CVE-2020-36708

CVE-2020-36708 – Preuve de concept d'injection de fonctions dans le framework Epsilon pour WordPress Aperçu CVE-2020-36708 est une vulnérabilité dans le framework Epsilon pour WordPress qui permet à des attaquants non authentifiés d'invoquer des méthodes de classes PHP arbitraires via l'action AJ...

CVE-2026-16281

The Classified Listing WordPress plugin before 6.1.1 suffers from an IDOR (Insecure Direct Object Reference) in its AI image-editing AJAX action. The plugin fails to verify that the caller owns or can edit the target listing before performing media operations, allowing any authenticated user—incl...

CVE-2024-12849-Poc

CVE-2024-12849-Poc 📜 Description Le plugin Error Log Viewer By WP Guru pour WordPress est vulnérable à une lecture arbitraire de fichier dans toutes les versions jusqu'à la version 1.0.1.3 incluse, via l'action AJAX wpajaxnoprivelvwplogdownload. Cela permet à des attaquants non authentifiés de li...

js-jobs

js-jobs JS Job Manager 1.1.9 - Installation/Activation arbitraire de plugin sans authentification Description L'action AJAX jsjobsajax du plugin, disponible pour les utilisateurs authentifiés comme non authentifiés, ne dispose pas de contrôles d'autorisation et de vérifications CSRF appropriés, e...

CVE-2024-12594

CVE-2024-12594 ALL In One Custom Login Page input type="hidden" name="nonce"...

CVE-2024-12849

CVE-2024-12849 Error Log Viewer By WP Guru = 1.0.1.3 - Autorisation manquante permettant une lecture arbitraire de fichiers sans authentification Description Le plugin Error Log Viewer By WP Guru pour WordPress est vulnérable à une lecture arbitraire de fichiers dans toutes les versions jusqu'à...

ARMember < 3.4.8 - Unauthenticated Admin Account Takeover

The ARMember WordPress plugin before 3.4.8 is vulnerable to account takeover even the administrator due to missing nonce and authorization checks in an AJAX action available to unauthenticated users, allowing them to change the password of arbitrary users by knowing their username. id:...

Youzify < 1.2.0 - Unauthenticated SQLi

The Youzify WordPress plugin before 1.2.0 does not sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to an unauthenticated SQL injection id: CVE-2022-1950 info: name: Youzify 1.2.0 - Unauthenticated SQLi author:...

Web Directory Free < 1.7.0 - SQL Injection

The plugin does not sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection with different techniques like UNION, Time-Based and Error-Based. id: CVE-2024-3552 info: name: Web Directory Free 1.7.0 - SQL...

WordPress WOOCS < 1.3.7.5 - Cross-Site Scripting

WordPress WOOCS plugin before 1.3.7.5 is susceptible to cross-site scripting. The plugin does not sanitize and escape the woocsinordercurrency parameter of the woocsgetproductspricehtml AJAX action, available to both unauthenticated and authenticated users, before outputting it back in the...

WordPress KiviCare <2.3.9 - SQL Injection

WordPress KiviCare plugin before 2.3.9 contains a SQL injection vulnerability. The plugin does not sanitize and escape some parameters before using them in SQL statements via the ajaxpost AJAX action with the getdoctordetails route. An attacker can possibly obtain sensitive information, modify...

WP Maps Pro (wp-google-map-gold) <= 6.1.0 - Unauthenticated Administrator Account Creation

The WP Maps Pro plugin for WordPress is vulnerable to Privilege Escalation via Administrator Account Creation in all versions up to, and including, 6.1.0. This is due to the wpgmptempaccessajax AJAX action being registered with wpajaxnopriv and protected only by a nonce check using the...

CVE-2021-24499

CVE-2021-24499 | Workreap - Freelance Marketplace and Directory WordPress Theme 2.2.2 - Téléchargement arbitraire de fichier Thème WordPress Workreap 2.2.2 - Téléchargement de fichier non authentifié menant à une exécution de code à distance Un outil d'exploitation massive puissant et précis pour...

CVE-2025-14364

CVE-2025-14364 Demo Importer Plus Аутентифицированный подписчик → Администратор через AJAX-действиеdo-reinstall 〔 1 〕 Уязвимость Основная причина: Ajax::handlerequest регистрирует AJAX-действие demoimporterplus без вызова currentusercan. Любой аутентифицированный подписчик может отправить...

CVE-2025-15489

The Passster WordPress plugin before 4.2.24 does not handle input properly in an AJAX action, allowing unauthenticated users to retrieve the value of password protected content...

EUVD-2025-210831

The Passster WordPress plugin before 4.2.24 does not handle input properly in an AJAX action, allowing unauthenticated users to retrieve the value of password protected content...

CVE-2025-15489 Passster < 4.2.24 - Password Protection Bypass

The Passster WordPress plugin before 4.2.24 does not handle input properly in an AJAX action, allowing unauthenticated users to retrieve the value of password protected content...

CVE-2025-15489

The Passster WordPress plugin before version 4.2.24 contains an improper input handling flaw in an AJAX action , allowing unauthenticated users to retrieve the value of password-protected content. This constitutes a password protection bypass , with a CVSS 3.1 score of 5.3 (Medium) reflecting net...

CVE-2024-9061

CVE-2024-9061 WP Popup Builder – Popup Forms and Marketing Lead Generation = 1.3.5 - تنفيذ Shortcode تعسفي بدون مصادقة عبر wpajaxnoprivshortcodeApiAdd الوصف تعد إضافة WP Popup Builder – Popup Forms and Marketing Lead Generation لمنصة ووردبريس عرضة لتنفيذ shortcode تعسفي عبر إجراء AJAX...

CVE-2023-6985

CVE-2023-6985 10Web AI Assistant – Assistant de rédaction de contenu AI = 1.0.18 - Absence d'autorisation permettant l'installation/activation arbitraire de plugin pour utilisateurs authentifiés Abonné+ Description Le plugin 10Web AI Assistant – Assistant de rédaction de contenu AI pour WordPress...