CVE-2025-5394

CVE-2025-5394 – Tema Alone de WordPress = 7.8.3 - Carga Arbitraria de Archivos No Autenticada mediante Instalación de Plugins 🔥 Resumen de la Vulnerabilidad El tema de WordPress Alone versiones = 7.8.3 es vulnerable a una vulnerabilidad de carga arbitraria de archivos no autenticada. Esta falla...

CVE-2025-6934

CVE-2025-6934 – Explotación de WordPress Opal Estate Pro 📖 Descripción Este repositorio contiene un exploit de Prueba de Concepto PoC para CVE-2025-6934 , una vulnerabilidad crítica en el Plugin de WordPress: Opal Estate Pro = 1.7.5, que permite la creación de cuentas de administrador sin...

CVE-2026-1555

CVE-2026-1555 WebStack = 1.2024 - Unauthenticated Arbitrary File Upload 👤 By: Nxploited 🔗 Nxploited ZeroDay Hub — t.me/KNxploited 💀 CVE-2026-1555 — WebStack WordPress Arbitrary File Upload Unauthenticated Remote Code Execution viaimgupload AJAX handler...

CVE-2026-3891

Pix for WooCommerce = 1.5.0 - Subida de Archivos Arbitraria No Autenticada CVE-2026-3891 PoC 📜 Descripción CVE-2026-3891 es una vulnerabilidad de subida de archivos arbitraria no autenticada en el plugin de WordPress Pix for WooCommerce. El plugin expone un endpoint AJAX...

CVE-2025-24801

CVE-2025-24801 PoC para RCE en GLPI Este repositorio contiene un script de prueba de concepto poc.py que explota CVE-2025-24801, una vulnerabilidad LFI a RCE en GLPI 10.0.17. Automatiza: Iniciar sesión en GLPI Habilitar la carga de archivos .php actualizando la configuración del tipo de documento...

CVE-2025-6934

CVE-2025-6934 – Exploit de Opal Estate Pro para WordPress 📖 Descripción Este repositorio contiene un Proof of Concept PoC exploit para CVE-2025-6934 , una vulnerabilidad crítica en el Plugin de WordPress: Opal Estate Pro = 1.7.5, que permite la creación de cuenta de administrador sin autenticació...

CVE-2025-51529

CVE-2025-51529: WordPress Cookies and Content Security Policy Plugin DoS Vulnerability Incorrect Access Control in the AJAX endpoint functionality in jonkastonka Cookies and Content Security Policy plugin through version 2.29 allows remote attackers to cause a denial of service database server...

CVE-2025-11986

1 Extract the public cryptoajax nonce from the restricted page root@kitploit: UA='Mozilla/5.0 Windows NT 10.0; Win64; x64; rv:127.0 Gecko/20100101 Firefox/127.0' NONCE=$curl -s "http://localhost/wordpress/" -A "$UA" | \ perl -0777 -ne 'print "$1\n" if...

wp-jobhunt-exploit

wp-jobhunt-exploit CVE-2018-19487, CVE-2018-19488, exploit para el plugin wp-jobhunt de WordPress El plugin wp-jobhunt es un plugin utilizado con el tema JobCareer: https://themeforest.net/item/jobcareer-job-board-responsive-wordpress-theme/14221636 ver el registro de cambios al final Exploit en...

CVE-2025-15260

CVE-2025-15260: Missing Authorization / Broken Access Control in Plugin - MyRewards – Loyalty Points and Rewards for WooCommerce Disclaimer: This repository is created for educational purposes and ethical disclosure only. The vulnerability has been responsibly reported to the vendor and patched. ...

CVE-2026-1657

CVE-2026-1657: Unauthenticated Arbitrary File Upload in EventPrime Plugin Disclaimer: This repository is created for educational purposes and ethical disclosure only. The vulnerability has been responsibly reported to the vendor and patched. Do not use this information to exploit systems without...

CVE-2021-24499

CVE-2021-24499 Explotación masiva de CVE-2021-24499: subida no autenticada que conduce a ejecución remota de código en el tema Workreap. Las acciones AJAX workreapawardtempfileuploader y workreaptempfileuploader no realizaban comprobaciones de nonce ni validaban de ninguna otra forma que la...

CVE-2025-9967

Exploit: Unauthenticated OTP Password Reset Browser Console PoC no authentication required root@kitploit: async = async function getNonceAndAjaxUrl if window.resetpassobj return nonce: resetpassobj.ajaxnonce, ajaxUrl: resetpassobj.ajaxurl ; const home = await...

CVE-2026-19632

TranslatePress Password Reset Link Disclosure to Administrator Account Takeover CVE: CVE-2026-19632 | CVSS: 9.8 Critical Unauthenticated account-takeover via TranslatePress plugin for wordpress. Time from CVE publication to working Day-One PoC: 5 hours, 9 minutes, 40 seconds Up to and including...

CVE-2026-3395-Lab

CVE-2026-3395 — MaxSite CMS Unauthenticated RCE Lab This repository is for educational and research purposes only. All testing must be done in a local Docker lab environment. Do not deploy this setup to public or production systems. Summary CVE-2026-3395 affects MaxSite CMS and allows...

-CVE-2026-1657

CVE-2026-1657 CVE-2026-1657 exploit Unauthenticated Image Upload via 'epuploadfilemedia' AJAX Endpoint USE python3 ./CVE-2026-1657.py https://site.com/ labrat.jpeg...

CVE-2024-0399

CVE-2024-0399 - WooCommerce Customers Manager 29.4 - Inyección SQL Post-Autenticación Título del Exploit: WooCommerce Customers Manager 29.4 - Inyección SQL Post-Autenticación Fecha: 2024-03-25 Autor del Exploit: Ivan Spiridonov - xbz0n Enlace del Software:...

CVE-2025-12673

Flex QR Code Generator ' shell.php curl -X POST "https://victimsite.com/wp-admin/admin-ajax.php" \ -F "action=flexqrupdateqr" \ -F "qrId=1" \ -F "qrData="data":"https://example.com"" \ -F "[email protected]" Detalles La vulnerabilidad existe en el método updateqrcode de la clase...

CVE-2018-7600

Drupal 7 CVE-2018-7600 / SA-CORE-2018-002 Instale las bibliotecas necesarias con: root@kitploit: pip install requests pip install bs4 root@kitploit: $ python3 drupa7-CVE-2018-7600.py -h ============================================================================= | DRUPAL 7 = 7.57 REMOTE CODE...

CVE-2026-96777

A vulnerability was determined in Forma LMS up to 4.1.43. This impacts the function UserselectorAdmController::getDataTask of the file /appCore/ajax.admserver.php?r=adm/userselector/getData of the component Multi-User-Selector AJAX Endpoint. This manipulation of the argument Name causes sql...