CVE-2021-38314

CVE-2021-38314 脆弱性の概要 WordPress用プラグイン「Gutenberg Template Library & Redux Framework」バージョン4.2.11以下は、redux-core/class-redux-core.php の includes...

CVE-2021-38314

認証不要の機密情報漏洩 CVE-2021-38314 CVE-2021-38314 の Python エクスプロイト 使用法: python3 cve-2021-38314.py http://www.target.com WordPress 用 Gutenberg Template Library & Redux Framework プラグイン = 4.2.11 は、"redux-core/class-redux-core.php" の "includes" 関数内で、認証されていないユーザーが利用可能ないくつかの AJAX...

WCFM Membership <= 2.10.0 - Broken Access Control

The WCFM Membership plugin for WordPress is vulnerable to unauthorized modification and access of data in versions up to, and including, 2.10.0 due to missing capability checks true the AJAX actions: wcfm-memberships, wcfm-memberships-manage, and wcfm-memberships-settings. id: CVE-2022-4940 info:...

Ubigeo de Peru < 3.6.4 - SQL Injection

The plugin does not properly sanitise and escape some parameters before using them in SQL statements via various AJAX actions, some of which are available to unauthenticated users, leading to SQL Injections. id: CVE-2022-0814 info: name: Ubigeo de Peru 3.6.4 - SQL Injection author: r3Y3r53...

CVE-2022-1329

CVE-2022-1329 WordPress用Elementor Website Builderプラグインのバージョン3.6.0から3.6.2には、/core/app/modules/onboarding/module.phpファイルにおける権限チェックの欠如により、複数のAJAXアクションが不正に実行される脆弱性があります。この欠如により、攻撃者はリモートコード実行を取得するために使用できる悪意のあるファイルをアップロードすることに加えて、サイトデータを変更することも可能になります。 認証| 複雑性| ベクトル ---|---|--- SINGLE| LOW| NETWORK 機密性...

CVE-2021-38314

CVE-2021-38314 Python エクスプロイト 詳細 WordPress 用の Gutenberg Template Library & Redux Framework プラグイン PoC の例 - https://youtu.be/n1e4aFmXvOk リンク CVE-2021-38314...

CVE-2020-12077

CVE-2020-12077 MapPress Maps Pro "...

CVE-2026-97227

The NextScripts: Social Networks Auto-Poster WordPress plugin before 4.4.8 does not perform capability or ownership checks on several of its AJAX actions, relying on a nonce alone, allowing users an administrator has granted access to its posting features to export the site's configured social...

CVE-2026-86839

The Online Scheduling and Appointment Booking System WordPress plugin before 28.3 does not verify that appointment and payment records requested through its staff-role AJAX actions belong to the requesting staff member, allowing authenticated attackers with a staff-level account to view, modify a...

CVE-2026-97227 NextScripts: Social Networks Auto-Poster < 4.4.8 - Authenticated Social Account Credential Disclosure and Data Deletion

The NextScripts: Social Networks Auto-Poster WordPress plugin before 4.4.8 does not perform capability or ownership checks on several of its AJAX actions, relying on a nonce alone, allowing users an administrator has granted access to its posting features to export the site's configured social...

CVE-2026-97227 NextScripts: Social Networks Auto-Poster < 4.4.8 - Authenticated Social Account Credential Disclosure and Data Deletion

The NextScripts: Social Networks Auto-Poster WordPress plugin before 4.4.8 does not perform capability or ownership checks on several of its AJAX actions, relying on a nonce alone, allowing users an administrator has granted access to its posting features to export the site's configured social...

CVE-2026-97227

The NextScripts: Social Networks Auto-Poster WordPress plugin (versions before 4.4.8 ) is vulnerable to an authentication bypass. The plugin fails to perform proper capability or ownership checks on several AJAX actions, relying solely on a nonce . This allows users granted access to posting feat...

CVE-2026-86839

The Online Scheduling and Appointment Booking System (Bookly) WordPress plugin, in versions before 28.3 , is vulnerable to an Insecure Direct Object Reference (IDOR) . The root cause is a failure to verify that appointment and payment records requested through staff-role AJAX actions actually bel...

CVE-2026-86839 Bookly < 28.3 - Staff+ Appointment and Payment Disclosure, Modification and Deletion via IDOR

The Online Scheduling and Appointment Booking System WordPress plugin before 28.3 does not verify that appointment and payment records requested through its staff-role AJAX actions belong to the requesting staff member, allowing authenticated attackers with a staff-level account to view, modify a...

EUVD-2026-87890

The Online Scheduling and Appointment Booking System WordPress plugin before 28.3 does not verify that appointment and payment records requested through its staff-role AJAX actions belong to the requesting staff member, allowing authenticated attackers with a staff-level account to view, modify a...

CVE-2026-86839 Bookly < 28.3 - Staff+ Appointment and Payment Disclosure, Modification and Deletion via IDOR

The Online Scheduling and Appointment Booking System WordPress plugin before 28.3 does not verify that appointment and payment records requested through its staff-role AJAX actions belong to the requesting staff member, allowing authenticated attackers with a staff-level account to view, modify a...

CVE-2026-93399

The Bookly plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 28.2 via the 'booklygetformid', 'booklyrendercomplete', 'booklyaddtocalendar' and 'booklyrollbackorder' AJAX actions. This is due to the 'booklygetformid' handler blindly storing th...

EUVD-2026-86544

The Bookly plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 28.2 via the 'booklygetformid', 'booklyrendercomplete', 'booklyaddtocalendar' and 'booklyrollbackorder' AJAX actions. This is due to the 'booklygetformid' handler blindly storing th...

VulnCheck KEV: CVE-2026-93399

The Bookly plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 28.2 via the 'booklygetformid', 'booklyrendercomplete', 'booklyaddtocalendar' and 'booklyrollbackorder' AJAX actions. This is due to the 'booklygetformid' handler blindly storing th...

EUVD-2026-85193

The MPCX Lightbox WordPress plugin 1.2.2 through 1.2.5 does not have any authorisation or authentication on one of its AJAX actions available to unauthenticated users, nor does it check the status of the requested post, allowing unauthenticated visitors to retrieve the title, content or excerpt o...