WebHackersWeapons

Web黑客使用的优秀工具集合。快乐黑客，快乐挖洞！ 家族项目 目录 武器 工具 书签小工具 浏览器扩展 Burpsuite、Caido和ZAP插件 贡献 感谢贡献者 武器 属性 Read more...

cve-2026-7665

CVE-2026-7665 — Unauthenticated Information Disclosure in Essential Addons for Elementor...

ExtAnalysis

功能 • 安装 • 使用 • 使用的模块 • 截图 • 许可证 使用ExtAnalysis，您可以： 从以下位置下载并分析扩展： Chrome网上应用店 Firefox附加组件 分析已安装扩展： Google Chrome Mozilla Firefox Opera浏览器（即将推出） 上传并扫描扩展。支持的格式： .crx .xpi .zip ExtAnalysis的功能： 查看基本信息： 名称、作者、描述和版本 Manifest查看器 详细的权限信息 从文件中提取情报，包括： URL和域名 IPv6和IPv4地址 比特币地址 电子邮件地址 文件注释 Base64编码字符串...

ShortCode Addons - Unauthenticated Options Update

WordPress plugin Shortcode Addons = 3.0.2 contains an unauthenticated arbitrary option update caused by insufficient access controls in the plugin, letting attackers modify options without authentication. id: CVE-2022-34487 info: name: ShortCode Addons - Unauthenticated Options Update author:...

WordPress The Plus Addons for Elementor <4.1.12 - Cross-Site Scripting

WordPress The Plus Addons for Elementor plugin before 4.1.12 is susceptible to cross-site scripting. The plugin does not properly sanitize some of its fields in the heplusmorepost AJAX action, which is exploitable by both unauthenticated and authenticated users. An attacker can inject arbitrary...

WordPress Elementor Lite 5.7.1 - Arbitrary Password Reset

Improper Authentication vulnerability in WPDeveloper Essential Addons for Elementor allows Privilege Escalation. This issue affects Essential Addons for Elementor: from 5.4.0 through 5.7.1. id: CVE-2023-32243 info: name: WordPress Elementor Lite 5.7.1 - Arbitrary Password Reset author:...

Premium Addons for Elementor - Unauthenticated Information Disclosure

Premium Addons for Elementor plugin for WordPress version 4.11.53 and below contains an unauthenticated information disclosure vulnerability.The vulnerability exists due to a missing authorization check in the gettemplatecontent AJAX handler, allowing unauthenticated attackers to retrieve private...

The Plus Addons for Elementor Page Builder < 4.1.7 - Authentication Bypass

The Plus Addons for Elementor plugin before version 4.1.7 allowed attackers to bypass authentication, gain admin access, and create accounts with elevated roles, even when registration was disabled and the Login widget was inactive. id: CVE-2021-24175 info: name: The Plus Addons for Elementor Pag...

Plus Addons for Elementor Page Builder < 4.1.10 - Open Redirect

WordPress Plus Addons for Elementor Page Builder before 4.1.10 did not validate a redirect parameter on a specifically crafted URL before redirecting the user to it, leading to an open redirect issue. id: CVE-2021-24358 info: name: Plus Addons for Elementor Page Builder 4.1.10 - Open Redirect...

CVE-2023-32243

CVE-2023-32243 Essential Addons for Elementor - 未授权账户接管。 PoC 现已发布。 此内容仅用于教育/研究目的！使用风险自负！...

CVE-2024-31114

CVE-2024-31114 - Exploit RCE de Shortcode Addons de WordPress Shortcode Addons = 3.2.5 – Subida arbitraria de archivos autenticada Admin+ CVE ID: CVE-2024-31114 Puntuación CVSS: 9.1 Crítica 🛠️ Descripción de la vulnerabilidad El complemento Shortcode Addons – con Visual Composer, Divi, Beaver...

CVE-2025-6220

Ultimate Addons para Contact Form 7 1: lo: mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000 link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo validlft forever preferredlft forever inet6 ::1/128 scope host validlft forever preferredlft forever 2: eth...

CVE-2025-1639

🔓 Exploit Script for CVE-2025-1639 📝 Description The Animation Addons for Elementor Pro plugin for WordPress is vulnerable to unauthorized arbitrary plugin installation due to a missing capability check on the installelementorpluginhandler function in all versions up to, and including, 1.6. This...

ff-password-exporter

FF Password Exporter It can be difficult to export your passwords from Firefox. Since version 57 of Firefox Quantum existing password export addons no longer work. Mozilla provides no other official alternatives. FF Password Exporter makes it quick and easy to export all of your passwords from...

CVE-2023-5360

CVE-2023-5360 Exploit de Subida de Archivos en Elementor El plugin de WordPress Royal Elementor Addons and Templates anterior a la versión 1.3.79 no valida correctamente los archivos subidos, lo que podría permitir a usuarios no autenticados subir archivos arbitrarios, como PHP, y lograr RCE...

essential-addons-for-elementor-xss-poc

🔍 Elementor Essential Addons XSS漏洞检测器 🚨 关键信息 此工具仅用于安全研究和修补目的。请勿用于破坏网站。如果您发现存在漏洞的网站，请负责任地向网站所有者报告，以便他们立即更新。 ⚠️ 漏洞详情 Elementor的Essential Addons插件中存在一个反射型XSS漏洞，影响超过10万个使用6.0.15以下版本的网站。该漏洞已被分配编号 CVE-2025-24752 。 👉 手动POC root@kitploit: https://target.com/?popup-selector=&eael-lostpassword=1 🖼️ 截图 🔧 环境要求...

EVCer

EVCer | CVE-2023-0159 - 用于WPBakery页面构建器的Extensive VC附加组件 自动批量检测CVE-2023-0159漏洞的工具 - 适用于WPBakery页面构建器 install.sh sha1sum install.sh | grep 12345678 md5sum install.sh sha512sum install.sh bash install.sh 使用方法 bash evcer.sh yourlist.txt thread 参考 https://vulners.com/cve/CVE-2023-0159...

CVE-2023-5360-exploit-with-native-libraries

Royal Elementor Addons ≤ 1.3.78 – 未经授权的任意文件上传 RCE 📌 概述 该仓库包含针对 WordPress 插件 Royal Elementor Addons and Templates （版本 ≤ 1.3.78 ）的 修改版概念验证漏洞利用 。 该漏洞允许 未经授权的任意文件上传 ，可被滥用以上传 PHP 文件并实现 远程代码执行 RCE 。 CVE : CVE-2023-5360 漏洞类型 : 未经授权的文件上传 → RCE 受影响插件 : Royal Elementor Addons and Templates 修复版本 : 1.3.79+ 🔧...

CVE-2026-1984

The Ibtana – Ecommerce Product Addons plugin for WordPress is vulnerable to unauthorized post meta modification due to a missing capability check on the 'iepausegteditor' AJAX action in all versions up to, and including, 0.4.7.7. This makes it possible for authenticated attackers, with...

CVE-2026-1641

The Wow Elements Addons for Elementor plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.11.2. This is due to the plugin passing user-controlled input from the 'Changelog File' setting directly to the wpremoteget function without adequate...