CVE-2024-3293-Poc

CVE-2024-3293-Poc rtMedia لـ WordPress وBuddyPress وbbPress get \buddypress-media\app\helper\RTMediaModel.php:61 RTMediaModel-getmedia \buddypress-media\app\helper\RTMediaModel.php:227 RTMediaQuery-populatemedia \buddypress-media\app\main\routers\query\RTMediaQuery.php:869 RTMediaQuery-populateda...

WordPress Download Manager plugin <= 3.3.58 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by theviper17y in WordPress Plugin Download Manager versions = 3.3.58...

WordPress RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator plugin <= 5.2.10 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Wordfence PRISM in WordPress Plugin Feedzy versions = 5.2.10...

WordPress Download Manager plugin <= 3.3.71 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Wordfence PRISM in WordPress Plugin Download Manager versions = 3.3.71...

CVE-2026-88997

CVE-2026-88997 JSM Show Post Metadata 4.9.1 — XSS stocké via la clé de méta d'un champ personnalisé, accessible aux contributeurs et au-delà | ---|--- ID CVE| CVE-2026-88997 Statut| PUBLIÉ CNA| WPScan Publié| 2026-09-23 Mis à jour| 2026-09-23 CWE| CWE-79: Cross-Site Scripting XSS Description Le...

CVE-2026-2600-POC

CVE-2026-2600 ElementsKit Elementor Addons $item echo '' . $item'ekittabtitle' . ''; L'éditeur d'Elementor assainit les entrées côté client, mais le point de terminaison de l'API REST /wp-json/wp/v2/posts/id accepte directement le champ méta elementordata et contourne entièrement cette couche. Un...

CVE-2026-28134

Rapport d'exploitation de CVE-2026-28134 JetEngine = 3.7.2 — Exécution de code à distance authentifiée Contributeur+ via SSTI Twig Date : 11 mars 2026 Score CVSS : 8.8 Élevé Vecteur CVSS : CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Plugin concerné : JetEngine = 3.7.2 Slug du plugin : jet-engine...

CVE-2021-42362

CVE-2021-42362 إضافة WordPress Popular Posts لووردبريس معرضة لتحميل ملفات عشوائية بسبب عدم كفاية التحقق من نوع ملف الإدخال الموجود في ملف /src/Image.php مما يجعل من الممكن للمهاجمين ذوي مستوى المساهم وما فوقه تحميل ملفات ضارة يمكن استخدامها للحصول على تنفيذ كود عن بُعد...

CVE-2026-104646

The Image Photo Gallery Final Tiles Grid WordPress plugin before 3.6.14 does not sanitise several gallery configuration values that can be overridden through its gallery shortcode before printing them into an inline script block, allowing users with contributor-level access and above to inject...

CVE-2026-104645

The Image Photo Gallery Final Tiles Grid WordPress plugin before 3.6.14 does not properly verify authorization on several of its gallery and image management actions, checking ownership against a different object than the one being acted on, or omitting the check entirely, allowing any...

EUVD-2026-94763

The Image Photo Gallery Final Tiles Grid WordPress plugin before 3.6.14 does not properly verify authorization on several of its gallery and image management actions, checking ownership against a different object than the one being acted on, or omitting the check entirely, allowing any...

CVE-2026-104646 Image Photo Gallery Final Tiles Grid < 3.6.14 - Contributor+ Stored XSS via Gallery Shortcode Attributes

The Image Photo Gallery Final Tiles Grid WordPress plugin before 3.6.14 does not sanitise several gallery configuration values that can be overridden through its gallery shortcode before printing them into an inline script block, allowing users with contributor-level access and above to inject...

EUVD-2026-94764

The Image Photo Gallery Final Tiles Grid WordPress plugin before 3.6.14 does not sanitise several gallery configuration values that can be overridden through its gallery shortcode before printing them into an inline script block, allowing users with contributor-level access and above to inject...

PT-2026-107830

The Image Photo Gallery Final Tiles Grid WordPress plugin before 3.6.14 does not properly verify authorization on several of its gallery and image management actions, checking ownership against a different object than the one being acted on, or omitting the check entirely, allowing any...

GHSA-4PVX-FWJJ-8GPC Ghost: Editors Could Promote Staff Users to Their Own Role

Impact Staff users with the Editor or Super Editor role were able to assign their own role to Author and Contributor users, despite not having permission to assign that role. Vulnerable versions This vulnerability is present in Ghost from v0.5.0 up to v6.64.0. Patches v6.64.0 contains a fix for...

CVE-2026-97354

The PowerPress Podcasting plugin by Blubrry WordPress plugin before 11.17.11 does not validate the destination of redirects when fetching a user-supplied media URL, allowing users with the contributor role and above to perform Server-Side Request Forgery attacks against internal services...

EUVD-2026-94192

The PowerPress Podcasting plugin by Blubrry WordPress plugin before 11.17.11 does not validate the destination of redirects when fetching a user-supplied media URL, allowing users with the contributor role and above to perform Server-Side Request Forgery attacks against internal services...

CVE-2026-97354 PowerPress 11.13.12 - 11.17.9 - Contributor+ SSRF via Media URL Redirects

The PowerPress Podcasting plugin by Blubrry WordPress plugin before 11.17.11 does not validate the destination of redirects when fetching a user-supplied media URL, allowing users with the contributor role and above to perform Server-Side Request Forgery attacks against internal services...

WordPress PowerPress Podcasting plugin by Blubrry plugin 11.13.12-11.17.10 - Contributor+ SSRF vulnerability

Contributor+ SSRF vulnerability discovered by Raj Ukani in WordPress Plugin PowerPress Podcasting versions 11.13.12-11.17.10...

CVE-2026-97354

The PowerPress Podcasting plugin by Blubrry for WordPress (versions 11.13.12 - 11.17.10 ) is vulnerable to Server-Side Request Forgery (SSRF) . The root cause is a failure to validate the destination of redirects when the plugin fetches a user-supplied media URL. This allows users with contributo...