Lucene search
+L

92674 matches found

Kitploit
Kitploit
โ€ขadded 2026/09/07 7:21 p.m.โ€ข7 views

CVE-2026-0740

CVE-2026-0740 ๐Ÿงฉ Overview CVE-2026-0740 is an unauthenticated arbitrary file upload vulnerability affecting: Ninja Forms File Uploads โ‰ค 3.3.26 WordPress plugin This flaw allows attackers to upload arbitrary files to the server without authentication, potentially leading to remote code execution RC...

9.8CVSS8.2AI score0.62903EPSS
SaveExploits9
Kitploit
Kitploit
โ€ขadded 2026/09/07 7:16 p.m.โ€ข9 views

CVE-2024-32136

BWL Advanced FAQ Manager 2.0.3 - Post-Authenticated SQL Injection Exploit Title: BWL Advanced FAQ Manager 2.0.3 - Post-Authenticated SQL Injection Date: 14 Apr 2024 Exploit Author: Ivan Spiridonov xbz0n Software Link: https://codecanyon.net/item/bwl-advanced-faq-manager/5007135 Version: 2.0.3...

7.6CVSS7.4AI score0.01307EPSS
SaveExploits3
Kitploit
Kitploit
โ€ขadded 2026/09/07 7:01 p.m.โ€ข11 views

CVE-2024-1512

CVE-2024-1512 Proof of Concept Vulnerability Overview CVE-2024-1512 exposes a critical vulnerability in the MasterStudy LMS WordPress Plugin, specifically within the implementation of the /lms/stm-lms/order/items REST route. The issue arises from the plugin's failure to properly escape the 'user'...

9.8CVSS8.3AI score0.77579EPSS
SaveExploits1
Kitploit
Kitploit
โ€ขadded 2026/09/07 6:40 p.m.โ€ข7 views

CVE-2021-24155.rb

WordPress-Backup-RCE This Metasploit module allows an attacker with a privileged WordPress account to launch a reverse shell due to an arbitrary file upload vulnerability in Wordpress plugin Backup Guard versions prior to 1.6.0. This is due to an incorrect check of the uploaded file extension whi...

7.2CVSS7.5AI score0.84112EPSS
SaveExploits9
Kitploit
Kitploit
โ€ขadded 2026/09/07 6:24 p.m.โ€ข8 views

CVE-2023-32243

CVE-2023-32243. Essential Addons for Elementor 5.4.0-5.7.1 - Unauthenticated Privilege Escalation Info The plugin does not validate the password reset key, which could allow unauthenticated attackers to reset arbitrary account's password to anything they want, by knowing the related email or...

9.8CVSS8.3AI score0.75531EPSS
SaveExploits8
Kitploit
Kitploit
โ€ขadded 2026/09/07 6:10 p.m.โ€ข7 views

CVE-2020-35590

Exploit Information Exploit Title: WordPress Plugin Limit Login Attempts Reloaded 2.13.0 - Login Limit Bypass CVE: CVE-2020-35590 Date: 2020-06-09 Exploit Author: N4nj0 Software Link: https://wordpress.org/plugins/limit-login-attempts-reloaded/ Version: 2.13.0 Tested on: WordPress 5.4.1, 5.4.2...

9.8CVSS8AI score0.04348EPSS
SaveExploits1References1
Kitploit
Kitploit
โ€ขadded 2026/09/07 6:09 p.m.โ€ข9 views

CVE-2026-12277

CVE-2026-12277 Frontend File Manager Plugin WordPress = 23.6 - Unauthenticated Arbitrary File Deletion to RCE Summary...

8.7CVSS5.9AI score0.00392EPSS
SaveExploits1
Kitploit
Kitploit
โ€ขadded 2026/09/07 5:53 p.m.โ€ข11 views

CVE-2024-8856

CVE-2024-8856: Vulnerabilidad de subida arbitraria de archivos en el plugin WP Time Capsule de WordPress Resumen CVE-2024-8856 es una vulnerabilidad de seguridad encontrada en el plugin WP Time Capsule para WordPress que permite a usuarios no autenticados subir archivos arbitrarios al servidor...

