10727 matches found
CVE-2026-11355
The DT LMS – elearning WordPress plugin (versions ≤ 1.1) is vulnerable to unauthorized modification of plugin settings due to missing capability checks on multiple AJAX handlers (dtlms_save_poc_settings, dtlms_save_skin_settings, dtlms_save_options_settings). These handlers are registered on the ...
CVE-2026-11355 DT LMS <= 1.1 - Missing Authorization to Unauthenticated Arbitrary Plugin Settings Modification via Multiple AJAX Actions
The DT LMS – elearning, WordPress LMS plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on multiple AJAX handlers including dtlmssavepocsettings, dtlmssaveskinsettings, and dtlmssaveoptionssettings in versions up to, and including, 1.1. Thes...
EUVD-2026-76836
The DT LMS – elearning, WordPress LMS plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on multiple AJAX handlers including dtlmssavepocsettings, dtlmssaveskinsettings, and dtlmssaveoptionssettings in versions up to, and including, 1.1. Thes...
CVE-2026-87918
The WPBot WordPress plugin before 8.5.7 does not perform any authorization or nonce check on several AJAX actions that relay prompts to its configured AI providers, allowing unauthenticated attackers to make those third-party API calls, and consume the associated cost, using the site's own...
CVE-2026-87797
The Sprout Invoices WordPress plugin before 20.8.16 does not perform a capability or ownership check before allowing a private note to be overwritten through one of its AJAX actions, allowing any authenticated user such as a subscriber to overwrite private notes on records belonging to other user...
EUVD-2026-76805
The WPBot WordPress plugin before 8.6.0 does not perform any capability or nonce check on the AJAX action that lists stored chat sessions, allowing unauthenticated attackers to retrieve the name, email address and phone number of every chat visitor by requesting a wide date range...
CVE-2026-87918 WPBot < 8.5.7 - Unauthenticated AI Provider API Abuse via Multiple AJAX Actions
The WPBot WordPress plugin before 8.5.7 does not perform any authorization or nonce check on several AJAX actions that relay prompts to its configured AI providers, allowing unauthenticated attackers to make those third-party API calls, and consume the associated cost, using the site's own...
CVE-2026-87916 WPBot 8.4.9 - 8.5.9 - Unauthenticated Chat Visitor PII Disclosure
The WPBot WordPress plugin before 8.6.0 does not perform any capability or nonce check on the AJAX action that lists stored chat sessions, allowing unauthenticated attackers to retrieve the name, email address and phone number of every chat visitor by requesting a wide date range...
CVE-2026-87918
The WPBot WordPress plugin before 8.5.7 fails to perform any authorization or nonce check on several AJAX actions that relay prompts to configured AI providers. This allows unauthenticated attackers to trigger those third-party API calls using the site's own configured API keys, thereby consuming...
CVE-2026-87916
The WPBot WordPress plugin (versions 8.4.9 through 8.5.9 ) is affected by an unauthenticated PII disclosure vulnerability. The root cause is a missing capability or nonce check on the AJAX action that lists stored chat sessions. An unauthenticated attacker can retrieve the name, email address, an...
CVE-2026-87797 Client Invoicing by Sprout Invoices < 20.8.16 - Subscriber+ Private Note Overwrite via si_edit_private_note
The Sprout Invoices WordPress plugin before 20.8.16 does not perform a capability or ownership check before allowing a private note to be overwritten through one of its AJAX actions, allowing any authenticated user such as a subscriber to overwrite private notes on records belonging to other user...
CVE-2026-87797
The Sprout Invoices WordPress plugin before 20.8.16 has a missing authorization check on the si_edit_private_note AJAX action. Because no capability or ownership verification is performed, any authenticated user with the subscriber role (or higher) can overwrite private notes belonging to other u...
EUVD-2026-76799
The Sprout Invoices WordPress plugin before 20.8.16 does not perform a capability or ownership check before allowing a private note to be overwritten through one of its AJAX actions, allowing any authenticated user such as a subscriber to overwrite private notes on records belonging to other user...
lab-cve-2025-3515
CVE-2025-3515 WordPress Lab Drag and Drop Multiple File Upload for Contact Form 7 취약한 WordPress 환경을 실행하여 CVE-2025-3515를 재현하고 검증하세요 — 플러그인 drag-and-drop-multiple-file-upload-contact-form-7 ≤ 1.3.8.9의 ddmuuploadfile을 통한 무제한 파일 업로드 취약점입니다. 이 랩은 Dockerized로 빠르고 결정적인 테스트를 위해 Nuclei와 함께 사용할 수 있습니다. 취약한...
CVE-2022-1203
CVE-2022-1203 Content Mask 1.8.4 - 구독자+ 임의 옵션 업데이트 설명 1.8.4.1 이전 버전의 Content Mask WordPress 플러그인은 다양한 AJAX 동작에서 권한 및 CSRF 검사를 수행하지 않으며, 업데이트할 옵션이 플러그인에 속하는지도 검증하지 않습니다. 그 결과 구독자와 같은 모든 인증된 사용자가 임의의 블로그 옵션을 수정할 수 있습니다. 사용 방법 익스플로잇 root@kitploit: $ python3 CVE-2022-1203.py -u http://wordpress.lan -...
CVE-2026-14962
CVE-2026-14962 Wordpress Plugin ELEX WooCommerce Request a Quote 인증되지 않은 SQL 인젝션 ELEX WooCommerce Request a Quote WordPress 플러그인 elex-request-a-quote ≤ 2.4.0 — 공개 elexraqaddtoquote AJAX 액션을 통한 인증되지 않은 SQL 인젝션. 허가된 테스트 전용입니다. 소유하지 않았거나 테스트 권한이 없는 시스템에 대해 실행하지 마십시오. 요구 사항: Python 3, 표준 라이브러리만 사용. 대...
CVE-2024-50492
🚨 CVE-2024-50492 - ScottCart 🔥 ScottCart 🧑💻 작성자: Nxploit – Khaled Alenazi 📌 설명 WordPress 용 ScottCart 플러그인 버전 ≤ 1.1은 원격 코드 실행RCE 에 취약합니다. 이로 인해 인증되지 않은 공격자 가 취약한 AJAX 엔드포인트를 통해 서버에서 임의의 PHP 함수를 실행할 수 있습니다. 플러그인 : ScottCart ≤ 1.1 취약점 : 인증되지 않은 함수 삽입 → RCE CVE : CVE-2024-50492 CVSS 점수 : 9.8 - 치명적 🧠...
PT-2026-90600
🚨 CVE-2026-85200 The GEO my WP plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.5.5.3 via the gmw posts locator ajax info window loader function. This makes it possible for unauthenticated attackers to include and execute arbitrary .php files on t...
CVE-2025-47646
CVE-2025-47646 PoC WordPress PSW Front-end Login Registration Plugin ≤ 1.12 에 대한 인증되지 않은 권한 상승 익스플로잇 📖 설명 이 Python 스크립트는 CVE-2025-47646 에 대한 개념 증명PoC 익스플로잇으로, WordPress PSW Front-end Login Registration Plugin ≤ 1.12 의 취약점을 대상으로 합니다. 이 취약점을 통해 인증되지 않은 공격자가 적절한 검증이나 제한 없이 노출된 AJAX 액션을 통해 새 사용자 계정을...