CVE-2021-21389

CVE-2021-21389 BuddyPress 7.2.1 - REST API Privilege Escalation to RCE PoC Full Affected version: 5.0.0 to 7.2.0 User requirement: Subscriber user Method: Privilege Escalation to Administrator and trigger RCE via REST API Endpoint: /v1/members/me endpoint. How to use Docker root@kitploit: git clo...

CVE-2023-2833

CVE-2023-2833 大规模漏洞利用生成器 by Alucard0x1 此仓库包含针对 CVE-2023-2833 的漏洞利用代码，该漏洞是 ReviewX 插件（WordPress 版本至 1.6.13 及更早版本）中的一个权限提升漏洞。 描述 ReviewX 插件存在权限提升漏洞，允许订阅者级别的用户将其权限提升至管理员级别。 使用方法 1. 在目标网站上使用以下凭据创建一个订阅者账户： 用户名必须设置为 = tt 密码必须设置为 = tt 2. 克隆此仓库并进入漏洞利用目录。 3. 准备一个 url.txt 文件，其中包含目标网站 URL 列表，每行一个 URL（主域名）。 ...

CVE-2026-19453

JetBackup WordPress plugin (versions 3.1.7.9 through 3.1.23.3) contains a privilege escalation vulnerability. The plugin fails to verify the role or capabilities of a preserved account before granting administrator privileges during a restore or migration, allowing a subscriber-level user to gain...

CVE-2026-19453 JetBackup 3.1.7.9 - 3.1.23.3 - Subscriber+ Privilege Escalation via Restore Admin User Selection

The JetBackup WordPress plugin before 3.1.23.5 does not verify the role or capabilities of the account it preserves across a restore or migration before granting it administrator privileges, allowing a subscriber-level user to gain administrator access after the site owner restores or migrates th...

CVE-2026-5617 Login as User <= 1.0.3 - Authenticated (Subscriber+) Privilege Escalation via 'oclaup_original_admin' Cookie

The Login as User plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.0.3. This is due to the handlereturntoadmin function trusting a client-controlled cookie oclauporiginaladmin to determine which user to authenticate as, without any server-side...