9.8CVSS8.2AI score0.94004EPSS
SaveExploits7
Kitploit
Kitploit
โ€ขadded 2026/09/07 5:36 p.m.โ€ข7 views

CVE-2025-23942-poc

WP Load Gallery ๆผๆดžๅˆฉ็”จ CVE-2025-23942 ๐Ÿ“Œ ๆ่ฟฐ NgocCode WP Load Gallery ไธญๅญ˜ๅœจๅฑ้™ฉ็ฑปๅž‹ๆ–‡ไปถๆ— ้™ๅˆถไธŠไผ ๆผๆดž๏ผŒๅ…่ฎธๅ‘ Web ๆœๅŠกๅ™จไธŠไผ  Web Shellใ€‚่ฏฅๆผๆดžๅฝฑๅ“ WP Load Gallery ็‰ˆๆœฌ๏ผšไปŽ n/a ่‡ณ 2.1.6ใ€‚ โš ๏ธ ๆผๆดž่ฏฆๆƒ… CVE ID: CVE-2025-23942 ๅ—ๅฝฑๅ“ๆ’ไปถ: WP Load Gallery ๅ—ๅฝฑๅ“็‰ˆๆœฌ: ๆœ€้ซ˜ 2.1.6 ๆผๆดž็ฑปๅž‹: ๆ— ้™ๅˆถๆ–‡ไปถไธŠไผ  ไธฅ้‡ๆ€ง: ไธฅ้‡ CVSS 9.1 ๆ”ปๅ‡ปๅ‘้‡: ๅทฒ้ชŒ่ฏ็”จๆˆท ไฝœ่€…็บง+ ่ฟœ็จ‹ไปฃ็ ๆ‰ง่กŒ RCE ่กฅไธๅฏ็”จๆ€ง: โŒ ๅฐšๆ— ๅฎ˜ๆ–น่กฅไธ ๐Ÿš€...

9.1CVSS8.2AI score0.0272EPSS
SaveExploits1
Kitploit
Kitploit
โ€ขadded 2026/09/07 5:35 p.m.โ€ข8 views

CVE-2025-2294

๐Ÿšจ Kubio AI Page Builder = 2.5.1 - Unauthenticated Local File Inclusion ๐Ÿ“ Description The Kubio AI Page Builder plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.5.1 via the kubiohybridthemeloadtemplate function. This makes it possible for...

9.8CVSS8.5AI score0.7836EPSS
SaveExploits12
Kitploit
Kitploit
โ€ขadded 2026/09/07 4:57 p.m.โ€ข7 views

CVE-2025-34085

CVE-2025-34085 โ€” WordPress Simple File List Unauthenticated RCE Exploit An automated exploit and scanner for CVE-2025-34085 , a critical vulnerability in the WordPress Simple File List plugin, enabling unauthenticated remote code execution through arbitrary file upload and rename functionalities....

5.8AI score
SaveExploits9References1
Kitploit
Kitploit
โ€ขadded 2026/09/07 4:57 p.m.โ€ข7 views

CVE-2024-8353-PoC

Cรณdigo de Prueba de Concepto para CVE-2024-8353 Este repositorio contiene un script para explotar la vulnerabilidad CVE-2024-8353 en el plugin GiveWP para WordPress. Esta vulnerabilidad permite la inyecciรณn de objetos PHP sin autenticaciรณn, lo que potencialmente puede conducir a la ejecuciรณn remo...

10CVSS8.3AI score0.2872EPSS
SaveExploits3
Kitploit
Kitploit
โ€ขadded 2026/09/07 4:50 p.m.โ€ข8 views

CVE-2023-2877

CVE-2023-2877 Formidable Forms 6.3.1 - Subscriber+ Remote Code Execution Usage root@kitploit: usage: CVE-2023-2877.py -h -w URL -u USERNAME -p PASSWORD -pl PLUGIN -c CMD CVE-2023-2877 - Formidable Forms 6.3.1 - Subscriber+ Remote Code Execution Script options: -h, --help show this help message an...

