CVE-2026-100159

The Popup Box plugin for WordPress (versions 6.4.1 to 6.4.2 ) is vulnerable to unauthenticated arbitrary shortcode execution . The root cause is the ays_popup_get_user_ip() function, which reads client-controlled headers (such as Client-IP and X-Forwarded-For) and inadequately sanitizes them usin...

EUVD-2026-102592

The Popup Box plugin for WordPress is vulnerable to Arbitrary Shortcode Execution in versions 6.4.1 to 6.4.2. This is due to the ayspopupgetuserip function reading the client-controlled Client-IP / X-Forwarded-For / Forwarded / X-Forwarded / Forwarded-For request headers, sanitizing them only wit...

Comment2Shell

Comment2Shell Comment2Shell is an end-to-end proof-of-concept for CVE-2026-93485, a pre-authentication stored XSS in WordPress core wpautop that escalates to remote code execution inside an administrator session. An anonymous comment plants the payload; when an admin opens the post, the browser...

NotificationX <= 2.8.2 - SQL Injection

The NotificationX - Best FOMO, Social Proof, WooCommerce Sales Popup & Notification Bar Plugin With Elementor plugin for WordPress is vulnerable to SQL Injection via the 'type' parameter in all versions up to, and including, 2.8.2 due to insufficient escaping on the user supplied parameter and la...

Worpress Backup Migration <= 1.3.7 - Unauthenticated Remote Code Execution

The Backup Migration plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.3.7 via the /includes/backup-heart.php file. This is due to an attacker being able to control the values passed to an include, and subsequently leverage that to achieve remote...

Unauthenticated Remote Code Execution – Bricks <= 1.9.6

Bricks Builder is a popular WordPress development theme with approximately 25,000 active installations. It provides an intuitive drag-and-drop interface for designing and building WordPress websites. Bricks = 1.9.6 is vulnerable to unauthenticated remote code execution RCE which means that anybod...

MasterStudy LMS WordPress Plugin <= 3.2.5 - SQL Injection

The MasterStudy LMS WordPress Plugin for Online Courses and Education plugin for WordPress is vulnerable to union based SQL Injection via the 'user' parameter of the /lms/stm-lms/order/items REST route in all versions up to, and including, 3.2.5 due to insufficient escaping on the user supplied...

CVE-2026-12227-visualcomposer-lfi-poc

CVE-2026-12227 - Visual Composer Unauthenticated LFI via vcv-template Validation Lab Security-research material for reproducing and validating CVE-2026-12227 : an unauthenticated local file inclusion in Visual Composer Website Builder's page-template resolution CVSS 3.1 9.8, plus a verified...

cve-2026-87902

cve-2026-87902 CVE-2026-87902 – WordPress Core LFI to RCE Exploit Auto-Forcing Edition maked by alfaris ⚠️ LEGAL WARNING Using it against systems you do not own or have written permission to test is illegal and punishable under cyber crime laws. The author assumes no responsibility for misuse. 📌...

CVE-2026-80467

███████╗███████╗███╗ ██╗██╗███╗ ███╗ █████╗ ███╗ ██╗ ██╔════╝██╔════╝████╗ ██║██║████╗ ████║██╔══██╗████╗ ██║ ███████╗█████╗ ██╔██╗ ██║██║██╔████╔██║███████║██╔██╗ ██║ ╚════██║██╔══╝ ██║╚██╗██║██║██║╚██╔╝██║██╔══██║██║╚██╗██║ ███████║███████╗██║ ╚████║██║██║ ╚═╝ ██║██║ ██║██║ ╚████║...

CVE-2026-3516

CVE-2026-3516: Authenticated Stored Cross-Site Scripting XSS in Contact List Plugin Disclaimer: This repository is created for educational purposes and ethical disclosure only. The vulnerability has been responsibly reported to the vendor and patched. Do not use this information to exploit system...

CVE-2026-1657

CVE-2026-1657: Unauthenticated Arbitrary File Upload in EventPrime Plugin Disclaimer: This repository is created for educational purposes and ethical disclosure only. The vulnerability has been responsibly reported to the vendor and patched. Do not use this information to exploit systems without...

CVE-2025-47445-PoC

CVE-2025-47445 PoC This proof of concept is based on a school assignment where we wanted to find a vulnerable wordpress plugin and test said vulnerability in a local controlled environment. Info| ---|--- Wordpress plugin:| Wordpress Eventin Plugin version:| 4.0.26 or older CVE information:| Proje...

CVE-2025-53580

CVE-2025-53580 WordPress Simple Business Directory Pro Plugin 15.6.9 is vulnerable to a high priority Privilege Escalation CVE-2025-53580 Simple Business Directory Pro — Incorrect Privilege Assignment → Password Reset → Admin Takeover / | |// / / / | | / | / \ / \ | | | \ /| | / | | /| /| | | |...

PT-2026-115462

Name of the Vulnerable Software and Affected Versions Theme My Login versions prior to 7.2.2 Description Theme My Login for WordPress contains a privilege escalation flaw that allows unauthenticated attackers to perform account takeovers. The issue occurs because the plugin fails to properly...

PT-2026-115482

Name of the Vulnerable Software and Affected Versions Coinsnap Bitcoin Crowdfunding WordPress plugin versions prior to 1.2.1 Description The plugin fails to restrict access to the secret used to authenticate its payment gateway webhook, allowing unauthenticated users to obtain it. This disclosure...

PT-2026-115478

Name of the Vulnerable Software and Affected Versions Product Delivery Date for WooCommerce versions prior to 3.3.2 Description Insufficient capability checks in the calendar view AJAX actions allow users with the Contributor role to access and view order details belonging to other customers...

PT-2026-115477

Name of the Vulnerable Software and Affected Versions affiliate-toolkit WordPress plugin versions prior to 3.8.9 Description The plugin fails to validate a user-supplied sort value against an allowlist before incorporating it into a database query. Because the affected administrative list screen...

PT-2026-115481

Name of the Vulnerable Software and Affected Versions WX Subscribe 微信支付付费订阅 WordPress plugin versions prior to 1.2.2 Description An issue exists where a parameter is not properly sanitized and escaped before being used in a SQL statement. This allows unauthenticated attackers to perform SQL...

PT-2026-115475

Name of the Vulnerable Software and Affected Versions Smush WordPress plugin versions prior to 4.3.4 Description An issue exists where changes to a network-wide access setting are not restricted to network administrators. This allows an administrator of a single site within a multisite network to...