Lucene search
+L

10746 matches found

Kitploit
Kitploit
added 2026/09/21 5:20 a.m.10 views

CVE-2026-61511-PoC-Exploit

CVE-2026-61511 – vBulletin Pre‑Auth RCE Exploit & Verifier ⚠️ ETHICAL USE ONLY – AUTHORIZED SECURITY TESTING This repository provides tools for authorized security professionals, blue teams, and penetration testers only. Unauthorized access to computer systems is illegal under CFAA US, Computer...

9.8CVSS6.4AI score0.70766EPSS
SaveExploits8References1
Kitploit
Kitploit
added 2026/09/21 5:07 a.m.12 views

CVE-2020-36708

CVE-2020-36708 – WordPress Epsilon Framework Function Injection PoC Overview CVE-2020-36708 is a vulnerability in the Epsilon Framework for WordPress that allows unauthenticated attackers to invoke arbitrary PHP class methods via the AJAX action epsilonframeworkajaxaction. This issue is categoriz...

9.8CVSS8.4AI score0.65342EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/21 4:57 a.m.12 views

CVE-2025-6440

🧨 CVE-2025-6440 – WooCommerce Designer Pro Unrestricted File Upload Unauthenticated Arbitrary File Upload viawcdpsavecanvasdesignajax WooCommerce Designer Pro plugin – Remote Code Execution RCE 📖 Description The WooCommerce Designer Pro plugin for WordPress contains an unauthenticated arbitrary...

9.8CVSS8.2AI score0.31424EPSS
SaveExploits13
Kitploit
Kitploit
added 2026/09/21 4:39 a.m.8 views

CVE-2025-6934

CVE-2025-6934 – WordPress Opal Estate Pro Exploit 📖 Description This repository contains a Proof of Concept PoC exploit for CVE-2025-6934 , a critical vulnerability in the WordPress Plugin: Opal Estate Pro = 1.7.5, which allows creating an administrator account without authentication. ⚠️ Disclaime...

9.8CVSS6AI score0.26442EPSS
SaveExploits12
Kitploit
Kitploit
added 2026/09/21 4:29 a.m.7 views

CVE-2025-1661

CVE-2025-1661 - Unauthenticated Local File Inclusion LFI in HUSKY – Products Filter Professional for WooCommerce Description The HUSKY – Products Filter Professional for WooCommerce plugin for WordPress is vulnerable to Local File Inclusion LFI in all versions up to and including 1.3.6.5 via the...

9.8CVSS8.5AI score0.56382EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/21 4:05 a.m.10 views

CVE-2018-7600

TRAN CONG DANH - SVTT - Mentor: LUU VAN LAN - CVE-2018-7600 - Day Started: 26/06/2024. Table of contents: 1. CVE summary 2. Prerequisites 3. CVE Analyse 4. Mitigation CVE summary An attacker could call a Drupal Form API Ajax Request containing the calluserfunc auto do function Drupal before 7.58,...

9.8CVSS7.9AI score0.99991EPSS
SaveExploits49
Kitploit
Kitploit
added 2026/09/21 4:02 a.m.10 views

CVE-2024-3495-Poc

CVE-2024-3495-Poc CVE-2024-3495 Country State City Dropdown CF7 Accept-Encoding: gzip, deflate Accept: / Accept-Language: en-US;q=0.9,en;q=0.8 User-Agent: Mozilla/5.0 Windows NT 10.0; Win64; x64 Apple...

9.8CVSS5.9AI score0.13618EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/21 3:20 a.m.9 views

CVE-2025-51529

CVE-2025-51529: WordPress Cookies and Content Security Policy Plugin DoS Vulnerability Incorrect Access Control in the AJAX endpoint functionality in jonkastonka Cookies and Content Security Policy plugin through version 2.29 allows remote attackers to cause a denial of service database server...

5.3CVSS6AI score0.00443EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/21 2:50 a.m.10 views

CVE-2026-8732

CVE-2026-8732 - WordPress WP Google Map Pro Mass Scanner & Auto Admin Creator 📌 Description This tool exploits CVE-2026-8732 , a vulnerability in the WP Google Map Pro plugin for WordPress. The vulnerability allows an unauthenticated attacker to obtain a valid wpmptoken via an AJAX endpoint...

9.8CVSS6.5AI score0.22728EPSS
SaveExploits8References1
Kitploit
Kitploit
added 2026/09/21 2:48 a.m.10 views

CVE-2026-1555

CVE-2026-1555 WebStack = 1.2024 - Unauthenticated Arbitrary File Upload 👤 By: Nxploited 🔗 Nxploited ZeroDay Hub — t.me/KNxploited 💀 CVE-2026-1555 — WebStack WordPress Arbitrary File Upload Unauthenticated Remote Code Execution viaimgupload AJAX handler...

