Lucene search
+L

25 matches found

Kitploit
Kitploit
added 2026/08/26 8:55 a.m.3 views

wp2shell

wp2shell Pre-Authentication Remote Code Execution gegen den WordPress-Core. Verkettet CVE-2026-60137 SQLi im Parameter authornotin / authorexclude von WPQuery mit CVE-2026-63030 REST-API-Batch-Routen-Verwechslung für nicht authentifiziertes RCE. Betroffene Versionen...

9.8CVSS9.2AI score0.97271EPSS
SaveExploits77
Kitploit
Kitploit
added 2026/08/26 7:35 a.m.5 views

CVE-2026-63030

CVE-2026-63030 WordPress REST API confusione di route batch + SQL injection che porta a creazione di amministratore non autorizzato → esecuzione remota di codice — PoC della catena di sfruttamento completa. Solo per test di sicurezza autorizzati, riproduzione di vulnerabilità e ricerca. Vietato...

9.8CVSS9.3AI score0.97271EPSS
SaveExploits75
Kitploit
Kitploit
added 2026/08/26 7:35 a.m.4 views

wp2shell

wp2shell Esecuzione remota di codice pre-autenticazione per WordPress 6.9.0–6.9.4 e 7.0.0–7.0.1. Combina CVE-2026-63030 SQLi da confusione delle route del batch con CVE-2026-60137 rientro del changeset del customizer per ottenere la creazione di un amministratore senza autenticazione e l'esecuzio...

9.8CVSS8.9AI score0.97271EPSS
SaveExploits77
Kitploit
Kitploit
added 2026/08/26 7:35 a.m.3 views

Wp2Shell

wp2shell Esecuzione remota di codice pre-autenticazione nel core di WordPress. CVE-2026-60137 SQL Injection in WPQuery in combinazione con CVE-2026-63030 REST API Batch Route Confusion. Solo per scopi educativi e di ricerca sulla sicurezza autorizzata. Versioni interessate Le versioni di WordPres...

9.8CVSS8.9AI score0.97271EPSS
SaveExploits77
Kitploit
Kitploit
added 2026/08/26 7:35 a.m.3 views

wp2shell

CVE-2026-63030 + CVE-2026-60137 - “wp2shell”: RCE non autenticata nel core di WordPress REST API confusione di route batch CVE-2026-63030 combinata con un'iniezione SQLauthornotin in WPQuery CVE-2026-60137 → esecuzione remota di codice pre-autenticazione su un'installazione WordPress predefinita...

9.8CVSS9.4AI score0.97271EPSS
SaveExploits77References6
Kitploit
Kitploit
added 2026/08/24 7:02 p.m.3 views

wp2shell-poc

wp2shell 💙 Unterstützen Sie das Projekt Wenn Sie meine Arbeit schätzen, erwägen Sie bitte, das Projekt über USDT TRC20: TQBA72kakjCZLnJt8fJYcD7dyQCEpzNtVN zu unterstützen WordPress Core Pre-Authentication RCE Chain wp2shell ist ein Proof-of-Concept für Sicherheitsforschung, das eine...

9.8CVSS9.2AI score0.97271EPSS
SaveExploits77
Kitploit
Kitploit
added 2026/08/24 5:17 a.m.2 views

sxwp2shell

root@kitploit: / / / / / / | |/ / \ / / / / / / / / | / / / / / / / // / / / / / // | //// ///// /////|| sxwp2shell — Pre-Auth-RCE-Exploit für WordPress über REST-API-Batch-Routen-Verwirrung CVE-2026-63030 + SQL-Injection CVE-2026-60137. Betroffen: WP 6.9.0–6.9.4 / 7.0.0–7.0.1 Installation...

9.8CVSS0.97271EPSS
SaveExploits77
Kitploit
Kitploit
added 2026/08/24 1:20 a.m.2 views

WP2Shell-CVE-2026-63030-POC

WP2Shell Rilevatore e PoC di Validazione Copertura CVE: CVE-2026-63030 e CVE-2026-60137 Uso previsto: Solo test di sicurezza autorizzati, validazione difensiva e lab locali usa e getta WP2Shell è una catena di vulnerabilità del core di WordPress che combina un bug di confusione batch-route dell'A...