8.8CVSS7.8AI score0.22452EPSS
SaveExploits3
Kitploit
Kitploit
โ€ขadded 2026/09/07 4:42 p.m.โ€ข8 views

CVE-2023-5412

CVE-2023-5412 Image horizontal reel scroll slideshow = 13.2 - Authenticated Subscriber+ SQL Injection via Shortcode Description: The Image horizontal reel scroll slideshow plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 13.2 due to...

8.8CVSS7.2AI score0.01473EPSS
SaveExploits2
Kitploit
Kitploit
โ€ขadded 2026/09/07 4:41 p.m.โ€ข8 views

CVE-2026-18366

CVE-2026-18366 Events Manager 7.4.1 - Unauthenticated Privilege Escalation to Administrator ๐Ÿ”— Stay Updated For the latest zero-days, exploits, and security research ๐Ÿ“‹ Vulnerability Overview ๐Ÿ” Technical Description Root Cause Analysis The vulnerability exists in EM\Archetypes::mapmetacap within...

9.8CVSS6AI score0.0039EPSS
SaveExploits3
Kitploit
Kitploit
โ€ขadded 2026/09/07 4:13 p.m.โ€ข5 views

CVE-2025-2005

CVE-2025-2005 WordPress Front End Users Plugin = 3.2.32 is vulnerable to Arbitrary File Upload WordPress Front-End Users Plugin Exploit Vulnerability Information Plugin Name : Front-End Users Plugin Version Affected : = 3.2.32 Vulnerability Type : Arbitrary File Upload CVSS Score : 10 Critical Ri...

9.8CVSS8AI score0.21975EPSS
SaveExploits3
Kitploit
Kitploit
โ€ขadded 2026/09/07 3:51 p.m.โ€ข7 views

Wordpress-CVE-2020-35749

Wordpress Plugin Simple Job Board 2.9.3 LFI Vulnerability CVE-2020-35749 Exploit Summary WordPress Plugin Simple Job Board is prone to a directory traversal vulnerability because it fails to sufficiently verify user-supplied input. Exploiting this issue can allow an attacker to obtain sensitive...

7.7CVSS7.4AI score0.30479EPSS
SaveExploits7
Kitploit
Kitploit
โ€ขadded 2026/09/07 3:41 p.m.โ€ข10 views

CVE-2024-22145

CVE-2024-22145 InstaWP Connect = 0.1.0.8 - Autorizaciรณn faltante para la actualizaciรณn arbitraria de opciones Suscriptor+ Descripciรณn: El complemento InstaWP Connect โ€“ 1-click WP Staging & Migration para WordPress es vulnerable a la modificaciรณn no autorizada de datos debido a una falta de...

8.8CVSS8AI score0.01103EPSS
SaveExploits1
Kitploit
Kitploit
โ€ขadded 2026/09/07 3:35 p.m.โ€ข6 views

-CVE-2022-1609

CVE-2022-1609 Bash poc for CVE-2022-1609 WordPress Weblizar Backdoor How to install ? root@kitploit: wget https://raw.githubusercontent.com/0xSojalSec/CVE-2022-1609/main/exploit.sh chmod +x exploit.sh ./exploit.sh How to use it ? root@kitploit: GH0ST3exP10it$ ./exploit.sh http://127.0.0.1:8080 +...

9.8CVSS8.4AI score0.64075EPSS
SaveExploits6
Kitploit
Kitploit
โ€ขadded 2026/09/07 3:21 p.m.โ€ข6 views

CVE-2023-30777

CVE-2023-30777 Generador de URL de Prueba de Concepto PoC para una vulnerabilidad XSS reflejado en el plugin Advanced Custom Fields de WordPress. PoC generado por: Alucard0x1 Crรฉdito del Exploit:...

7.1CVSS7.3AI score0.38768EPSS
SaveExploits3
Rows per page
Query Builder