CVE-2024-56249

🛠️ WordPress Master Toolkit Exploit CVE-2024-56249 🌟 Resumen Este script explota una vulnerabilidad de subida arbitraria de archivos en el plugin WPMasterToolKit de WordPress, permitiendo a un atacante subir un web shell al servidor. La vulnerabilidad existe en versiones -un -p -fn 📋 Parámetros -u...

CVE-2026-66624

Administrator SQL Injection in WPMasterToolKit = 2.22.0 versions...

CVE-2026-66624

WPMasterToolKit , a WordPress plugin, is affected by an Administrator-level SQL Injection in versions ≤ 2.22.0 , discovered by Ananda Dhakal (Patchstack). The vulnerability carries a CVSS 3.1 score of 7.6 (HIGH) with a vector of AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L, indicating that a privileged (a...

EUVD-2026-81506

Administrator SQL Injection in WPMasterToolKit = 2.22.0 versions...

CVE-2026-66624 WordPress WPMasterToolKit plugin <= 2.22.0 - SQL Injection vulnerability

Administrator SQL Injection in WPMasterToolKit = 2.22.0 versions...

CVE-2026-66624 WordPress WPMasterToolKit plugin <= 2.22.0 - SQL Injection vulnerability

Administrator SQL Injection in WPMasterToolKit = 2.22.0 versions...

WordPress WPMasterToolKit plugin <= 2.22.0 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin WPMasterToolKit versions = 2.22.0...

CVE-2026-66624: Improper Neutralization of Special Elements used in an SQL Command

Administrator SQL Injection in WPMasterToolKit = 2.22.0 versions...

CVE-2026-24388

Missing Authorization vulnerability in Ludwig You WPMasterToolKit wpmastertoolkit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPMasterToolKit: from n/a through = 2.14.0...

CVE-2026-24388

Missing Authorization vulnerability in Ludwig You WPMasterToolKit wpmastertoolkit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPMasterToolKit: from n/a through = 2.14.0...

CVE-2026-24388 WordPress WPMasterToolKit plugin <= 2.14.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in Ludwig You WPMasterToolKit wpmastertoolkit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPMasterToolKit: from n/a through = 2.14.0...

CVE-2026-24388 WordPress WPMasterToolKit plugin <= 2.14.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in Ludwig You WPMasterToolKit wpmastertoolkit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPMasterToolKit: from n/a through = 2.14.0...

CVE-2026-24388

CVE-2026-24388 is a Missing Authorization/Broken Access Control vulnerability in the WordPress plugin WPMasterToolKit (WPMTK) affecting versions up to and including 2.14.0. Multiple connected sources confirm the issue and classify the impact as partial confidentiality/integrity loss with no explo...

CVE-2026-24388: Missing Authorization

Missing Authorization vulnerability in Ludwig You WPMasterToolKit wpmastertoolkit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPMasterToolKit: from n/a through = 2.14.0...

WordPress plugin WPMasterToolKit has a security vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

PT-2026-4271

Missing Authorization vulnerability in Ludwig You WPMasterToolKit wpmastertoolkit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPMasterToolKit: from n/a through = 2.14.0...

WordPress WPMasterToolKit plugin <= 2.14.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Nabil Irawan in WordPress Plugin WPMasterToolKit versions = 2.14.0...

CVE-2025-14166

The WPMasterToolKit plugin for WordPress is vulnerable to PHP Code Injection in all versions up to, and including, 2.13.0. This is due to the plugin allowing Author-level users to create and execute arbitrary PHP code through the Code Snippets feature without proper capability checks. This makes ...

WordPress WPMasterToolKit (WPMTK) plugin <= 2.13.0 - Authenticated (Author+) Code Injection vulnerability

Authenticated Author+ Code Injection vulnerability discovered by Athiwat Tiprasaharn Jitlada in WordPress Plugin WPMasterToolKit versions = 2.13.0...

CVE-2025-14166

The WPMasterToolKit plugin for WordPress is vulnerable to PHP Code Injection in all versions up to, and including, 2.13.0. This is due to the plugin allowing Author-level users to create and execute arbitrary PHP code through the Code Snippets feature without proper capability checks. This makes ...