8 matches found
CVE-2026-73532
CVE-2026-73532 affects Fluent Forms Pro 6.2.7. A tampered plugin build from a decommissioned update server inserted a rogue file (libs/class-license-sync.php) loaded via require_once in fluentformpro.php, creating a backdoor REST API and persisting PHP files in mu-plugins and uploads. It also ins...
CVE-2022-1609 The School Management < 9.9.7 - Unauthenticated RCE via REST api
The School Management WordPress plugin before 9.9.7 contains an obfuscated backdoor injected in it's license checking code that registers a REST API handler, allowing an unauthenticated attacker to execute arbitrary PHP code on the site...
Massive AdSense Fraud Campaign Uncovered - 10,000+ WordPress Sites Infected
The threat actors behind the black hat redirect malware campaign have scaled up their campaign to use more than 70 bogus domains mimicking URL shorteners and infect over 10,800 websites. "The main objective is still ad fraud by artificially increasing traffic to pages which contain the AdSense ID...
Gadget Works Online Ordering System 1.0 SQL Injection / Code Execution
Exploit Title: Gadget works online ordering system - Authentication Bypass SQLi Date: 03/05/2021 Exploit Author: Richard Jones Vendor Homepage: https://www.sourcecodester.com/php/13093/gadget-works-online-ordering-system-phpmysqli.html Version: 1.0 Tested on: Windows 10 build 19041 + xampp 3.2.4...
Family Connections CMS v2. 5. 0-v2. 7. 1 (less.php) remote command execution exploit-vulnerability warning-the black bar safety net
Author: TPCS From: 90sec Blog: http://blog.163.com/jianshitianxiaao/ 0x01 introduction Recently in practice some PoC, to find this old cave to practice hand, the first PoC released is in the exploitDB on, just not posted the link, we go to search under it. A start to get to the original PoC, want...
GMAIL-LITE Arbitrary File Upload 0.10 <=
============================================================================== GMAIL-LITE Arbitrary File Upload 0.10 = ============================================================================== Discovered by br0, YGN Ethical Hacker Group, Myanmar http://yehg.net believe in full disclosure URL...
Simple Directory Listing 2 Cross Site File Upload Vulnerability
No description provided by source. Simple Directory Listing 2 - Cross Site File Upload -------------------------------------------------------------------------------- mx:Application xmlns:mx="http://www.adobe.com/2006/mxml" creationComplete="onAppInit" mx:Script / Written by Michael Brooks...
Simple Directory Listing 2 - Cross-Site Arbitrary File Upload
Simple Directory Listing 2 - Cross-Site Arbitrary File Upload Simple Directory Listing 2 - Cross Site File Upload -------------------------------------------------------------------------------- / Written by Michael Brooks VUlerablity type: Cross Site File Upload. Affects: SDL 2.1 beta1 Product...