guac

GUAC: Graph for Understanding Artifact Composition Note: GUAC is under active development - if you are interested in contributing, please look at contributor guide. GUAC is an OpenSSF incubating project under the Supply Chain Integrity WG. Graph for Understanding Artifact Composition GUAC...

gitcolombo

Gitcolombo OSINT tool that extracts identities — names, emails, and links between seemingly unrelated accounts — from git repositories and GitHub. Python CLI gitcolombo.py — clones repos, walks git log, and can call the GitHub API for richer signals. Web version gitcolombo.html — a single static...

WordPress PeproDev Ultimate Profile Solutions plugin <= 8.2.36 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by zaim in WordPress Plugin PeproDev Ultimate Profile Solutions versions = 8.2.36...

WordPress Frontend Admin by DynamiApps plugin <= 3.28.36 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin Frontend Admin by DynamiApps versions = 3.28.36...

WordPress Team – Team Members Showcase Plugin plugin <= 6.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Wordfence PRISM in WordPress Plugin Team versions = 6.0.2...

WordPress MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar plugin <= 5.14.2 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Wordfence PRISM in WordPress Plugin MP3 Audio Player for Music, Radio & Podcast by Sonaar versions = 5.14.2...

WordPress GiveWP – Donation Plugin and Fundraising Platform plugin <= 4.17.0 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Wordfence PRISM in WordPress Plugin GiveWP versions = 4.17.0...

WordPress Getwid – Gutenberg Blocks plugin <= 3.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by nthng in WordPress Plugin Getwid versions = 3.0.1...

WordPress Table Field Add-on for ACF and SCF plugin <= 1.3.35 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Omar Elshopky 3l5h0pky in WordPress Plugin Table Field Add-on for ACF and SCF versions = 1.3.35...

WordPress Embed Any Document – Embed PDF, Word, PowerPoint and Excel Files plugin <= 2.7.13 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Deva Parekh in WordPress Plugin Embed Any Document versions = 2.7.13...

WordPress Brizy – Page Builder plugin <= 2.8.18 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Webbernaut in WordPress Plugin Brizy versions = 2.8.18...

WordPress Data Tables Generator by Supsystic plugin <= 1.12.03 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Webbernaut in WordPress Plugin Data Tables Generator by Supsystic versions = 1.12.03...

CVE-2024-3293-Poc

CVE-2024-3293-Poc rtMedia para WordPress, BuddyPress y bbPress get \buddypress-media\app\helper\RTMediaModel.php:61 RTMediaModel-getmedia \buddypress-media\app\helper\RTMediaModel.php:227 RTMediaQuery-populatemedia \buddypress-media\app\main\routers\query\RTMediaQuery.php:869...

WordPress Download Manager plugin <= 3.3.58 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by theviper17y in WordPress Plugin Download Manager versions = 3.3.58...

WordPress RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator plugin <= 5.2.10 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Wordfence PRISM in WordPress Plugin Feedzy versions = 5.2.10...

WordPress Download Manager plugin <= 3.3.71 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Wordfence PRISM in WordPress Plugin Download Manager versions = 3.3.71...

CVE-2024-3105-PoC

CVE-2024-3105 PoC Woody代码片段 – WordPress的插入页眉页脚代码、AdSense广告插件在所有版本，包括2.5.0及更早版本中，通过'insertphp'短代码存在远程代码执行漏洞。这是由于该插件未限制高级授权用户使用该功能。这使得经过身份验证的攻击者，具有贡献者级别及以上访问权限，能够在服务器上执行代码。 信息 基础评分：9.9 严重 向量：CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H 软件类型：插件 软件标识：insert-php 修复措施：更新至版本2.5.1或更新的补丁版本 受影响版本： NUL";...

misp-dashboard

misp-dashboard 一个实时展示来自一个或多个MISP实例的ZMQ源数据和统计信息的仪表板。 该仪表板可作为实时态势感知工具，用于收集威胁情报信息。 misp-dashboard 包含一个游戏化工具，用于展示每个组织的贡献以及它们随时间的排名变化。 该仪表板可用于安全运营中心（SOC）、安全团队或在网络演习期间，跟踪您各个MISP实例上正在处理的内容。 功能 实时仪表板 支持订阅来自不同MISP实例的多个ZMQ源 实时显示组织的最新贡献 展示可解析的实时发布地理位置 地理位置仪表板 提供历史地理位置信息，帮助安全团队、CSIRT或SOC在其管辖范围内发现威胁...

Meta Box <= 5.11.1 - Arbitrary File Deletion

The Meta Box plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the ajaxdeletefile function. This makes it possible for authenticated attackers with Contributor-level access and above to delete arbitrary files on the server. id: CVE-2026-3946...

CVE-2026-88997

CVE-2026-88997 JSM Show Post Metadata 4.9.1 — XSS Almacenado con Contributor+ a través de Custom Field Meta Key | ---|--- ID de CVE| CVE-2026-88997 Estado| PUBLICADO CNA| WPScan Publicado| 2026-09-23 Actualizado| 2026-09-23 CWE| CWE-79: Cross-Site Scripting XSS Descripción El plugin de WordPress...