CVE-2026-14562

The teddy-bear-customize-addon WordPress plugin through 1.0.5 does not perform any authorization or ownership checks before returning WooCommerce order metadata and the URLs of customer-uploaded attachments, allowing unauthenticated attackers to disclose other customers' order and attachment data...

CVE-2026-14559

The teddy-bear-customize-addon WordPress plugin through 1.0.5 does not verify a user's password before authenticating them, allowing unauthenticated attackers to log in as any registered user, including administrators, by supplying only that user's email address...

CVE-2026-14560

The teddy-bear-customize-addon WordPress plugin through 1.0.5 does not properly validate uploaded files, relying on a client-supplied content type and preserving the original filename, allowing unauthenticated attackers to upload arbitrary PHP files and execute code on the server...

CVE-2025-15695

The Translate WordPress with GTranslate WordPress plugin before 3.0.10 does not validate one of its settings before the bundled front-end scripts build markup from it, allowing users with a role as high as administrator to store JavaScript that runs in the session of any visitor to the site...

WordPress Floating Chat Widget: Contact Chat Icons, Telegram Chat, Line Messenger, WeChat, Email, SMS, Call Button plugin <= 3.5.9 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by uhcna - vietnam in WordPress Plugin Chaty versions = 3.5.9...

WordPress Relevanssi plugin <= 4.28.1 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by Mutantgun in WordPress Plugin Relevanssi versions = 4.28.1...

WordPress OTP Login & Register Woocommerce plugin <= 2.7.2 - Unauthenticated Authentication Bypass via Brute Force vulnerability

Unauthenticated Authentication Bypass via Brute Force vulnerability discovered by d4ngvn in WordPress Plugin OTP Login Woocommerce & Gravity Forms versions = 2.7.2...

CVE-2024-10924

CVE-2024-10924 的 PoC Really Simple Plugins WordPress 插件（版本 9.0.0 至 9.1.1.1 包括）的 REST API 中存在一个错误处理缺陷，当启用双因素身份验证时，攻击者可以绕过身份验证并控制现有用户或管理员帐户。 作为一个好人，您还会找到该插件的 9.1.1.1 版本。只需解压并上传到 wp-content/plugins 文件夹。别忘了激活插件并启用 2FA。 需求 使用 pip 安装所需的依赖项： root@kitploit: pip install -r requirements.txt 依赖列表 argparse...

WordPress Sky Addons for Elementor plugin <= 3.8.4 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Sky Addons for Elementor versions = 3.8.4...

WordPress Bold Page Builder plugin <= 5.9.9 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by LevinityCyber in WordPress Plugin Bold Page Builder versions = 5.9.9...

WordPress Simple Payment plugin <= 2.5.4 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by V1T in WordPress Plugin Simple Payment versions = 2.5.4...

WordPress Amelia plugin <= 2.4.9 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Amelia versions = 2.4.9...

MASS-CVE-2024-27956

MASS-CVE-2024-27956-RCE CVE-2024-27956的PoC，这是ValvePress Automatic插件中的一个SQL注入漏洞。该PoC利用漏洞在目标上创建用户并赋予管理员权限。成为WordPress管理员后可能导致远程代码执行。 用法 root@kitploit: git clone https://github.com/itzheartzz/MASS-CVE-2024-27956/ cd MASS-CVE-2024-27956 python3 exploit.py list.txt...

CVE-2024-27956

CVE-2024-27956 注意 构建WordPress：docker-compose -f stack.yml up 安装插件： 1. 进入WordPress仪表盘，选择插件 添加新插件 2. 点击上传插件 3. 选择文件 - wp-automatic.zip - 立即安装 4. 安装完成后，点击启用插件 漏洞利用 /wp-content/plugins/wp-automatic/inc/csv.php q=query&auth=%00&integ=md5query root@kitploit:...

CVE-2024-49699

CVE-2024-49699 ARPrice = 4.0.3 - Inyección de Objetos PHP autenticada Suscriptor+ Descripción El plugin ARPrice para WordPress es vulnerable a Inyección de Objetos PHP en versiones hasta la 4.0.3 inclusive, mediante la deserialización de entrada no confiable. Esto hace posible que atacantes...

CVE-2025-2011

CVE-2025-2011 - Vulnerabilidad de Inyección SQL en el Plugin Depicter Referencia CVE: CVE-2025-2011 Este repositorio contiene un entorno de prueba de concepto para probar la vulnerabilidad de inyección SQL en el plugin Depicter Slider & Popup Builder versiones 3.6.2. Requisitos previos Docker...

vanda-CVE-2025-3102

Vanda CVE-2025-3102 💣 针对 WordPress 插件 SureTriggers = 1.0.78 中 CVE-2025-3102 漏洞的图形界面利用工具。 🚀 功能 识别易受攻击的网站 🕵️‍♂️ 自动利用并创建管理员用户 👨‍💻 赛博朋克风格的图形界面 🌌 结果保存至 .txt 文件以便查阅 📑 🧠 CVE 详情 CVE-2025-3102 漏洞允许通过 SureTriggers API 未经身份验证创建管理员 。当插件已安装但未正确配置 API 密钥时，此漏洞即会触发。 这意味着任何攻击者都可以利用该漏洞在易受攻击的网站上获得管理员权限，而无需身份验证！😱 🖥️...

CVE-2025-2539

CVE-2025-2539 - WordPress File Away = 3.9.9.0.1 - 任意文件读取 🔥 漏洞概要 WordPress 插件 File Away 版本 = 3.9.9.0.1 存在未认证的任意文件读取漏洞。 攻击者可通过向插件的 AJAX 端点发送精心构造的请求，读取服务器上的任意文件（例如 wp-config.php）。 该漏洞源于通过 admin-ajax.php 使用 fileaway-stats 操作时，Nonce 校验不当且缺乏路径限制。 攻击者可利用该漏洞获取敏感文件并提取凭据，可能导致完全沦陷。 🔍 受影响插件 插件名称： File Away...

WordPress Passster plugin <= 4.3.13 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Salúa Es-sair in WordPress Plugin Passster versions = 4.3.13...

EUVD-2026-75973

The BackWPup WordPress plugin before 5.7.5 does not properly restrict access to several of its REST API routes for job, backup-destination, and backup-execution management, allowing users holding a BackWPup WordPress plugin before 5.7.5-defined, administrator-assigned limited role to create and r...