wp-mail-masta-exploit

WordPress Plugin Mail Masta 1.0 - CVE-2016-10956 Exploit This script exploits the CVE-2016-10956 vulnerability in WordPress Plugin Mail Masta 1.0 to extract credentials from wp-config.php. How to Use 1. Clone the repository: root@kitploit: git clone...

wphardening

WPHardening Fortify the security of any WordPress installation. ❮ NOTE ❯ This tool releases new versions on a regular basis. Make sure to update your dependencies frequently to get the latest version. Check out the changelog or CHANGELOG.md to learn about the new features. Installation Installing...

wp-allowed-hosts

WP Allowed Hosts 该插件是在已知漏洞CVE-2017-8295被披露后创建的，该插件将保护您免受该攻击，无需麻烦，只需在您的wp-config.php中添加简单的一行即可。 安装 只需从此处下载插件并上传到您的网站。 使用方法 只需将以下行添加到您的wp-config.php中 root@kitploit: // WP Allowed Hosts Plugin define 'WPALLOWEDHOSTS', 'mysit.com' ; 您也可以添加多个域名。 root@kitploit: // WP Allowed Hosts Plugin define...

Config-Exploiter

Config-Exploiter Config-Exploiter : dump config.php File From Joomla And Wordpress Websites Programmed By Belahsan Ouerghi . Installation root@kitploit: sudo apt-get install git git clone https://github.com/TunisianEagles/Config-Exploiter.git cd Config-Exploiter chmod +x install.sh sudo...

CVE-2023-47504-POC

CVE-2023-47504 POC Exploit for CVE-2023-47504. According to NIST, this vulnerability should allow unauthenticated users to access functionalities in the Elementor Website Builder Plugin. Based on my research into the vulnerability, and also judging by the URL from Patchstack that describes the...

wordpress-true-ranker-cve-2021-39312

WordPress Plugin The True Ranker 2.2.2 - Arbitrary File Read Python proof-of-concept for CVE-2021-39312 , affecting The True Ranker seo-local-rank WordPress plugin versions ≤ 2.2.2. Vulnerability Details CVE: CVE-2021-39312 Type: Arbitrary File Read Affected Plugin: The True Ranker Affected...

CVE-2026-87929

MaxSite CMS through 109.6 ships with a hardcoded session encryption key in application/config/config.php that is never changed during installation, allowing unauthenticated attackers to forge administrator session cookies. Attackers can mint a malicious cisession cookie with administrator...

CVE-2024-6460

CVE-2024-6460 Grow by Tradedoubler 2.0.22 - Unauthenticated LFI Usage root@kitploit: usage: CVE-2024-6460.py -h -u URL -U USERNAME -P PASSWORD -c COMPONENT Grow by Tradedoubler 2.0.22 - Unauthenticated LFI options: -h, --help show this help message and exit -u URL, --url URL Target WordPress site...

CVE-2026-86308

A flaw was found in light0011 cms. A remote attacker could exploit a vulnerability in the Debug Mode component by manipulating the DBDEBUG argument. This could lead to information disclosure from the App/Common/Conf/config.php file...

CVE-2026-86308

A vulnerability was detected in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. This issue affects some unknown processing of the file App/Common/Conf/config.php of the component Debug Mode. The manipulation of the argument DBDEBUG results in...

EUVD-2026-72405

A vulnerability was detected in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. This issue affects some unknown processing of the file App/Common/Conf/config.php of the component Debug Mode. The manipulation of the argument DBDEBUG results in...

CVE-2026-86308 light0011 cms Debug Mode config.php information disclosure

A vulnerability was detected in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. This issue affects some unknown processing of the file App/Common/Conf/config.php of the component Debug Mode. The manipulation of the argument DBDEBUG results in...

CVE-2023-6972-Exploit-Arbitrary-File-Deletion

CVE-2023-6972 Proof of Concept PoC Description This repository contains a Proof of Concept PoC exploit for CVE-2023-6972. The vulnerability allows for Unauthenticated Arbitrary File Deletion AFD in Wordpress Backup Migration Plugin Note: A comprehensive technical breakdown, full case study, and...

CVE-2026-53757

Emlog is an open source website building system. In versions 2.6.29 and prior, the emUnZip function extracts all ZIP entries via ZipArchive::extractTo without validating entry paths for ../ traversal sequences. Only the first entry's subdirectory structure is checked. An attacker can overwrite...

PT-2026-73086

The ProSolution WP Client plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the proSol fileDeleteProcess function in all versions up to, and including, 2.0.8. This makes it possible for unauthenticated attackers to delete arbitrary files on...

CVE-2026-14484

The RapiSafe – Secure Multi File Upload for Contact Form 7 plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the handleAjaxRemoveUpload function in all versions up to, and including, 1.0.4. This makes it possible for unauthenticated attacker...

EUVD-2026-58835

The RapiSafe – Secure Multi File Upload for Contact Form 7 plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the handleAjaxRemoveUpload function in all versions up to, and including, 1.0.4. This makes it possible for unauthenticated attacker...

CVE-2026-73033

CVE-2026-73033 affects the Sucuri Security WordPress plugin up to version 2.7.3. A path traversal flaw exists in the pageIntegritySubmission() function (src/integrity.lib.php) that lets authenticated administrators delete arbitrary files by supplying directory traversal sequences via the sucurisc...

EUVD-2026-49989

The SpeedyCache plugin for WordPress is vulnerable to Arbitrary File Read via Path Traversal in all versions up to, and including, 1.3.8. This is due to a mismatch between CSS URL validation which allows query strings like .css?... and path resolution which strips query strings, combined with no...

NukeViet: Path Traversal to Arbitrary File Deletion in Edit Comment Function

Summary Path Traversal to Arbitrary File Deletion in the Edit Comment admin function. An authenticated administrator can delete arbitrary files within the application root e.g., config.php by injecting a crafted attach parameter, rendering the application inoperable. Affected Component...