Lucene search
+L

9356 matches found

Kitploit
Kitploit
•added 2026/10/10 1:46 p.m.•48 views

ff-password-exporter

FF Password Exporter It can be difficult to export your passwords from Firefox. Since version 57 of Firefox Quantum existing password export addons no longer work. Mozilla provides no other official alternatives. FF Password Exporter makes it quick and easy to export all of your passwords from...

6.1AI score
SaveExploits0References5
Kitploit
Kitploit
•added 2026/10/10 1:41 p.m.•24 views

CVE-2025-1639

🔓 Эксплойт-скрипт для CVE-2025-1639 📝 Описание Плагин Animation Addons for Elementor Pro для WordPress уязвим к несанкционированной установке произвольных плагинов из-за отсутствия проверки прав доступа в функции installelementorpluginhandler во всех версиях до 1.6 включительно. Это позволяет...

8.8CVSS8.4AI score0.0105EPSS
SaveExploits2
Kitploit
Kitploit
•added 2026/10/10 10:57 a.m.•19 views

CVE-2025-6220

Ultimate Addons для Contact Form 7 1: lo: mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000 link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo validlft forever preferredlft forever inet6 ::1/128 scope host validlft forever preferredlft forever 2: eth0...

7.2CVSS6.2AI score0.01094EPSS
SaveExploits2References1
Kitploit
Kitploit
•added 2026/10/10 9:55 a.m.•16 views

CVE-2023-5360-exploit-with-native-libraries

Royal Elementor Addons ≤ 1.3.78 – 인증되지 않은 임의 파일 업로드 RCE 📌 개요 이 저장소는 WordPress 플러그인 Royal Elementor Addons and Templates 버전 ≤ 1.3.78용 수정된 PoCProof-of-Concept 익스플로잇 을 포함합니다. 이 취약점은 인증되지 않은 임의 파일 업로드 를 허용하며, 이를 악용하여 PHP 파일을 업로드하고 원격 코드 실행RCE을 달성할 수 있습니다. CVE : CVE-2023-5360 취약점 유형 : 인증되지 않은 파일 업로드 →...

9.8CVSS8.5AI score0.81695EPSS
SaveExploits18References2
Kitploit
Kitploit
•added 2026/10/10 9:31 a.m.•26 views

ExtAnalysis

Возможности • Установка • Использование • Используемые модули • Скриншоты • Лицензия С помощью ExtAnalysis вы можете : Загружать и анализировать расширения из: Chrome Web Store Firefox Addons Анализировать установленные расширения: Google Chrome Mozilla Firefox Opera Browser Скоро Загружать и...

6.1AI score
SaveExploits0References5
Cvelist
Cvelist
•added 2026/10/10 6:40 a.m.•9 views

CVE-2026-104801 PPOM <= 34.0.10 - Unauthenticated Arbitrary File Deletion via 'ppom[fields][<data_name>][n][org]' Parameter

The PPOM – Product Addons & Custom Fields for WooCommerce plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the renamefiles function in all versions up to, and including, 34.0.10 This makes it possible for unauthenticated attackers to delete...

9.1CVSS0.00755EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/10/10 6:40 a.m.•5 views

EUVD-2026-96218

The PPOM – Product Addons & Custom Fields for WooCommerce plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the renamefiles function in all versions up to, and including, 34.0.10 This makes it possible for unauthenticated attackers to delete...

9.1CVSS6.2AI score0.00755EPSS
SaveExploits0References6
CVE
CVE
•added 2026/10/10 6:40 a.m.•15 views

CVE-2026-104801

The PPOM – Product Addons & Custom Fields for WooCommerce plugin for WordPress is vulnerable to unauthenticated arbitrary file deletion in all versions up to and including 34.0.10 . The root cause is insufficient file path validation within the rename_files function, specifically triggered via th...

9.1CVSS6.2AI score0.00755EPSS
SaveExploits0References6
Kitploit
Kitploit
•added 2026/10/10 5:36 a.m.•17 views

WebHackersWeapons

Коллекция отличных инструментов, используемых веб-хакерами. Удачного хакинга , удачного поиска багов! Семейство проектов Содержание Оружие Инструменты Букмарклеты Расширения браузера Плагины для Burpsuite, Caido и ZAP Участие Благодарности участникам Оружие Атрибуты | Атрибуты ---|--- Типы|...

5.8AI score
SaveExploits0References70
Kitploit
Kitploit
•added 2026/10/10 4:13 a.m.•21 views

CVE-2023-47840

CVE-2023-47840 Qode Essential Addons = 1.5.2 - Отсутствие авторизации, позволяющее аутентифицированным пользователям Подписчик+ произвольно устанавливать/активировать плагины Описание: Плагин Qode Essential Addons для WordPress уязвим к несанкционированной модификации данных из-за отсутствия...

