CVE

Tabla de CVEs Número de CVE| Tipo| Empresa/Producto| Descripción| Enlace del Artículo| Enlace del Repositorio ---|---|---|---|---|--- CVE-2026-9680| SQLi| Alibaba RDS MCP Servers| TBA| TBA| TBA CVE-2026-50335| LPE| Windows julio de 2026| TBA| TBA| TBA GHSA-73cv-556c-w3g6| SQLi| Apache Pinot MCP...

wpBullet

wpBullet Un análisis de código estático para plugins/temas de WordPress y PHP Instalación...

wpbullet

wpBullet Un'analisi statica del codice per plugin/temi WordPress e PHP Installazione Basta clonare il repository, installare i requisiti ed eseguire lo script $ git clone https://github.com/webarx-security/wpbullet wpbullet $ cd wpbullet $ pip install -r requirements.txt $ python wpbullet.py...

CVE-2023-38146-Poc

PoC für den ThemeBleed CVE-2023-38146-Exploit Windows 11-Designs Stark inspiriert von https://github.com/gabe-k/themebleed, das nur unter Windows läuft der Grund, warum ich mich entschieden habe, dies zu schreiben. Verwendeter modifizierter Code aus der impacket smbserver.py...

nuclei-wordfence-cve

Nuclei + Wordfence = ♥ 77,636 Templates Nuclei para Varredura de Segurança do WordPress 🥳 Eleve o nível da sua segurança WordPress! Este projeto tem um verdadeiro tesouro de Nuclei templates novos para WordPress. Varra por fraquezas no Core, plugins e temas – tudo com base nas informações mais...

CVE-2023-38146

PoC per l'exploit ThemeBleed CVE-2023-38146 Temi di Windows 11 Fortemente ispirato da https://github.com/gabe-k/themebleed che funziona solo su Windows motivo per cui ho deciso di scrivere questo. Ho usato codice modificato da impacket smbserver.py...

WordPress Bello Directory & Listing Theme <1.6.0 - Cross-Site Scripting

WordPress Bello Directory & Listing theme before 1.6.0 contains a reflected cross-site scripting vulnerability. It does not properly sanitize and escape the listinglistview, btbblistingfieldmylat, btbblistingfieldmylng, btbblistingfielddistancevalue, btbblistingfieldmylatdefault,...

WordPress Catch Breadcrumb <1.5.4 - Cross-Site Scripting

WordPress Catch Breadcrumb plugin before 1.5.4 contains a reflected cross-site scripting vulnerability via the s parameter a search query. Also affected are 16 themes if the plugin is enabled: Alchemist and Alchemist PRO, Izabel and Izabel PRO, Chique and Chique PRO, Clean Enterprise and Clean...

Themes Coder Ecommerce <= 1.3.4 - SQL Injection

The Themes Coder Ecommerce WordPress plugin through 1.3.4 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection. id: CVE-2024-13726 info: name: Themes Coder Ecommerce = 1.3.4 - SQL...

All Thrive Themes and Plugins - Unauthenticated Option Update

The Thrive Optimize WordPress plugin before 1.4.13.3, Thrive Comments WordPress plugin before 1.4.15.3, Thrive Headline Optimizer WordPress plugin before 1.3.7.3, Thrive Leads WordPress plugin before 2.3.9.4, Thrive Ultimatum WordPress plugin before 2.3.9.4, Thrive Quiz Builder WordPress plugin...

Wordpress Multiple Themes - Reflected Cross-Site Scripting

All of the above Aapna WordPress theme through 1.3, Anand WordPress theme through 1.2, Anfaust WordPress theme through 1.1, Arendelle WordPress theme before 1.1.13, Atlast Business WordPress theme through 1.5.8.5, Bazaar Lite WordPress theme before 1.8.6, Brain Power WordPress theme through 1.2,...

Multiple Thrive Themes < 2.0.0 - Arbitrary File Upload

Thrive “Legacy” Rise by Thrive Themes WordPress theme before 2.0.0, Luxe by Thrive Themes WordPress theme before 2.0.0, Minus by Thrive Themes WordPress theme before 2.0.0, Ignition by Thrive Themes WordPress theme before 2.0.0, FocusBlog by Thrive Themes WordPress theme before 2.0.0, Squared by...

wpscvn

wpscvn is a tool for pentesters, website owner to test if their websites had some vulnerable plugins or themes The author does not hold any responsibility for the bad use of this tool, remember that attacking targets without prior consent is illegal and punished by law. requires : Python 3 usage ...

CVE-2022-0316_wordpress_multiple_themes_exploit

Temi multipli di Wordpress - Caricamento arbitrario di file non autenticato CVE-2022-0316 Caricamento arbitrario di file non autenticato in diversi temi di ChimpStudio e PixFill. Per altri exploit ed esclusivi contattami su Telegram @KtN1990. Temi Coinvolti westand footysquare aidreform statfort...

WordPress Epsilon Framework Themes <=2.4.8 - Remote Code Execution

WordPress themes including Shapely = 1.2.7, NewsMag = 2.4.1, Activello = 1.4.0, Illdy = 2.1.4, Allegiant = 1.2.2, Newspaper X = 1.3.1, Pixova Lite = 2.0.5, Brilliance = 1.2.7, MedZone Lite = 1.2.4, Regina Lite = 2.0.4, Transcend = 1.1.8, Affluent = 1.1.0, Bonkers = 1.0.4, Antreas = 1.0.2, Sparkli...

wordpress-hacking

Hacking di WordPress Alcune risorse utili per l'hacking di WordPress e dei suoi plugin e temi. Bug Bounty Se ti appassiona trovare e segnalare vulnerabilità di WordPress, valuta di unirti a questi programmi di bug bounty: Wordfence e Patchstack. Iscrivendoti tramite il mio link Wordfence, ricevo ...

Wordfence Intelligence Weekly WordPress Vulnerability Report (August 10, 2026 to August 16, 2026)

Last week, there were 260 vulnerabilities disclosed in 200 WordPress Plugins and 5 WordPress Themes that have been added to the Wordfence Intelligence Vulnerability Database, and there were 142 Vulnerability Researchers that contributed to WordPress Security last week. Review those vulnerabilitie...

GHSA-RRWH-6JRQ-WP5V

creationtimestamp| type| source ---|---|--- 2026-08-20 17:51:42+00:00| seen| https://bsky.app/profile/thestandup.bsky.social/post/3mtjsq4tke52x...

CVE-2026-21073

Improper input validation in Galaxy Themes prior to SMR Aug-2026 Release 1 allows physical attackers to launch arbitrary activity...

CVE-2026-21073

CVE-2026-21073 affects Galaxy Themes prior to the SMR Aug-2026 Release 1. Description: improper input validation could allow a physical attacker to launch arbitrary activity. CVSS v4.0 score is 5.2 (Medium) with Attack Vector: Physical, Attack Complexity: Low, Privileges Required: None, User Inte...