404 matches found
CVE-2022-47447
CVE-2022-47447 POC CSRF - CVE-2022-47447 ⚠️ 仅限教育用途和授权环境使用。 针对CVE-2022-47447漏洞的功能性PoC，该漏洞影响一个易受攻击的WordPress插件，允许对经过身份验证的用户发起跨站请求伪造（CSRF）攻击。 VULNERABLE URL: /wp-admin/admin.php?page=WPAdvancedSearchCallbackStyles...
twitter-advanced-search
🔍 Twitter 高级搜索 这些操作符适用于 网页版、移动版、Tweetdeck。 存在一些重叠，但大部分情况下，这些操作符不适用于 v1.1 搜索、高级搜索 或 v2 搜索 API。 改编自 TweetDeck 帮助、@lucahammer 指南、@eevee Twitter 手册、@pushshift 以及 Twitter/Tweetdeck 本身。欢迎贡献/测试/提供示例！类别| 运算符| 查找推文...| 示例： ---|---|---|--- 推文内容| nasa esa nasa esa| 同时包含 "nasa" 和 "esa"。空格隐含...
CVE-2024-9796
CVE-2024-9796 WordPress WP-Advanced-Search = 5.0.12 基于时间盲注 IF - 注释 载荷: t=wpautosuggest&f=ifnow=sysdate,SLEEP9,0-- wXyW&l=5&type=0&e=utf-8&q=c&limit=5×tamp=13672261755853'...
WordPress WP-Advanced-Search <= 3.3.9 - SQL Injection
The WordPress WP-Advanced-Search plugin for WordPress is vulnerable to SQL Injection in all versions up to, and including, 3.3.9 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated...
CVE-2025-39538
🛡️ CVE-2025-39538 - WordPress WP-Advanced-Search = 3.3.9.3 Arbitrary File Upload CVE-2025-39538 Published: 2025-04-16 Vulnerability Type: Arbitrary File Upload Unrestricted Upload of File with Dangerous Type Affected Plugin: WP-Advanced-Search by Mathieu Chartier Affected Versions: All versions up...
CVE-2024-9796
CVE-2024-9796 WP-Advanced-Search 3.3.9.2 - 未认证SQL注入 描述 PoC SQL注入将转储WordPress用户和哈希。 免责声明： 此脚本仅供教育用途。 请勿用于非法目的。 如果使用，完全由您负责；我不对任何滥用负责。 关于该漏洞的更多信息 https://wpscan.com/vulnerability/2ddd6839-6bcb-4bb8-97e0-1516b8c2b99b/ 用法： root@kitploit: 成功尝试 python3 poc.py -i 127.0.0.1 ! 127.0.0.1 has been PWNed!...
CVE-2024-9796
CVE-2024-9796 POC SQLi - CVE-2024-9796 PoC funzionale per la vulnerabilità CVE-2024-9796, che colpisce il plugin WP Advanced Search autocompletion su WordPress, consentendo un'iniezione SQL SQL Injection attraverso parametri GET non sanificati. 📌 Descrizione Questa vulnerabilità consente a un...
EUVD-2026-67564
The ElementsKit Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 's' parameter of the Advanced Search REST endpoint in all versions up to, and including, 4.10.1 due to insufficient input sanitization and output escaping. The REST endpoint at...
CVE-2026-4246 ElementsKit Pro <= 4.10.1 - Unauthenticated Stored Cross-Site Scripting via 's' Parameter
The ElementsKit Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 's' parameter of the Advanced Search REST endpoint in all versions up to, and including, 4.10.1 due to insufficient input sanitization and output escaping. The REST endpoint at...
CVE-2026-13253
The Ultimate Post plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'moreResultsText' block attribute of the ultimate-post/advanced-search block in versions up to and including 5.0.31. This is due to insufficient input sanitization and output escaping in the...
EUVD-2026-42520
The Ultimate Post plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'moreResultsText' block attribute of the ultimate-post/advanced-search block in versions up to and including 5.0.31. This is due to insufficient input sanitization and output escaping in the...
CVE-2026-13253 Post Grid Gutenberg Blocks for News, Magazines, Blog Websites <= 5.0.31 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'moreResultsText' Block Attribute
The Ultimate Post plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'moreResultsText' block attribute of the ultimate-post/advanced-search block in versions up to and including 5.0.31. This is due to insufficient input sanitization and output escaping in the...
CVE-2026-13253
The Ultimate Post plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'moreResultsText' block attribute of the ultimate-post/advanced-search block in versions up to and including 5.0.31. This is due to insufficient input sanitization and output escaping in the...
CVE-2026-50235
Lyrion Music Server 9.2.0 contains a reflected cross-site scripting vulnerability in advanced search parameters that fail to properly sanitize user input before displaying it in search forms. Attackers can inject malicious scripts through unfiltered search parameters to execute arbitrary JavaScri...
CVE-2026-30139
A reflected cross-site scripting XSS vulnerability in the AdvancedSearch functionality of Silverpeas Core before version 6.4.6 allows attackers to execute arbitrary JavaScript in the context of a user's browser via crafted input...
CVE-2026-50235 Lyrion Music Server 9.2.0 Reflected XSS via search Parameters
Lyrion Music Server 9.2.0 contains a reflected cross-site scripting vulnerability in advanced search parameters that fail to properly sanitize user input before displaying it in search forms. Attackers can inject malicious scripts through unfiltered search parameters to execute arbitrary JavaScri...
CVE-2026-50235 Lyrion Music Server 9.2.0 Reflected XSS via search Parameters
Lyrion Music Server 9.2.0 contains a reflected cross-site scripting vulnerability in advanced search parameters that fail to properly sanitize user input before displaying it in search forms. Attackers can inject malicious scripts through unfiltered search parameters to execute arbitrary JavaScri...
CVE-2026-50235
Affected software: Lyrion Music Server 9.2.0. Vulnerability: reflected XSS in advanced search parameters that fail to sanitize user input before displaying it in search forms. Impact: can execute arbitrary JavaScript in users’ browsers and potentially steal session information. Exploitation/Detai...
EUVD-2026-34834
Lyrion Music Server 9.2.0 contains a reflected cross-site scripting vulnerability in advanced search parameters that fail to properly sanitize user input before displaying it in search forms. Attackers can inject malicious scripts through unfiltered search parameters to execute arbitrary JavaScri...
PT-2026-46954
Lyrion Music Server 9.2.0 contains a reflected cross-site scripting vulnerability in advanced search parameters that fail to properly sanitize user input before displaying it in search forms. Attackers can inject malicious scripts through unfiltered search parameters to execute arbitrary JavaScri...