CVE-2025-6934

🚨 WordPress OpalEstate 플러그인 - 인증되지 않은 권한 상승 취약점 🔎 설명 WordPress용 OpalEstate 플러그인은 AJAX 등록 핸들러에 심각한 취약점을 포함하고 있어, 인증되지 않은 사용자가 관리자로 등록 할 수 있습니다. 문제는 admin-ajax.php를 통해 공개적으로 노출된 opalestateregisterform AJAX 액션에서 role 매개변수를 안전하지 않게 처리하는 데 있습니다. 유효한 nonce를 가진 공격자는 role=administrator 필드를 제출하기만 하면 권한을...

CVE-2026-87959

The WPBot WordPress plugin before 8.7.6 does not perform a capability check on the AJAX action that saves its Claude AI provider settings, allowing users with subscriber-level access to overwrite those settings, including the API key used for the WPBot WordPress plugin before 8.7.6's outgoing AI...

CVE-2026-87828

The Seraphinite Accelerator WordPress plugin before 2.29.24 does not perform a capability check on one of its state-update AJAX actions, allowing authenticated users such as subscribers to write a malformed value that causes an uncaught error on every subsequent admin page load, making the entire...

CVE-2026-87959

The WPBot WordPress plugin (versions 8.7.2–8.7.5 ) contains a missing capability check on the AJAX action that saves its Claude AI provider settings . This allows users with subscriber-level access to overwrite those settings, including the API key used for the plugin's outgoing AI requests, as d...

CVE-2026-87959 WPBot 8.7.2 - 8.7.5 - Subscriber+ Claude AI Settings Update

The WPBot WordPress plugin before 8.7.6 does not perform a capability check on the AJAX action that saves its Claude AI provider settings, allowing users with subscriber-level access to overwrite those settings, including the API key used for the WPBot WordPress plugin before 8.7.6's outgoing AI...

CVE-2026-87828

Seraphinite Accelerator is a WordPress plugin that, in versions before 2.29.24 , fails to perform a capability check on its seraph_accel_State Update AJAX action. An authenticated user with at least Subscriber level can write a malformed value through this action, triggering an uncaught error on ...

CVE-2026-87828 Seraphinite Accelerator < 2.29.24 - Subscriber+ DoS via seraph_accel_State Update

The Seraphinite Accelerator WordPress plugin before 2.29.24 does not perform a capability check on one of its state-update AJAX actions, allowing authenticated users such as subscribers to write a malformed value that causes an uncaught error on every subsequent admin page load, making the entire...

EUVD-2026-80207

The Seraphinite Accelerator WordPress plugin before 2.29.24 does not perform a capability check on one of its state-update AJAX actions, allowing authenticated users such as subscribers to write a malformed value that causes an uncaught error on every subsequent admin page load, making the entire...

CVE-2018-7600

Drupal 7 CVE-2018-7600 / SA-CORE-2018-002 必要なライブラリをインストール: root@kitploit: pip install requests pip install bs4 root@kitploit: $ python3 drupa7-CVE-2018-7600.py -h ============================================================================= | DRUPAL 7 = 7.57 REMOTE CODE EXECUTION CVE-2018-7600 | ...

CVE-2026-18595

The WP-Lister Lite for eBay plugin for WordPress is vulnerable to Stored Cross-Site Scripting via AJAX Cron Handler Request Parameter in all versions up to, and including, 3.8.9 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...

EUVD-2026-80099

The WP-Lister Lite for eBay plugin for WordPress is vulnerable to Stored Cross-Site Scripting via AJAX Cron Handler Request Parameter in all versions up to, and including, 3.8.9 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...

CVE-2026-18595 WP-Lister Lite for eBay <= 3.8.9 - Unauthenticated Stored Cross-Site Scripting via AJAX Cron Handler Request

The WP-Lister Lite for eBay plugin for WordPress is vulnerable to Stored Cross-Site Scripting via AJAX Cron Handler Request Parameter in all versions up to, and including, 3.8.9 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...

CVE-2026-18595

WP-Lister Lite for eBay (WordPress plugin) is vulnerable to Stored Cross-Site Scripting via the AJAX Cron Handler Request Parameter in all versions up to and including 3.8.9 , caused by insufficient input sanitization and output escaping. Unauthenticated attackers can inject arbitrary web scripts...

CVE-2026-14349

The TrueBooker – Appointment Booking and Scheduler System plugin for WordPress is vulnerable to authorization bypass in all versions up to and including 1.2.3 . The root cause is a missing permission check on the admin_addcustomer AJAX action in main/function_ajax.php, allowing unauthenticated at...

vulnerable-bsr-lab-CVE-2023-6933

CVE-2023-6933 脆弱性ラボ 概要 このラボ環境は、Better Search Replace WordPress プラグイン（バージョン ≤1.4.4）における重大な PHP オブジェクトインジェクション脆弱性 CVE-2023-6933 を実演します。 脆弱性の詳細 CVE ID : CVE-2023-6933 CVSS スコア : 9.8（緊急） 影響を受けるプラグイン : Better Search Replace ≤1.4.4 脆弱性タイプ : 非シリアル化されたユーザー入力による PHP オブジェクトインジェクション 攻撃ベクトル : AJAX エンドポイント...

CVE-2024-0399

CVE-2024-0399 - WooCommerce Customers Manager 29.4 - 认证后SQL注入 漏洞名称： WooCommerce Customers Manager 29.4 - 认证后SQL注入 日期： 2024-03-25 漏洞作者： Ivan Spiridonov - xbz0n 软件链接： https://codecanyon.net/item/woocommerce-customers-manager/10965432 版本： 29.4 测试环境： Ubuntu 22.04 CVE编号： CVE-2024-0399 SQL注入...

CVE-2024-10958-WPPA-Exploit

WordPress WP Photo Album Plus 임의 숏코드 실행 CVE-2024-10958 WordPress WP Photo Album Plus 플러그인에서 발견된 인증 없이 임의 숏코드를 실행할 수 있는 취약점에 대한 PoC 코드입니다. 세부 사항 영향을 받는 버전: = 8.8.08.007 CVSS 점수: 7.3 높음 취약점 유형: 임의 숏코드 실행 취약점 설명 WP Photo Album Plus 플러그인은 getshortcodedrenderedfenodelay AJAX 액션에 있는 인증 부재로 인해, 인증되지 않은...

CVE-2026-59550

CVE-2026-59550 - AWP Classifieds ≤ 4.4.7 認証不要のSQLインジェクション WordPressプラグインAWP Classifiedsanother-wordpress-classifieds-pluginにおける認証不要の時間ベースブラインドSQLインジェクション であり、プラグインの匿名ゲストAJAX広告投稿フローを通じて到達可能です。...

WordPress WP-Lister Lite for eBay plugin <= 3.8.9 - Unauthenticated Stored Cross-Site Scripting via AJAX Cron Handler Request vulnerability

Unauthenticated Stored Cross-Site Scripting via AJAX Cron Handler Request vulnerability discovered by thevietronin - GalaxyOne in WordPress Plugin WP-Lister Lite for eBay versions = 3.8.9...

CVE-2026-39492

CVE-2026-39492 — WP Maps ブラインドSQLインジェクションスキャナ バックティックバイパスによる事前認証時間ベースブラインドSQLi → DB抽出 概要 CVE-2026-39492 は、WP Maps プラグイン（wp-google-map-plugin）バージョン 4.9.1以下 における、CVSS 9.3の重大な未認証ブラインドSQLインジェクション脆弱性です。 wpgmpajaxcall AJAXハンドラは、未認証アクセス用に wpajaxnopriv 経由で登録されています。locationid パラメータは...