Lucene search
+L

166 matches found

Kitploit
Kitploit
•added 2026/09/28 5:54 p.m.•11 views

WordPresShell

WordPresShell Pre-auth RCE PoC for CVE-2026-63030 + CVE-2026-60137 WordPress core. REST /batch/v1 route confusion → WPQuery authornotin SQLi → unauthenticated admin creation → webshell. Single file, Python stdlib only. Vulnerability: Adam Kues Searchlight Cyber. Affected: 6.9.0–6.9.4, 7.0.0–7.0.1...

9.8CVSS8.8AI score0.10119EPSS
SaveExploits83
Rows per page
Query Builder