9.8CVSS7.8AI score0.00984EPSS
SaveExploits4References1
Kitploit
Kitploit
added 2026/09/21 2:31 a.m.15 views

CVE-2025-4601

CVE-2025-4601 - WordPress RealHomes Theme = 4.4.0 - Privilege Escalation 🔥 Vulnerability Summary The WordPress theme RealHomes versions = 4.4.0 is vulnerable to a privilege escalation vulnerability. This allows authenticated users with low privileges such as subscribers to escalate their roles to...

8.8CVSS7.6AI score0.06951EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/21 2:15 a.m.8 views

By-Poloss..-..CVE-2026-12432-PoC

CVE-2026-12432: WP Full Stripe Free = 8.4.4 Published : June 26, 2026 Last Updated : June 27, 2026 Researcher : Netwurm - VTDR e.V.i.G. Vulnerability Description The WP Full Stripe Free plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 8.4.3 via the...

5.3CVSS5.8AI score0.00561EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/21 2:08 a.m.10 views

CVE-2025-30567

Introduction Unauthorized Arbitrary File Download in WordPress WP01! Environment setup Step 1: Download the WP01 Plugin,But... Haha, don't worry, here is the source code of the plugin. Step 2: Package the provided wp01 folder and upload it to the WordPress plugins section.like this-- Analysis It'...

7.5CVSS5.9AI score0.02786EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/21 2:00 a.m.11 views

wp-jobhunt-exploit

wp-jobhunt-exploit CVE-2018-19487, CVE-2018-19488, exploit for WordPress wp-jobhunt plugin wp-jobhunt plugin is a plugin used with JobCareer theme: https://themeforest.net/item/jobcareer-job-board-responsive-wordpress-theme/14221636 see changelog at the bottom Python exploit for CVE-2018-19487 AJ...

9.8CVSS7.7AI score0.04852EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/21 12:57 a.m.12 views

CVE-2025-2539

POC - CVE-2025-2539 File Away Disclaimer : This Proof of Concept POC is made for educational and ethical testing purposes only. Usage of this tool for attacking targets without prior mutual consent is illegal. It is the end user’s responsibility to obey all applicable local, state, and federal...

7.5CVSS8.2AI score0.01652EPSS
SaveExploits6References1
Kitploit
Kitploit
added 2026/09/21 12:44 a.m.14 views

CVE-2026-9833

CVE-2026-9833 CVE ID: CVE-2026-9833 Vulnerability Type: Cross-Site Scripting XSS – Reflected XSS CWE: CWE-79 – Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' Severity: High CISA ADP CVSS v3.1: 7.1 Overview CVE-2026-9833 affects the Tag Groups – Advanced Way to...

7.1CVSS6AI score0.00282EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/21 12:36 a.m.10 views

CVE-2020-9380

PoC IPTV Smarters Exploit Usage python gld.py -u http://www.pirate-ilegal-tv.com/ -i Vulnerability file includes/ajax-control.php: root@kitploit: ?php / @ PHP 5.6 @ Decoder version : 1.0.0.1 @ Release on : 24.03.2018 @ Website : http://EasyToYou.eu / sessionstart; if fileexists"functions.php"...

9.8CVSS8.6AI score0.03978EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/21 12:34 a.m.9 views

CVE-2026-3891

Pix for WooCommerce = 1.5.0 - Unauthenticated Arbitrary File Upload CVE-2026-3891 PoC 📜 Description CVE-2026-3891 is an unauthenticated arbitrary file upload vulnerability in the Pix for WooCommerce WordPress plugin. The plugin exposes an AJAX endpoint lknpixforwoocommercec6savesettings that...

9.8CVSS6.1AI score0.2506EPSS
SaveExploits13
Kitploit
Kitploit
added 2026/09/21 12:05 a.m.13 views

cve-2021-38314

cve-2021-38314 - Unauthenticated Sensitive Information Disclosure The Gutenberg Template Library & Redux Framework plugin = 4.2.11 for WordPress registered several AJAX actions available to unauthenticated users in the includes function in redux-core/class-redux-core.php that were unique to a giv...

5.3CVSS6.1AI score0.28961EPSS
SaveExploits6
Kitploit
Kitploit
added 2026/09/20 11:12 p.m.10 views

CVE-2021-24499

CVE-2021-24499 Mass exploitation of CVE-2021-24499 unauthenticated upload leading to remote code execution in Workreap theme. The AJAX actions workreapawardtempfileuploader and workreaptempfileuploader did not perform nonce checks, or validate that the request is from a valid user in any other wa...

9.8CVSS8.7AI score0.60113EPSS
SaveExploits9
Rows per page
Query Builder