9.8CVSS0.97271EPSS
SaveExploits77
Kitploit
Kitploit
added 2026/08/24 1:03 a.m.3 views

wp2shell

wp2shell por: ek0ms savi0r Execução Remota de Código Não Autenticada para POC do WordPress Core CVE-2026-63030 + CVE-2026-60137 O exploit wp2shell para uma cadeia de vulnerabilidades críticas no núcleo do WordPress. Ele encadeia um bug de confusão de rota de lote batch da API REST com uma injeção...

9.8CVSS0.97271EPSS
SaveExploits77
Kitploit
Kitploit
added 2026/08/20 10:10 a.m.3 views

CVE-2026-63030

wp2shell — RCE pre-autenticazione nel core di WordPress CVE-2026-63030 Confusione di route batch + CVE-2026-60137 Iniezione SQL Toolkit di sfruttamento a zero dipendenze per la catena di vulnerabilità wp2shell nel core di WordPress. Una singola richiesta HTTP anonima consente di ottenere...

9.8CVSS0.97271EPSS
SaveExploits77References2
GithubExploit
GithubExploit
added 2026/08/05 9:21 p.m.27 views

Exploit for Interpretation Conflict in Wordpress

wp2shell — WordPress Core Pre-Auth RCE CVE-2026-63030 Ba...

9.8CVSS9.2AI score0.97271EPSS
SaveExploits77
GithubExploit
GithubExploit
added 2026/08/05 12:48 p.m.19 views

Exploit for Interpretation Conflict in Wordpress

wp2shell-PoC ⚠ This tool is created solely for educationa...

9.8CVSS9.2AI score0.97271EPSS
SaveExploits77
OSV
OSV
added 2026/07/27 5:55 a.m.9 views

BIT-WORDPRESS-MULTISITE-2026-63030 WordPress < 7.0.2 - REST API batch-route confusion and SQL injection issue leading to Remote Code Execution

WordPress 6.9.x before 6.9.5 and 7.0.x before 7.0.2 is affected by a REST API batch endpoint route confusion issue which, combined with the authornotin WPQuery SQL Injection CVE-2026-60137, could allow an attacker to perform SQL Injection and achieve Remote Code Execution...

9.8CVSS6.3AI score0.97271EPSS
SaveExploits75References4
GithubExploit
GithubExploit
added 2026/07/21 5:51 p.m.91 views

Exploit for CVE-2026-63030

WP2Shell Detector and Validation PoC !License: MIThttps:/...

9.8CVSS7.4AI score0.97271EPSS
SaveExploits77
GithubExploit
GithubExploit
added 2026/07/21 5:49 p.m.71 views

Exploit for CVE-2026-60137

How does this work at all !plotd...

9.8CVSS5.9AI score0.97271EPSS
SaveExploits77
GithubExploit
GithubExploit
added 2026/07/20 1:54 p.m.65 views

Exploit for CVE-2026-63030

wp2shell-cf-bypass Independent PoC for the WordPress batch ro...

9.8CVSS6.2AI score0.97271EPSS
SaveExploits75
GithubExploit
GithubExploit
added 2026/07/20 10:41 a.m.74 views

Exploit for CVE-2026-60137

/ / / / / / | |/ / \ / /...

9.8CVSS6AI score0.97271EPSS
SaveExploits77
GithubExploit
GithubExploit
added 2026/07/20 1:20 a.m.92 views

Exploit for CVE-2026-63030

CVE-2026-63030 - WordPress REST API Batch Route Confusion PoC...

9.8CVSS6.6AI score0.97271EPSS
SaveExploits75
GithubExploit
GithubExploit
added 2026/07/19 6:23 a.m.83 views

Exploit for CVE-2026-60137

wp2shell — WordPress Core Pre-Auth RCE CVE-2026-63030 Ba...

9.8CVSS7.1AI score0.97271EPSS
SaveExploits77
GithubExploit
GithubExploit
added 2026/07/18 5:56 p.m.74 views

Exploit for CVE-2026-63030

wp2shellscanner !smokehttps://github.com/zi3lak/wp2shell...

9.8CVSS6.7AI score0.97271EPSS
SaveExploits77
Rows per page
Query Builder