CVE-2023-23488-pmpro-2.8

Dockerizing a Vulnerability: CVE-2023-23488 This project aims to dockerize a specific vulnerability using Docker. The goal is to create an isolated environment in which the vulnerability can be exploited and tested securely. Vulnerable Application Paid Memberships Pro v2.9.8 WordPress Plugin -...

CVE-2025-0924-different

Other Vulnerabilities Discovered During CVE-2025-0924 Analysis 01. Overview of Stored XSS and WordPress, WP Activity Log 1 Overview of Stored XSS and WordPress, WP Activity Log Stored XSS is a type of vulnerability where a malicious script is stored on the server and later automatically executed...

CVE-2022-0739

CVE-2022-0739 Proof-of-Concept exploit SQLI BookingPress before 1.0.11 Usage Supply the URL to where the Booking Press plugin is in use on the application. bash exploit.sh '' e.g. Hashes are redacted in this demo ┌──user@user-/ └─$ bash sqliexploit.sh 'http://localhost/calendar/' / / / / \ / / /...

CVE-2022-0441

CVE-2022-0441 Title: WordPress Plugin MasterStudy LMS 2.7.5 - Unauthenticated Admin Account Creation Date: 16.02.2022 Author: Numan Türle CVE: CVE-2022-0441 Software Link: https://wordpress.org/plugins/masterstudy-lms-learning-management-system/ Version: 2.7.6 Installation git clone...

CVE-2022-0952

CVE-2022-0952 Sitemap by click5 1.0.36 - Unauthenticated Arbitrary Options Update Description The plugin does not have authorisation and CSRF checks when updating options via a REST endpoint, and does not ensure that the option to be updated belongs to the plugin. As a result, unauthenticated...

CVE-2023-6063

CVE-2023-6063 PoC Reference Unauthenticated SQL Injection Vulnerability Addressed in WP Fastest Cache 1.2.2 | WPScan Plugin setting Enable "WP Fastest Cache". PoC The "wordpressloggedin" cookie parameter is vulnerable. $ python sqlmap.py --dbms=mysql -u "http://127.0.0.1/wp-login.php"...

CVE-2024-8856

CVE-2024-8856 This tool scans WordPress websites for vulnerabilities in the WP Time Capsule plugin related to CVE-2024-8856. It identifies plugin versions below "1.22.22" as vulnerable and logs results to "vuln.txt". Simple and efficient, it helps security researchers and admins detect and addres...

CVE-2022-1386

CVE-2022-1386 - Fusion Builder 3.6.2 - Unauthenticated SSRF Description Fusion Builder is a WordPress plugin that allows users to create and edit pages using a drag-and-drop interface. It is vulnerable to an unauthenticated SSRF that allows an attacker to read any file on the server. Proof of...

CVE-2023-32117

CVE-2023-32117 Integrate Google Drive ","username":"admin","name":"admin","email":"[email protected]","role":"Administrator","folders":,"id":2,"avatar":"img alt='' src="http:///%5C/%5C/2.gravatar.com%5C/avatar%5C/b58996c504c5638798eb6b511e6f49af?s=32&d=mm&r=g"...

CVE-2021-25094-tatsu-preauth-rce

Preauth RCE in Tatsu builder Wordpress plugin CVE-2021-25094 Simple PoC of an unauthenticated RCE in Tatsu Builder = 3.3.11 provided as an example. Full write-up here: https://darkpills.com/wordpress-tatsu-builder-preauth-rce-cve-2021-25094/ Usage: python3 exploit-rce.py -h --technique TECHNIQUE...

CVE-2024-8353

This post is a research article published by EQSTLab. Thanks tocuokon, who discovered this vulnerability. Introduction Further Analysis CVE-2024-5932 EQST Insight R&TPDF file. https://github.com/user-attachments/assets/085c2f81-2894-4bb7-a3f5-62406dcb1021 CVE-2024-8353 ★ CVE-2024-8353 Arbitrary...

CVE-2019-9978

CVE-2019-9978 - Social Warfare Wordpress plugin RCE 3.5.3 Remote Code Execution in Social Warfare Plugin before 3.5.3 for Wordpress. This Poc does not require running an additional HTTP Server. Just pass your local IP and the desired port and the exploit will create a server in its own thread...

CVE-2020-12077

CVE-2020-12077 MapPress Maps Pro 2.53.9 - Remote Code Execution RCE due to Incorrect Access Control in AJAX Actions Description The pro version of this plugin registers several AJAX actions that call functions which lack capability checks and nonce checks, specifically the ‘ajaxget’, ‘ajaxsave’,...

CVE-2024-27954

⚠️ CVE-2024-27954 💀 Automatic Remote code Execution Exploit Tools | By GhostSec 💀 📝 Description Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in WP Automatic Automatic allows Path Traversal, Server Side Request Forgery.This issue affects Automatic: from...

CVE-2021-25003

CVE-2021-25003 Title: WPCargo 6.9.0 - Unauthenticated RCE Author: Krzysztof Zając https://kazet.cc/ CVE: CVE-2021-25003 Installation git clone https://github.com/biulove0x/CVE-2021-25003.git cd CVE-2021-25003/ python3 -m pip install -r requirements.txt How to run autoexploit $ python3 WpCargo.py...

CVE-2026-10795

CVE-2026-10795 CVE-2026-10795 – UpdraftPlus Authentication Bypass CVE-2026-10795 – UpdraftPlus Authentication Bypass PoC ⚠️ Disclaimer: This repository is for educational purposes only. Only use this on systems you own or have explicit permission to test. The author is not responsible for any...

Mass-CVE-2023-28121

CVE-2023-28121 WooCommerce Payments 5.6.2 - Unauthenticated Privilege Escalation Mass Add Admin User Introduction This script using Python3 and use threading for better process speed. The script has ben updated to 2 version. V1 is the old version and V2 the newer version with random username, ema...

CVE-2026-1357

CVE-2026-1357 — WPvivid Backup & Migration RCE Unauthenticated Arbitrary File Upload → Remote Code Execution Field| Value ---|--- CVE| CVE-2026-1357 CVSS| 9.8 Critical Plugin| WPvivid Backup & Migration Affected| ≤ 0.9.123 Patched| 0.9.124 Discovered by| Lucas Montes NiRoX PoC by| halilkirazkaya...

typehub-exploiter

typehub-exploiter GILANG - Exploiter for CVE-2021-25094 referrence : https://darkpills.com/wordpress-tatsu-builder-preauth-rce-cve-2021-25094/ payload : site.com/wp-admin/admin-ajax.php bug path : site.com/wp-content/uploads/typehub/custom/ Thanks to : Ibnudz, Dark clown security greetz : Garuda...

UPGer

UPGer | CVE-2022-4060 - User Post Gallery Automatic Mass Tool for checking vulnerability in CVE-2022-4060 - WordPress Plugin : User Post Gallery install.sh sha1sum install.sh | grep 12345678 md5sum install.sh sha512sum install.sh bash install.sh How To Use bash upger.sh yourlist.txt thread...