CVE-2026-87902

CVE-2026-87902 - WordPress Core Unauthenticated LFI → RCE Validation Lab Security-research material for reproducing and validating CVE-2026-87902 GHSA-7hp8-65ch-5whp in an isolated, loopback-only Docker lab: an unauthenticated local file inclusion in WordPress core page-template resolution,...

CVE-2026-87902-A-working-PoC-for-WordPress-s-critical-path-traversal

🚨 CVE-2026-87902: WordPress Core Unauthenticated Path Traversal & RCE Mitigation 🔴 Watch the Full Breakdown & Mitigation Tutorial: 👉 Click Here to Watch on YouTube 📖 Overview This repository provides emergency reference notes, web server mitigation rules, and hardening configs covered in our...

WPCracker

WPCracker WordPress user enumeration and login Brute Force tool for Windows and Linux With the Brute Force tool, you can control how aggressive an attack you want to perform, and this affects the attack time required. The tool makes it possible to adjust the number of threads as well as how large...

CVE-2026-5118

⚡ CVE-2026-5118 Divi Form Builder — Unauthenticated Privilege Escalation "Security Research" • "Defensive Detection" • "Vulnerability Research" --- 🔥 Overview CVE-2026-5118 is an unauthenticated privilege-escalation vulnerability affecting Divi Form Builder versions up to 5.1.2. The issue involve...

CVE-2026-18322

CVE-2026-18322 — Smart Popup by Supsystic Privilege Escalation Security research on CVE-2026-18322 , an unauthenticated privilege-escalation vulnerability in the WordPress plugin Smart Popup by Supsystic popup-by-supsystic. This repository contains a root-cause analysis derived from the upstream...

CVE-2026-93485

⚡ CVE-2026-93485 - Comment2Shell 🧬 Overview CVE-2026-93485 is a high-severity cross-site scripting vulnerability affecting the WordPress core. The vulnerability is described as improper neutralization of user-controlled input during web-page generation, resulting in DOM-based XSS / stored XSS...

CVE-2026-94263 Advanced Custom Fields: Extended 0.9.2.4 - 0.9.2.7 - Unauthenticated Arbitrary Shortcode Execution via Form Success Message

The Advanced Custom Fields: Extended and Advanced Custom Fields: Extended PRO WordPress plugins from 0.9.2.4 to 0.9.2.7 do not consistently disable shortcode processing in the confirmation message of their front-end forms, allowing unauthenticated visitors to have arbitrary shortcodes executed...

EUVD-2026-108668

The Advanced Custom Fields: Extended and Advanced Custom Fields: Extended PRO WordPress plugins from 0.9.2.4 to 0.9.2.7 do not consistently disable shortcode processing in the confirmation message of their front-end forms, allowing unauthenticated visitors to have arbitrary shortcodes executed...

CVE-2026-94263

The Advanced Custom Fields: Extended and Advanced Custom Fields: Extended PRO WordPress plugins (versions 0.9.2.4 through 0.9.2.7 ) are vulnerable to unauthenticated arbitrary shortcode execution . The root cause is the inconsistent failure to disable shortcode processing within the confirmation ...

CVE-2026-111965 Profile Builder 4.0.0 - 4.0.4 - Subscriber+ Comment reCAPTCHA Bypass

The Profile Builder WordPress plugin from 4.0.0 to 4.0.4 does not enforce its reCAPTCHA verification on all comment submission paths, allowing authenticated users to bypass the anti-spam protection an administrator configured for the WordPress comment form...

EUVD-2026-108667

The Profile Builder WordPress plugin from 4.0.0 to 4.0.4 does not enforce its reCAPTCHA verification on all comment submission paths, allowing authenticated users to bypass the anti-spam protection an administrator configured for the WordPress comment form...

CVE-2026-111965

The Profile Builder WordPress plugin, versions 4.0.0 through 4.0.4 , contains a vulnerability where reCAPTCHA verification is not enforced on all comment submission paths. This flaw allows authenticated users to bypass the anti-spam protections configured by an administrator for the WordPress com...

wp2shell-scanner

wp2shell-scanner Detection and validation tooling for WordPress core exposure to wp2shell CVE-2026-63030 / CVE-2026-60137. Modes are selected with a flag, and the target is positional. --scan fingerprints the core version and confirms the REST /batch/v1 route is reachable without sending an explo...

CVE-2026-19658

CVE-2026-19658 — Give Tributes Unauthenticated PHP Object Injection Python 3 proof-of-concept scanner and donation-chain exploit helper for CVE-2026-19658 in the WordPress add-on Give - Tributes Liquid Web / GiveWP. | ---|--- Platform| WordPress plugin requires GiveWP core Component| Give -...

CVE-2021-43408

CVE-2021-43408: WordPress Plugin Duplicate Post version 1.1.9 - SQL Injection I. Overview 1. What is WordPress WordPress is an open-source CMS Content Management System software, a content management system. Instead of using HTML encoding language, WP is written in the PHP programming language...

xss2shell-poc

XSS2Shell: WordPress Preauth XSS to RCE Chain CVE-2026-64638 CVE-2026-64638: XSS2Shell Proof-of-Concept — Whitebox Pentesting...

CVE-2024-10924

POC for CVE-2024-10924 An error handling flaw in the REST API of the Really Simple Plugins WordPress plugin versions between 9.0.0 and 9.1.1.1 included allows an attacker, when Two-Factor Authentication is enabled, to bypass authentication and take control of an existing user or administrator...

test-task-CVE-2024-25600

test-task-CVE-2024-25600 Repository for internship test-task. Step 0: Clone this git repo git clone https://github.com/Sibul-Dan-Glokta/test-task-CVE-2024-25600 Step 1: Create docker containers Start Docker daemon sudo systemctl start docker.service Start Docker Containers To start the docker...

CVE-2026-93528

📌 CVE-2026-93528: Unauthenticated Order Data Disclosure in NP Quote Request for WooCommerce • Vulnerability Type: Sensitive Data Disclosure CWE-200 • Affected Software: woo-rfq-for-woocommerce 2.4.16 • Original Researcher: Murad Islamzada • Vendor: Neah Plugins Cyrus 1. Overview & Root Cause The...

CVE-2025-47550

Instantio - Wordpress Plugin 1: lo: mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000 link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo validlft forever preferredlft forever inet6 ::1/128 scope host validlft forever preferredlft forever 2: eth0: mtu...