenado autenticado Administrador+ a través del slug del plugin CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N ------- 4.4 Resumen de la vulnerabilidad Un atacante autenticado con rol de Administrador puede explotar...

Ocean Extra <= 2.4.6 - Unauthenticated Shortcode Execution

The Ocean Extra plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.4.6. This is due to the software allowing users to supply arbitrary shortcodes in the contentrechdata parameter that is then executed. This makes it possible for...

ShortCode Addons - Unauthenticated Options Update

WordPress plugin Shortcode Addons = 3.0.2 contains an unauthenticated arbitrary option update caused by insufficient access controls in the plugin, letting attackers modify options without authentication. id: CVE-2022-34487 info: name: ShortCode Addons - Unauthenticated Options Update author:...

WordPress UIX Shortcodes <= 1.9.7 - Unauthenticated Shortcode Execution

The The Uix Shortcodes – Compatible with Gutenberg plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 1.9.9. This is due to the software allowing users to execute an action that does not properly validate a value before running doshortcode...

Download Manager < 3.3.04 - Unauthenticated Arbitrary Shortcode Execution

The The Download Manager plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 3.3.03. This is due to the software allowing users to execute an action that does not properly validate a value before running doshortcode. This makes it possible for...

SupportCandy < 2.2.7 - Reflected Cross-Site Scripting

The SupportCandy WordPress plugin before 2.2.7 does not sanitise and escape the query string before outputting it back in pages with the wpsccreateticket shortcode embed, leading to a Reflected Cross-Site Scripting issue id: CVE-2021-24878 info: name: SupportCandy 2.2.7 - Reflected Cross-Site...

CVE-2023-5412

CVE-2023-5412 Image horizontal reel scroll slideshow = 13.2 - 通过短代码的已认证（订阅者+）SQL注入 描述： WordPress 的 Image horizontal reel scroll slideshow 插件在版本 13.2 及之前（包括 13.2）中，由于对用户提供的参数转义不足，且对现有 SQL 查询缺乏充分的预处理，存在通过插件短代码的 SQL 注入漏洞。这使得经过身份验证的攻击者（拥有订阅者及以上权限）能够将额外的 SQL 查询附加到现有查询中，从而提取数据库中的敏感信息。 CVE ID:...

By-Poloss..-..CVE-2017-20251

CVE-2017-20251: Inyección de Código PHP en el Plugin Insert PHP Título de la Vulnerabilidad Inyección de Código PHP sin Autenticación a través del Procesamiento de Shortcodes en el Plugin Insert PHP Información Básica Campo| Valor ---|--- CVE ID| CVE-2017-20251 Plugin| Insert PHP ahora Woody Code...

CVE-2026-104397 WordPress Name Directory plugin <= 1.34.2 - Arbitrary Shortcode Execution vulnerability

Missing Authorization vulnerability in Jeroen Peters Name Directory name-directory allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Name Directory: from n/a through 1.34.2...

CVE-2026-104397

The Jeroen Peters Name Directory WordPress plugin (versions up to and including 1.34.2 ) is vulnerable to a Missing Authorization vulnerability. This flaw allows for the exploitation of incorrectly configured access control security levels , potentially leading to Arbitrary Shortcode Execution . ...

WordPress Name Directory plugin <= 1.34.2 - Arbitrary Shortcode Execution vulnerability

Arbitrary Shortcode Execution vulnerability discovered by changsheng in WordPress Plugin Name Directory versions = 1.34.2...

CVE-2026-89274

CVE-2026-89274 — Ejecución Arbitraria de Shortcode en WP Recipe Maker Escáner/exploit PoC en Python 3 para CVE-2026-89274 en WP Recipe Maker. | ---|--- Plugin| wp-recipe-maker Afectado| ≤ 10.8.1 Corregido en| 10.8.2+ CVSS| 9.1 Crítico Auth| No autenticado envío de comentario CWE| CWE-94 Resumen...

CVE-2026-92229

CVE-2026-92229 — Ejecución Arbitraria de Shortcode No Autenticada en Forminator PoC en Python 3, escáner/exploit para CVE-2026-92229 en Forminator WPMU DEV. | ---|--- Plugin| forminator Afectados| ≤ 1.57.2 Corregido en| 1.57.3+ CVSS| 9.1 Crítico Autenticación| No autenticada Vector| Parámetro POS...

CVE-2024-50450

CVE-2024-50450 WordPress Meta Data and Taxonomies Filter MDTF = 1.3.3.4 - 未认证的任意短代码执行 描述： MDTF – Meta Data and Taxonomies Filter WordPress 插件在所有版本（包括 1.3.3.4）中均存在任意短代码执行漏洞。这是由于该软件允许用户执行一个操作，而在运行 doshortcode 之前未正确验证某个值。这使得未认证的攻击者能够执行任意短代码。 发布时间：2024-10-24 00:00:00 CVE：CVE-2024-50450...

By-Poloss..-.CVE-2026-89274

CVE-2026-89274 PoC Poloss : @WPEF0 Proof-of-Concept exploit para CVE-2026-89274 — vulnerabilidad de Unauthenticated Arbitrary Shortcode Execution en el plugin de WordPress WP Recipe Maker versión ≤ 10.8.1. ⚠️ ADVERTENCIA LEGAL Y ÉTICA Este script se proporciona solo para investigación de seguridad...

WP Popup Builder Popup Forms and Marketing Lead Generation <= 1.3.5 - Arbitrary Shortcode Execution

The The WP Popup Builder Popup Forms and Marketing Lead Generation plugin for WordPress is vulnerable to arbitrary shortcode execution via the wpajaxnoprivshortcodeApiAdd AJAX action in all versions up to, and including, 1.3.5. This is due to the software allowing users to execute an action that...

CVE-2026-102425

CVE-2026-102425 — Balbooa Forms combaforms shortcode de campo → RCE PoC en Python 3 para CVE-2026-102425 — extensión Balbooa Forms de balbooa.com para Joomla — ejecución remota de código no autenticada mediante inyección de shortcode de campo en acciones opcionales de PHP tras el envío eval. | | ...