CVE-2023-2877

CVE-2023-2877 Formidable Forms 6.3.1 - Subscriber+ Remote Code Execution Usage usage: CVE-2023-2877.py -h -w URL -u USERNAME -p PASSWORD -pl PLUGIN -c CMD CVE-2023-2877 - Formidable Forms 6.3.1 - Subscriber+ Remote Code Execution Script options: -h, --help show this help message and exit -w URL,...

CVE-2024-8856

CVE-2024-8856: WordPress WP Time Capsule Plugin Arbitrary File Upload Vulnerability Overview CVE-2024-8856 is a security vulnerability found in the WP Time Capsule plugin for WordPress that allows unauthenticated users to upload arbitrary files to the server. This can lead to remote code executio...

CVE-2023-47668

CVE-2023-47668 Restrict Content = 3.2.7 - Information Exposure via legacy log file Description: The Membership Plugin – Restrict Content plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.2.7 via the legacy log file. This makes it possible...

CVE-2021-25032

CVE-2021-25032 PublishPress Capabilities 2.2 - 2.3 - Unauthenticated Arbitrary Options Update to Blog Compromise Description The plugin does not have authorisation and CSRF checks when updating the plugin's settings via the init hook, and does not ensure that the options to be updated belong to t...

CVE-2022-0739

CVE-2022-0739 BookingPress 1.0.11 - Unauthenticated SQL Injection The plugin fails to properly sanitize user supplied POST data before it is used in a dynamically constructed SQL query via the bookingpressfrontgetcategoryservices AJAX action available to unauthenticated users, leading to an...

Wordpress-CVE-2020-35749

Wordpress Plugin Simple Job Board 2.9.3 LFI Vulnerability CVE-2020-35749 Exploit Summary WordPress Plugin Simple Job Board is prone to a directory traversal vulnerability because it fails to sufficiently verify user-supplied input. Exploiting this issue can allow an attacker to obtain sensitive...

CVE-2025-34077

CVE-2025-34077 Unauthenticated Admin Session Hijack - Pie Register Plugin ≤ 3.7.1.4 📌 Description This exploit targets a vulnerability in the Pie Register WordPress plugin versions ≤ 3.7.1.4, allowing unauthenticated session hijacking of admin accounts. 🛡️ This tool is for authorized testing and...

CVE-2024-8353-PoC

Proof-Of-Concept Code for CVE-2024-8353 This repository contains a script for exploiting the CVE-2024-8353 vulnerability in the GiveWP plugin for WordPress. This vulnerability allows unauthenticated PHP Object Injection, potentially leading to remote code execution. Overview The provided scripts...

CVE-2024-49328

CVE-2024-49328 WP REST API FNS ; rel="https://api.w.org/" X-Content-Type-Options: nosniff Access-Control-Expose-Headers: X-WP-Total, X-WP-TotalPages, Link Access-Control-Allow-Hea...

CVE-2025-6934

🛡️ CVE-2025-6934 - Unauthenticated Privilege Escalation in Opal Estate Pro 📝 Description The Opal Estate Pro – Property Management and Submission plugin for WordPress, used by the FullHouse - Real Estate Responsive WordPress Theme , is vulnerable to Privilege Escalation in all versions up to and...

CVE-2026-86611

The Download Manager WordPress plugin before 3.3.71, Download Manager WordPress plugin before 7.5.9 does not have CSRF checks in some places, allowing attackers to make a logged in admin update its privacy and storage settings via a crafted link, including the credential that gates its...

CVE-2026-111947

The Pricing Table WordPress Plugin WordPress plugin before 4.1.3 does not perform authorisation checks when duplicating a legacy pricing table, allowing users with the contributor role and above to clone and publish any post or page on the site, including private and draft content belonging to...

CVE-2026-110514

The WPZOOM Portfolio Lite WordPress plugin before 1.4.34 does not check that a user is allowed to edit a post before changing its type and order, which could allow users with the contributor role and above to convert any other user's posts and pages into portfolio items, removing them from their...

CVE-2026-109926

The Productive Commerce WordPress plugin before 1.1.49 does not perform a capability check in one of its AJAX actions and exposes the nonce that guards it on every admin-area page, allowing any authenticated user such as a subscriber to activate arbitrary Productive Commerce WordPress plugin befo...

CVE-2026-105998

The Booking Package WordPress plugin before 1.7.31 does not perform any authorization or validity check before resetting its premium subscription state, allowing unauthenticated attackers to disable the Booking Package WordPress plugin before 1.7.31's paid features...

CVE-2025-4094-POC

WordPress Plugin Digits OTP Bypass CVE-2025-4094 Overview This script is an exploit for the WordPress Plugin Digits versions -p -i OPTIONS Arguments -u, --url: Required Target URL e.g., https://example.com/wp-admin/admin-ajax.php -p, --phone: Required Target phone number digits only -i,...

CVE-2026-92999 Click n Chat 1.0.4 - 1.1.2 - Unauthenticated Lead Data Disclosure via click_n_chat_update_lead_list_export_action

The Click n Chat Chat Widget Integration WordPress plugin before 1.1.3 does not perform any authorization check on a lead-export handler, allowing unauthenticated users to download every captured contact record names, email addresses and phone numbers...

CVE-2026-92999 Click n Chat 1.0.4 - 1.1.2 - Unauthenticated Lead Data Disclosure via click_n_chat_update_lead_list_export_action

The Click n Chat Chat Widget Integration WordPress plugin before 1.1.3 does not perform any authorization check on a lead-export handler, allowing unauthenticated users to download every captured contact record names, email addresses and phone numbers...

CVE-2026-92999

The Click n Chat (Chat Widget Integration) WordPress plugin, in versions 1.0.4 through 1.1.2 , is vulnerable to an unauthenticated lead data disclosure vulnerability. The root cause is a lack of authorization checks on a lead-export handler, specifically via the click_n_chat_update_lead_list_expo...

CVE-2026-86611

The Download Manager WordPress plugin (Free & Pro) versions before 3.3.71 and before 7.5.9 are vulnerable to a Cross-Site Request Forgery (CSRF) . The root cause is a lack of CSRF checks in specific locations, which allows an attacker to trick a logged-in administrator into updating the plugin's ...