WordPress FundEngine – Donation and Crowdfunding Platform plugin <= 1.8.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability

Authenticated Subscriber+ Stored Cross-Site Scripting vulnerability discovered by Wordfence PRISM in WordPress Plugin FundEngine versions = 1.8.1...

CVE-2023-47504-POC

CVE-2023-47504 POC CVE-2023-47504 のエクスプロイト。 NIST によると、この脆弱性により、認証されていないユーザーが Elementor Website Builder プラグインの機能にアクセスできるはずです。 脆弱性の調査と、脆弱性を説明する Patchstack の URL...

CVE-2023-2916

CVE-2023-2916 CVE-2023-2916 PoC El complemento InfiniteWP Client para WordPress, en versiones hasta la 1.11.1 inclusive, es vulnerable a una falla de Exposición de Información Sensible. Esta vulnerabilidad permite a atacantes autenticados con permisos de nivel de suscriptor o superior extraer dat...

CVE-2026-18547 Ultimate Member <= 2.12.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Textarea Profile Field with HTML Support (DOM Gadget via id Attribute)

The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Textarea Profile Field with HTML Support DOM Gadget via id Attribute in all versions up to, and including, 2.12....

CVE-2026-18547

CVE-2026-18547 affects the Ultimate Member WordPress plugin in all versions up to and including 2.12.1 . Authenticated attackers with subscriber-level access or above can exploit a stored XSS (DOM-based) by injecting malicious JavaScript through a textarea profile field with HTML support. The roo...

CVE-2025-14172-Nuclei-Template

📄 CVE-2025-14172 的 Nuclei 模板 🚀 概述 本仓库包含一个专门用于检测 WP Page Permalink Extension WordPress 插件中 缺失授权漏洞 CVE-2025-14172 的 Nuclei 模板。该漏洞允许经过身份验证的攻击者通过存在漏洞的 AJAX 操作远程刷新站点的重写规则。 🔍 漏洞描述 CVE-2025-14172 源于 WP Page Permalink Extension WordPress 插件中，cwpptriggerflushrewriterules 函数在挂接到...

CVE-2026-18512

The TranslatePress – Translate Multilingual sites with AI Translation plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Approved Comment Body Rendered in Translation Editor Strings Dropdown in all versions up to, and including, 3.2.6 due to insufficient input sanitization and...

CVE-2026-18512

The TranslatePress WordPress plugin (multilingual/AI translation) is vulnerable to Stored XSS in all versions up to and including 3.2.6 . The root cause is insufficient input sanitization and output escaping of approved comment body content rendered in the Translation Editor Strings Dropdown comp...

EUVD-2026-65317

The TranslatePress – Translate Multilingual sites with AI Translation plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Approved Comment Body Rendered in Translation Editor Strings Dropdown in all versions up to, and including, 3.2.6 due to insufficient input sanitization and...

CVE-2026-18512 TranslatePress <= 3.2.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Approved Comment Body in Translation Editor

The TranslatePress – Translate Multilingual sites with AI Translation plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Approved Comment Body Rendered in Translation Editor Strings Dropdown in all versions up to, and including, 3.2.6 due to insufficient input sanitization and...

CVE-2026-16601

CM Map Locations for WordPress (all versions ≤ 2.1.8 ) is vulnerable to limited arbitrary file upload via the cmloc_route_image_upload AJAX action. The uploadMedia function performs incomplete extension filtering without MIME-type checks or upload capability verification before calling move_uploa...

ros2_CVE-2024-28231

このリポジトリには、ubuntu 22 をベースとした ros2 iron の脆弱性を含む Docker イメージと、それに対応するエクスプロイトが含まれています。fastrtps バージョン 2.10.3 の脆弱性を悪用し、ヒープバッファオーバーフローを介してリモートサブスクライバーのサービス拒否（DoS）を可能にします。 脆弱性のあるベースイメージ Fast RTPS バージョン 2.10.3 と依存関係は、Docker コンテナ内の target フォルダでソースからビルドされ、ros iron がインストールされています。...

CVE-2024-54378

CVE-2024-54378 Quietly Insights = 1.2.2 - 認可欠如による認証済み（購読者以上）の任意オプション更新 説明 WordPress用プラグインQuietly...

CVE-2026-78467

The Fluent Support Pro plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 2.3.1. This makes it possible for authenticated attackers, with Subscriber-level access and above, to perform an unauthorized acti...

CVE-2026-78470

The WP Project Manager Pro plugin for WordPress is vulnerable to SQL Injection in all versions up to, and including, 4.0.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers,...

WordPress CBX Bookmark & Favorite Plugin <= 2.0.4 - SQL Injection

CBX Bookmark & Favorite WordPress plugin = 2.0.4 contains a SQL injection caused by insufficient escaping of the 'orderby' parameter, letting authenticated attackers with Subscriber-level access extract sensitive database information id: CVE-2025-13652 info: name: WordPress CBX Bookmark & Favorit...

CVE-2025-15260

CVE-2025-15260：插件 MyRewards – WooCommerce 忠诚度积分与奖励中的授权缺失/访问控制失效 免责声明： 本仓库仅用于教育目的及负责任的披露 。该漏洞已向厂商报告并获得修复。请勿利用此信息在未经授权的情况下攻击系统。 摘要 在 WooCommerce 的 MyRewards（WooRewards） 插件（版本 mSource-write$data; 业务影响 经济损失： 通过操纵“订单金额”积分倍数，攻击者可生成无限奖励积分，并将其兑换为高价值折扣券或免费商品，绕过电商支付网关。 权限提升： 普通客户（订阅者）可执行插件管理操作。 数据完整性受损：...

CVE-2026-78466

The Fluent Boards Pro plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to and including 2.0.11 , caused by missing validation on a user-controlled key. Authenticated attackers with Subscriber-level access or above can perform an unauthorized action. The CV...

CVE-2026-78470 WP Project Manager Pro <= 4.0.1 - Authenticated (Subscriber+) SQL Injection

The WP Project Manager Pro plugin for WordPress is vulnerable to SQL Injection in all versions up to, and including, 4.0.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers,...

EUVD-2026-65299

The WP Project Manager Pro plugin for WordPress is vulnerable to SQL Injection in all versions up to, and including, 4.0.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers,...