CVE-2022-21661

CVE-2022-21661 CVE-2022-21661 docker and poc functions.php는 원본 이미지의 functions.php를 교체해야 하며, docker-compose.yml에서 직접 마운트하십시오. poc root@kitploit: POST /wp-admin/admin-ajax.php HTTP/1.1 Host: your-ip:8080 User-Agent: Mozilla/5.0 Windows NT 10.0; Win64; x64; rv:132.0 Gecko/20100101 Firefox/132.0...

lab-cve-2025-3515

CVE-2025-3515 WordPress ラボ Drag and Drop Multiple File Upload for Contact Form 7 脆弱なWordPress環境を立ち上げて、CVE-2025-3515（プラグイン drag-and-drop-multiple-file-upload-contact-form-7 ≤ 1.3.8.9 の ddmuuploadfile を介した無制限のファイルアップロード）を再現・検証します。このラボはDocker化されており、Nucleiを使った迅速で確定的なテストが可能です。 脆弱なプラグイン:...

CVE-2025-4601

CVE-2025-4601 - WordPress RealHomes 테마 = 4.4.0 - 권한 상승 🔥 취약점 요약 WordPress 테마 RealHomes 버전 4.4.0 이하는 권한 상승 취약점 에 영향을 받습니다. 이로 인해 인증된 낮은 권한의 사용자예: 구독자가 관리자로 역할을 상승시킬 수 있습니다. 이 취약점은 inspiryupdateprofile 함수에서 발생하며, ereallowuserschangerole 옵션이 활성화된 경우 사용자가 자신의 역할을 변경할 수 있게 합니다. 이 문제는 admin-ajax.php...

CVE-2024-0399

CVE-2024-0399 - WooCommerce Customers Manager 29.4 - 认证后SQL注入 漏洞名称： WooCommerce Customers Manager 29.4 - 认证后SQL注入 日期： 2024-03-25 漏洞作者： Ivan Spiridonov - xbz0n 软件链接： https://codecanyon.net/item/woocommerce-customers-manager/10965432 版本： 29.4 测试环境： Ubuntu 22.04 CVE编号： CVE-2024-0399 SQL注入...

CVE-2026-12853

The Flamingo plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.6.2. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with contributor-level access a...

Wordpress-cve-CVE-2022-21661

Wordpress 5.8.2 CVE-2022-21661 취약 환경 이 환경은 Elementor Custom Skin 플러그인을 사용하여 CVE-2022-21661을 테스트하도록 설정되었습니다. 환경을 시작하려면 console wp-lab$ ./start.sh 관리자 비밀번호를 얻으려면 실행 중인 컨테이너의 로그를 확인하세요. 컨테이너가 부팅될 때마다 새 비밀번호가 생성됩니다. console $wp-lab$ docker logs test user admin pwd: inpJbxn+mhWWNSgEAlsU2A== localip:...

EUVD-2026-72365

The Flamingo plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.6.2. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with contributor-level access a...

PT-2026-86751

The Flamingo plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.6.2. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with contributor-level access a...

CVE-2026-19598-

CVE-2026-19598 — Pods WordPress 플러그인 인증 없이 권한 상승 -red.svg 치명적인 인증 없이 권한 상승 CVSS 9.8 — WordPress Pods 플러그인 ≤ 3.3.9 이 도구는 WordPress Pods 플러그인의 취약점인 CVE-2026-19598 을 악용하며, 인증되지 않은 공격자 가 admin-ajax.php 엔드포인트를 통해 새로운 관리자 계정을 생성하거나 기존 사용자 비밀번호를 덮어쓸 수 있게 합니다. ⚠️ 취약점 개요 속성| 값 ---|--- CVE ID| CVE-2026-1959...

WordPress Ninja Forms - Save Progress plugin <= 3.0.30 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Data Deletion via admin-ajax.php with admin_init Hook vulnerability

WordPress Ninja Forms - Save Progress plugin = 3.0.30 - Missing Authorization to Authenticated Subscriber+ Arbitrary Data Deletion via admin-ajax.php with admininit Hook vulnerability discovered by Hermione in WordPress Plugin Ninja Forms - Save Progress versions = 3.0.30...

CVE-2026-82607 Cozmoslabs Profile Builder Plugin Avatar Simple Upload AJAX admin-ajax.php wppb_ajax_simple_avatar unrestricted upload

A vulnerability was found in Cozmoslabs Profile Builder Plugin up to 3.16.1 on WordPress. The impacted element is the function wppbajaxsimpleavatar of the file /wp-admin/admin-ajax.php of the component Avatar Simple Upload AJAX Handler. Performing a manipulation results in unrestricted upload. Th...

PT-2026-79039

A weakness has been identified in SourceCodester Simple Online Food Ordering System 1.0. The affected element is an unknown function of the file /admin/ajax.php?action=save category. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The...

CVE-2026-76049

A vulnerability has been found in SourceCodester Simple Online Food Ordering System 1.0. This affects an unknown function of the file /admin/ajax.php?action=savemenu. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

CVE-2026-16145 Invisible Anti-Spam & CAPTCHA <= 5.1 - Unauthenticated Stored Cross-Site Scripting via 'action' Parameter

The Invisible Anti-Spam & CAPTCHA — reCAPTCHA Alternative for All Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'action' parameter in all versions up to, and including, 5.1 due to insufficient input sanitization and output escaping. This makes it possible for...

CVE-2026-72578

CVE-2026-72578 concerns FreePBX Framework 17.0. The vulnerability is a CSRF weakness in the /admin/ajax.php dispatcher (amp_conf/htdocs/admin/libraries/BMO/Ajax.class.php) where no CSRF tokens are implemented; protection relies solely on a Referer header, which can be bypassed when no Referer hea...

EUVD-2026-54983

A weakness has been identified in SourceCodester Simple Doctors Appointment System 1.0. The affected element is an unknown function of the file /admin/ajax.php?action=setappointment. This manipulation of the argument ID causes sql injection. The attack may be initiated remotely. The exploit has...

PT-2026-69328

Name of the Vulnerable Software and Affected Versions SourceCodester Simple Doctors Appointment System version 1.0 Description A SQL injection flaw exists that allows remote attackers to manipulate the ID argument. This issue occurs within an unknown function in the '/admin/ajax.php?action=set...

CVE-2026-19231 SourceCodester Simple Doctors Appointment System ajax.php delete_appointment sql injection

A security flaw has been discovered in SourceCodester Simple Doctors Appointment System 1.0. This vulnerability affects unknown code of the file /admin/ajax.php?action=deleteappointment. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit...

CVE-2026-18322

Technical details about CVE-2026-18322 are not publicly available in the provided documents. Monitor for updates.

CVE-2026-70552

MaxSite CMS 109.5 and earlier contains an authentication bypass vulnerability in the AJAX dispatcher that allows unauthenticated attackers to access admin-gated endpoints by supplying any X-Requested-With header and requesting a base64-encoded path resolving to any -ajax.php file in the codebase...