CVE-2026-95523

The WP User Frontend plugin for WordPress, versions

CVE-2026-95524

The WP User Frontend WordPress plugin, affecting versions

EUVD-2026-85472

Contributor SQL Injection in WP EasyCart = 5.9.4 versions...

CVE-2026-94124

The WP EasyCart plugin for WordPress, versions

CVE-2026-94079

The WP User Manager plugin for WordPress, affecting versions

EUVD-2026-85469

Unauthenticated Broken Access Control in WP User Manager = 2.9.19 versions...

EUVD-2026-85468

Unauthenticated Cross Site Scripting XSS in WP Photo Album Plus = 9.3.02.002 versions...

CVE-2026-93774

An unauthenticated Cross Site Scripting (XSS) vulnerability exists in the WP Photo Album Plus WordPress plugin, affecting versions

wphardening

WPHardening Fortify the security of any WordPress installation. ❮ NOTE ❯ This tool releases new versions on a regular basis. Make sure to update your dependencies frequently to get the latest version. Check out the changelog or CHANGELOG.md to learn about the new features. Installation Installing...

CVE-2024-27956

WP Automatic Plugin SQL Injection Exploit CVE-2024-27956 A proof-of-concept exploit for the SQL injection vulnerability in WP Automatic plugin CVE-2024-27956 affecting WordPress sites. 📌 Description This exploit targets a critical unauthenticated SQL injection vulnerability in the WP Automatic...

CVE-2024-50498

CVE-2024-50498 Affected Version WP Query Console =1.0 Credit https://github.com/RandomRobbieBF/CVE-2024-50498 Premise Query Type is WPQuery and WP Query Console executes some php functions Usage python .\CVE-2024-50498.py 192.168.41.163 --query "id"...

wp-file-manager-0day

CVE-2020-25213 wp-file-manager 6.7 2020年8月20日 WordPress 插件 0day elFinder 漏洞是一个众所周知的漏洞，我的脚本只是将路径改为 "/wp-content/plugins/wp-file-manager/"。不要再要求我为脚本或其他东西提供修复。RTFM... 参考链接： https://www.exploit-db.com/exploits/46481 https://www.exploit-db.com/exploits/46539...

CVE-2025-14172-Nuclei-Template

📄 Nuclei Template for CVE-2025-14172 🚀 Overview This repository features a Nuclei template specifically designed to detect a Missing Authorization Vulnerability CVE-2025-14172 in the WP Page Permalink Extension WordPress plugin. This issue allows authenticated attackers to remotely flush the site...

WP-GDPR-Compliance-Plugin-Exploit

Exploit of Vulnerability CVE-2018-19207 in WP GDPR Compliance Plugin WordPress This python script creates a user with role admin. Change the varbiables baseurl, username, email for your specific case. A working email is needed, because an email is sent to this adress in order to setup a password...

wp-mail-masta-exploit

WordPress Plugin Mail Masta 1.0 - CVE-2016-10956 Exploit This script exploits the CVE-2016-10956 vulnerability in WordPress Plugin Mail Masta 1.0 to extract credentials from wp-config.php. How to Use 1. Clone the repository: root@kitploit: git clone...

CVE-2024-9796

CVE-2024-9796 WordPress WP-Advanced-Search = 5.0.12 time-based blind IF - comment Payload: t=wpautosuggest&f=ifnow=sysdate,SLEEP9,0-- wXyW&l=5&type=0&e=utf-8&q=c&limit=5&timestamp=13672261755853'...

cve-2025-1323

cve-2025-1323 WP-Recall Plugin SQL Injection ⚠️ Legal Disclaimer This tool is intended for authorized security testing and educational use only. Do not use against systems without explicit permission. Misuse may be illegal. ✅ Requirements Python 3.x requests module Install dependencies:...

CVE-2026-86601

The WP Recipe Maker WordPress plugin before 10.8.2 does not remove shortcodes from comment content before expanding it while building a page's structured metadata, allowing unauthenticated users to have arbitrary shortcodes executed server side and to read the content of unpublished recipes...

CVE-2015-6668

CVE-2015-6668 Title: CV filename disclosure on Job-Manager WP Plugin...

CVE-2026-86601

The WP Recipe Maker WordPress plugin, in versions prior to 10.8.2 , is vulnerable to unauthenticated arbitrary shortcode execution . The root cause is the failure to remove shortcodes from comment content before expanding them during the generation of a page's structured metadata . This flaw allo...