CVE-2026-86839 Bookly < 28.3 - Staff+ Appointment and Payment Disclosure, Modification and Deletion via IDOR

The Online Scheduling and Appointment Booking System WordPress plugin before 28.3 does not verify that appointment and payment records requested through its staff-role AJAX actions belong to the requesting staff member, allowing authenticated attackers with a staff-level account to view, modify a...

EUVD-2026-87890

The Online Scheduling and Appointment Booking System WordPress plugin before 28.3 does not verify that appointment and payment records requested through its staff-role AJAX actions belong to the requesting staff member, allowing authenticated attackers with a staff-level account to view, modify a...

CVE-2025-0316-Exploit

CVE-2025-0316-Exploit CVE-2025-0316 Exploit Toolkit 🚨 Auth Bypass Exploit for WordPress Plugin WP Directorybox Manager 🔥 Automated exploit script for CVE-2025-0316 — Auth Bypass via vulnerable AJAX action. ⚠️ Legal Notice This tool is intended strictly for: Research Red Team simulation Authorized...

CVE-2024-8682

CVE-2024-8682 - PoC de Registro No Autenticado en JNews JNews = 11.6.6 tiene una vulnerabilidad que permite el registro de usuarios no autenticados a través del endpoint ?ajax-request=jnews, incluso cuando el registro de WordPress está desactivado. Esto funciona obteniendo primero un jnewsnonce...

FreePBX-SQLi-RCE

FreePBX CVE-2025-57819 - Unauthenticated SQLi to RCE PoC Educational & Security Research Only - See Legal Notice Below Exploitation proof of concept for CVE-2025-57819, a critical unauthenticated SQL injection vulnerability in FreePBX that allows remote code execution. This PoC is published after...

WordPress Modern Events Calendar <6.1.5 - Blind SQL Injection

WordPress Modern Events Calendar plugin before 6.1.5 is susceptible to blind SQL injection. The plugin does not sanitize and escape the time parameter before using it in a SQL statement in the mecloadsinglepage AJAX action. An attacker can possibly obtain sensitive information, modify data, and/o...

WordPress Workreap - Remote Code Execution

WordPress Workreap theme is susceptible to remote code execution. The AJAX actions workreapawardtempfileuploader and workreaptempfileuploader did not perform nonce checks, or validate that the request is from a valid user in any other way. The endpoints allowed for uploading arbitrary files to th...

WordPress Best Books <=2.6.3 - SQL Injection

WordPress Best Books plugin through 2.6.3 is susceptible to SQL injection. The plugin does not sanitize and escape some parameters before using them in a SQL statement via an AJAX action. An attacker can possibly obtain sensitive information, modify data, and/or execute unauthorized administrativ...

vBulletin 5.5.4 - 5.6.2- Remote Command Execution

vBulletin versions 5.5.4 through 5.6.2 allow remote command execution via crafted subWidgets data in an ajax/render/widgettabbedcontainertabpanel request. NOTE: this issue exists because of an incomplete fix for CVE-2019-16759. id: CVE-2020-17496 info: name: vBulletin 5.5.4 - 5.6.2- Remote Comman...

Web Directory Free < 1.7.0 - SQL Injection

The plugin does not sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection with different techniques like UNION, Time-Based and Error-Based. id: CVE-2024-3552 info: name: Web Directory Free 1.7.0 - SQL...

WordPress WP Video Gallery <=1.7.1 - SQL Injection

WordPress WP Video Gallery plugin through 1.7.1 contains a SQL injection vulnerability. The plugin does not sanitise and escape a parameter before using it in a SQL statement via an AJAX action. An attacker can possibly obtain sensitive information, modify data, and/or execute unauthorized...

Combo Blocks < 2.2.76 - Improper Access Control

The Post Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel WordPress plugin before 2.2.76 does not prevent password protected posts from being displayed in the result of some unauthenticated AJAX actions, allowing unauthenticated users to read such posts id:...

drupalgeddon2-cve-lab

Drupalgeddon2 CVE-2018-7600 lab This repository is a reusable target package for the Drupalgeddon2 run. Sentinel reproduced CVE-2018-7600 on 2026-08-27 against Drupal core 7.57 with SQLite and PHP 7.4. The exploit is the Drupal 7 two-request AJAX render-array path: 1. poison the user password for...

CVE-2023-6700

CVE-2023-6700 Cookie Information | Free GDPR Consent Solution = 2.0.22 - Actualización de Opciones Arbitrarias Autenticada Subscriptor+ Descripción: CVE-2023-6700 El plugin Cookie Information | Free GDPR Consent Solution para WordPress es vulnerable a actualizaciones arbitrarias de opciones debid...

CVE-2024-11728

CVE-2024-11728 KiviCare – Sistema de Gestión de Clínicas y Pacientes EHR Plugin de WordPress - PoC de Inyección SQL No Autenticada Este repositorio contiene un script de Prueba de Concepto PoC para explotar una vulnerabilidad de Inyección SQL en el plugin KiviCare – Sistema de Gestión de Clínicas...

wp-ulike-cve-2025-32259-poc

WP ULike ≤ 4.7.9.1 - Unauthenticated Content Spoof CVE-2025-32259 🔬 A simple PoC demonstrating CVE-2025-32259 in the WP ULike plugin for WordPress. 🚨 Educational use only – do not test on systems without explicit authorization. 🧠 Overview WP ULike is a popular WordPress plugin that allows users t...

CVE-2024-0235-PoC

CVE-2024-0235-PoC El plugin EventON de WordPress anterior a 4.5.5 y el plugin EventON de WordPress anterior a 2.2.7 no tienen autorización en una acción AJAX, lo que permite a usuarios no autenticados recuperar las direcciones de correo electrónico de cualquier usuario del blog. Uso: root@kitploi...

CVE-2026-49049

CVE-2026-49049 — Helix3 JoomShaper Joomla Unauthenticated AJAX RCE Scanner Mass scanner / verifier for CVE-2026-49049 : unauthenticated AJAX handler in the Helix3 Framework plugin for Joomla v1.0 – 3.1.0 , patched in 3.1.1+. Authorized testing only. Use only on systems you own or have written...

PoC-CVE-2022-4939-

PoC-CVE-2022-4939 El atacante envía una solicitud especialmente manipulada a la acción AJAX wpajaxnoprivwcfmajaxcontroller para modificar el formulario de registro de membresía y establecer el rol de registro al de administrador. Luego, el plugin procesa la solicitud y modifica el formulario de...

CVE-2023-47179

CVE-2023-47179 WooODT Lite = 2.4.6 - Autorización faltante para actualización de opciones arbitrarias Suscriptor+ Descripción: El plugin WooODT Lite para WordPress es vulnerable a la modificación no autorizada de datos debido a una falta de verificación de capacidades en la función...