CVE-2026-6279.py

Descrição Este script Python é uma ferramenta de exploração para CVE-2026-6279 visando Avada Builder = 3.15.2. Comportamento principal: scaneia alvos em busca de fusionloadnonce através de padrões de shortcode/página específicos do Avada descobre endpoint AJAX e bypass de IP de origem se Cloudfla...

CVE-2025-4606

CVE-2025-4606 Visão Geral Esta ferramenta é usada para testar a vulnerabilidade CVE-2025-4606 no WordPress que usa o theme Sala – Startup & SaaS WordPress Theme. Esta vulnerabilidade permite Privilege Escalation via Account Takeover porque o tema não valida corretamente a identidade do usuário...

CVE-2025-49071

CVE-2025-49071 Flozen 1.5.1 - अनधिकृत आर्बिट्ररी फ़ाइल अपलोड विवरण : Flozen थीम 1.5.1 - अनधिकृत आर्बिट्ररी फ़ाइल अपलोड विवरण वर्डप्रेस के लिए Flozen थीम संस्करण 1.5.1 तक अनधिकृत आर्बिट्ररी फ़ाइल अपलोड के लिए संवेदनशील है, जो flozenaddnewcustomfont फ़ंक्शन में प्रमाणीकरण जाँच की कमी और अपर्याप्त...

CVE-2025-8359

CVE-2025-8359 AdForest Repositório: Nxploited/CVE-2025-8359 Script de Exploit: CVE-2025-8359.py 📋 Descrição CVE: CVE-2025-8359 Tipo de Vulnerabilidade: Bypass de Autenticação Produto Afetado: AdForest - Tema WordPress de Anúncios Classificados Versões Afetadas: Até 6.0.9 inclusive Pontuação CVSS:...

Wordfence Argus Finds Complex 6 Step Critical RCE in Avada Theme with 1 Million Sales

A year ago we wrote that we'd put AI to work across the whole company, turning everyone on the team into a capable AI operator so our defenders could stay ahead of the threat actors attacking the sites we protect. In April we showed where it was heading: in the space of a few months, AI-assisted...

CVE-2025-5394

CVE-2025-5394 CVE‑2025‑5394 WP Alone theme ≤ 7.8.3...

CVE-2021-24499

CVE-2021-24499 | Workreap - Tema WordPress de Marketplace Freelancer e Diretório 2.2.2 - Upload Arbitrário de Arquivo Tema WordPress Workreap 2.2.2 - Upload não autenticado de arquivo levando à Execução Remota de Código Uma ferramenta de exploração em massa poderosa e precisa para a vulnerabilida...

CVE-2026-78566 Shuffle <= 1.8 - Unauthenticated Local File Inclusion

The Shuffle theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.8. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to...

CVE-2026-78566

The Shuffle theme for WordPress is vulnerable to Local File Inclusion in all versions up to and including 1.8 . An unauthenticated attacker over the network can include and execute arbitrary files on the server, enabling execution of any PHP code contained in those files. This may be used to bypa...

CVE-2024-3806

CVE-2024-3806 Porto = 7.1.0 - अप्रमाणित स्थानीय फ़ाइल समावेशन portoajaxposts के माध्यम से विवरण WordPress के लिए Porto थीम 'portoajaxposts' फ़ंक्शन के माध्यम से सभी संस्करणों 7.1.0 तक और इसमें शामिल में स्थानीय फ़ाइल समावेशन के लिए संवेदनशील है। यह अप्रमाणित हमलावरों को सर्वर पर मनमानी फ़ाइलों को...

CVE-2024-10470

CVE-2024-10470 WPLMS Learning Management System for WordPress = 4.962 – Leitura e Exclusão Arbitrária de Arquivos Não Autenticada Descrição O WPLMS Learning Management System para WordPress, tema LMS do WordPress para WordPress, está vulnerável a leitura e exclusão arbitrária de arquivos devido à...

CVE-2026-78477

The Jawn theme for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.4.2. This makes it possible for unauthenticated attackers to elevate their privileges to that of an administrator...

WordPress Jannah Theme <5.4.5 - Cross-Site Scripting

WordPress Jannah theme before 5.4.5 contains a reflected cross-site scripting vulnerability. It does not properly sanitize the 'query' POST parameter in its tieajaxsearch AJAX action. id: CVE-2021-24407 info: name: WordPress Jannah Theme 5.4.5 - Cross-Site Scripting author: pikpikcu severity:...

mTheme Unus < 2.3 - Directory Traversal

The mTheme-Unus theme for WordPress, prior to version 2.3, contained a directory traversal flaw that let attackers access arbitrary files. This was possible by exploiting the files parameter in css/css.php with .. sequences. id: CVE-2015-9406 info: name: mTheme Unus 2.3 - Directory Traversal...

Nokri – Job Board WordPress Theme <= 1.6.2 - Unauthenticated Arbitrary Password Change

The Nokri – Job Board WordPress Theme theme for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.6.2. This is due to the plugin not properly checking for an empty token value prior updating their details like password. This makes it...

CVE-2026-78477 Jawn <= 1.4.2 - Unauthenticated Privilege Escalation

The Jawn theme for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.4.2. This makes it possible for unauthenticated attackers to elevate their privileges to that of an administrator...

CVE-2026-78477

The Jawn theme for WordPress is vulnerable to unauthenticated privilege escalation in all versions up to and including 1.4.2 , allowing an attacker to gain administrator-level access . The CVSS 3.1 base score is 9.8 (Critical) , reflecting network-accessible, low-complexity exploitation with no r...

EUVD-2026-65303

The Mane theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.7. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypas...

CVE-2024-3867

CVE-2024-3867 Este repositório mostra algumas informações sobre esta vulnerabilidade, que foram encontradas por mim. Aqui está a descrição oficial fornecida: O tema archive-tainacan-collection para WordPress é vulnerável a Cross-Site Scripting Refletido devido ao uso de addqueryarg sem a devida...

CVE-2026-1729-PoC-AdForest-WordPress-Authentication-Bypass

CVE-2026-1729 - Preuve de concept de contournement d'authentification AdForest WordPress Description Preuve de concept simple pour CVE-2026-1729 PoC - Vulnérabilité de contournement d'authentification dans le thème WordPress AdForest. Réalisé par f3ds cr3w est 2oo2 blog Fonctionnalités ✅ Accès...