50 matches found
CVE-2025-47577
CVE-2025-47577 - WordPress TI WooCommerce Wishlist 中已上传图片的路径 💾 将有效的已上传图片 URL 保存到 result.txt 💾 将有效的愿望清单 URL 保存到 resultwishlist.txt 🧠 研究人员 致谢：Patchstack Database 🚀 使用方法 1. 准备 list.txt 文件，其中包含目标域名列表（每行一个，不带 http）。 2. 将要上传的文件（例如 hinata.jpg）放在同一文件夹中。 3. 运行脚本： root@kitploit: python3 CVE-2025-47577.py 示...
WordPress TI WooCommerce Wishlist <1.40.1 - SQL Injection
WordPress TI WooCommerce Wishlist plugin before 1.40.1 contains a SQL injection vulnerability. The plugin does not sanitize and escape the itemid parameter before using it in a SQL statement via the wishlist/removeproduct REST endpoint. id: CVE-2022-0412 info: name: WordPress TI WooCommerce...
CVE-2024-43917
CVE-2024-43917 一个概念验证，用于利用 CVE-2024-43917。基于 PatchStack 的文章。 使用方法 root@kitploit: usage: python CVE-2024-43917.py --help TI WooCommerce Wishlist WordPress plugin = 2.8.2 CVE-2024-43917 PoC positional arguments: COMMAND SQL command to execute SHAREKEY share key of the wish list optional arguments:...
CVE-2024-43917
CVE-2024-43917 此脚本演示了在 WordPress 的 TI WooCommerce Wishlist 插件（版本至 2.8.2）中发现的一个 SQL 注入漏洞（CVE-2024-43917）。该漏洞允许未经身份验证的用户在网站数据库上执行任意 SQL 命令，可能暴露敏感信息，如用户名和密码。 用法 安装所需的 Python 依赖： bash pip install requests 将脚本中的 targeturl 替换为易受攻击网站的 URL。 运行脚本： bash root@kitploit: python exploit.py 免责声明...
CVE-2025-47577
CVE-2025-47577 针对 CVE-2025-47577 开发的概念验证代码。基于 PatchStack 的 文章。 使用方法 root@kitploit: usage: python CVE-2025-47577.py --help TI WooCommerce Wishlist WordPress plugin = 2.9.2 CVE-2025-47577 PoC positional arguments: FILE local file to upload URLPATH base path of the wish list PRODUCTID ID of the...
CVE-2022-0412
The TI WooCommerce Wishlist WordPress plugin before 1.40.1, TI WooCommerce Wishlist Pro WordPress plugin before 1.40.1 do not sanitise and escape the itemid parameter before using it in a SQL statement via the wishlist/removeproduct REST endpoint, allowing unauthenticated attackers to perform SQL...
CVE-2025-67929
CVE-2025-67929 corresponds to TI WooCommerce Wishlist (templateinvaders)
CVE-2025-67929 WordPress TI WooCommerce Wishlist plugin <= 2.10.0 - Broken Access Control vulnerability
Missing Authorization vulnerability in templateinvaders TI WooCommerce Wishlist ti-woocommerce-wishlist allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects TI WooCommerce Wishlist: from n/a through = 2.10.0...
CVE-2025-9207
CVE-2025-9207 affects the TI WooCommerce Wishlist plugin for WordPress. The vulnerability is an HTML injection flaw present in all versions up to and including 2.10.0, caused by accepting values in hidden inputs without proper validation and outputting them without sanitization. This enables unau...
WordPress TI WooCommerce Wishlist plugin <= 2.10.0 - Unauthenticated HTML Injection vulnerability
Unauthenticated HTML Injection vulnerability discovered by pimschaaf - Open Roads in WordPress Plugin TI WooCommerce Wishlist versions = 2.10.0...
WordPress plugin TI WooCommerce Wishlist 输入验证错误漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. An input...
EUVD-2020-24167
Malware in sbrugna...
EUVD-2025-15720
Malicious code in bioql PyPI...
EUVD-2025-15805
Malicious code in bioql PyPI...
WordPress TI WooCommerce Wishlist plugin <= 2.10.0 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by PARIMAL NA in WordPress Plugin TI WooCommerce Wishlist versions = 2.10.0...
WordPress plugin TI WooCommerce Wishlist 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...
Exploit for CVE-2025-47577
CVE-2025-47577 A proof of concept developed to exploit CVE-2...
Exploit for SQL Injection in Templateinvaders Ti_Woocommerce_Wishlist
CVE-2024-43917 A proof of concept developed to exploit CVE-2...
The vulnerability of the TI WooCommerce Wishlist plugin for WordPress content management system allows a hacker to write arbitrary files.
The vulnerability of the TI WooCommerce Wishlist plugin for WordPress content management system is related to the ability to download files of a dangerous type without limitation. Exploiting this vulnerability could allow an attacker to write arbitrary files...