9.9CVSS8.4AI score0.01408EPSS
SaveExploits1
Kitploit
Kitploit
•added 2026/10/10 3:20 a.m.•22 views

CVE-2023-5360

CVE-2023-5360 Elementor 파일 업로드 익스플로잇 Royal Elementor Addons and Templates WordPress 플러그인 1.3.79 이전 버전은 업로드된 파일을 적절히 검증하지 않아, 인증되지 않은 사용자가 PHP와 같은 임의의 파일을 업로드하여 RCE를 달성할 수 있습니다. / / | / / / / / | | / / / / / | |/ /// / |// | \ / \ | / / // / / // / / 예시: python3 CVE-2023-5360.py...

9.8CVSS8.5AI score0.81695EPSS
SaveExploits18
Nuclei
Nuclei
•added 2026/10/10 2:13 a.m.•161 views

WordPress Elementor Lite 5.7.1 - Arbitrary Password Reset

Improper Authentication vulnerability in WPDeveloper Essential Addons for Elementor allows Privilege Escalation. This issue affects Essential Addons for Elementor: from 5.4.0 through 5.7.1. id: CVE-2023-32243 info: name: WordPress Elementor Lite 5.7.1 - Arbitrary Password Reset author:...

9.8CVSS8.3AI score0.75531EPSS
SaveExploits8References5
Nuclei
Nuclei
•added 2026/10/10 2:13 a.m.•86 views

Plus Addons for Elementor Page Builder < 4.1.10 - Open Redirect

WordPress Plus Addons for Elementor Page Builder before 4.1.10 did not validate a redirect parameter on a specifically crafted URL before redirecting the user to it, leading to an open redirect issue. id: CVE-2021-24358 info: name: Plus Addons for Elementor Page Builder 4.1.10 - Open Redirect...

6.1CVSS6.1AI score0.02295EPSS
SaveExploits2References4
Nuclei
Nuclei
•added 2026/10/10 2:13 a.m.•83 views

The Plus Addons for Elementor Page Builder < 4.1.7 - Authentication Bypass

The Plus Addons for Elementor plugin before version 4.1.7 allowed attackers to bypass authentication, gain admin access, and create accounts with elevated roles, even when registration was disabled and the Login widget was inactive. id: CVE-2021-24175 info: name: The Plus Addons for Elementor Pag...

9.8CVSS8AI score0.14462EPSS
SaveExploits3References2
Nuclei
Nuclei
•added 2026/10/10 2:13 a.m.•81 views

WordPress The Plus Addons for Elementor <4.1.12 - Cross-Site Scripting

WordPress The Plus Addons for Elementor plugin before 4.1.12 is susceptible to cross-site scripting. The plugin does not properly sanitize some of its fields in the heplusmorepost AJAX action, which is exploitable by both unauthenticated and authenticated users. An attacker can inject arbitrary...

6.1CVSS5.9AI score0.02483EPSS
SaveExploits2References5
Nuclei
Nuclei
•added 2026/10/10 2:13 a.m.•39 views

ShortCode Addons - Unauthenticated Options Update

WordPress plugin Shortcode Addons = 3.0.2 contains an unauthenticated arbitrary option update caused by insufficient access controls in the plugin, letting attackers modify options without authentication. id: CVE-2022-34487 info: name: ShortCode Addons - Unauthenticated Options Update author:...

9.8CVSS6.2AI score0.03345EPSS
SaveExploits0References3
Nuclei
Nuclei
•added 2026/10/10 2:13 a.m.•53 views

Premium Addons for Elementor - Unauthenticated Information Disclosure

Premium Addons for Elementor plugin for WordPress version 4.11.53 and below contains an unauthenticated information disclosure vulnerability.The vulnerability exists due to a missing authorization check in the gettemplatecontent AJAX handler, allowing unauthenticated attackers to retrieve private...

5.3CVSS5.9AI score0.00764EPSS
SaveExploits0References4
Kitploit
Kitploit
•added 2026/10/10 12:57 a.m.•18 views

EVCer

EVCer | CVE-2023-0159 - Extensive VC Addons для WPBakery page builder Автоматический массовый инструмент для проверки уязвимости CVE-2023-0159 - Extensive VC Addons для WPBakery page builder install.sh sha1sum install.sh | grep 12345678 md5sum install.sh sha512sum install.sh bash install.sh Как...

7.5CVSS7.4AI score0.55459EPSS
SaveExploits3References1
Kitploit
Kitploit
•added 2026/10/10 12:41 a.m.•19 views

essential-addons-for-elementor-xss-poc

🔍 Детектор XSS-уязвимости Essential Addons for Elementor 🚨 Важная информация Этот инструмент предназначен только для исследований безопасности и целей исправления. Не используйте его для вреда сайтам. Если вы находите уязвимые сайты, сообщите об этом ответственно владельцам сайтов, чтобы они могл...

7.1CVSS8.7AI score0.01212EPSS
SaveExploits2References1
Patchstack
Patchstack
•added 2026/10/09 6:27 p.m.•5 views

WordPress PPOM – Product Addons & Custom Fields for WooCommerce plugin <= 34.0.10 - Unauthenticated Arbitrary File Deletion vulnerability

Unauthenticated Arbitrary File Deletion vulnerability discovered by whatm in WordPress Plugin PPOM for WooCommerce versions = 34.0.10...

9.1CVSS5.8AI score0.00755EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder