27 matches found
wp2shell-Exploit-Waf-Bypass
root@kitploit: | \ / / / / / | | /| / / \ / // / / / / / | |/ |/ / // // / / / / / / / |/|/////// ///// WordPress 未认证 RCE — CVE-2026-63030 + CVE-2026-60137 作者：Venexy M4xSec 对 WordPress 6.8.0–6.8.5、6.9.0–6.9.4、7.0.0–7.0.1 的未认证远程代码执行。已在 6.8.6、6.9.5、7.0.2 中修复。 快速安装 root@kitploit: 预编译二进制文件（最快） curl...
wp2shell
wp2shell CVE-2026-63030 + CVE-2026-60137+poc 这个漏洞不是太好利用。 数据库命令执行命令： SELECT GROUPCONCATSCHEMANAME FROM INFORMATIONSCHEMA.SCHEMATA 参考：https://github.com/Icex0/wp2shell-poc 不过这个有一点问题就是 添加账号密码不成功。...
Ultimate-wp2shell
WP2Shell – Prueba de Concepto Prueba de Concepto PoC educativa y defensiva para validar la exposición a las vulnerabilidades del núcleo de WordPress CVE-2026-60137 y CVE-2026-63030 WP2Shell. Resumen Este repositorio proporciona una prueba de concepto de detección y validación defensiva para las...
wp2shell-poc-fulljs
Demostración del flujo lógico de CVE de WordPress Descripción general Este proyecto permite reproducir el flujo lógico relacionado con CVE-2026-63030 y CVE-2026-60137 que conduce a una inyección SQL que sirve como base para finalmente desencadenar un RCE en WordPress. CVE-2026-63030 CVE-2026-6013...
wp2shell_scanner
wp2shellscanner Escáner de detección no intrusivo para vulnerabilidades recientes de WordPress core — incluida la cadena RCE de pre-autenticación wp2shell. wp2shellscanner.py toma la huella de la versión del core de un sitio WordPress y lee su superficie de API REST publicitada públicamente, y...
wp2shell-scanner
wp2Shell 扫描器 – 附带 PoC CVE-2026-63030 和 CVE-2026-60137 – WordPress wp2shell 漏洞链扫描器 经授权的安全研究工具，带有可选命令验证 PoC。 wp2shell-scanner 通过验证公开的 WordPress 证据、指纹暴露的版本、检查 REST 批处理行为以及测量主动时序差异，来检测 WordPress wp2shell 漏洞链。它适用于授权的防御性研究、CTF 环境以及你拥有或管理的系统。 ⚠️ 法律与道德声明 本项目严格限于授权的安全测试和防御性研究。 仅针对你拥有、管理或已获得明确许可的系统使用。...
CVE-2026-63030
wp2shell CVE-2026-63030 / CVE-2026-60137 | ---|--- 名称| wp2shell CVE| CVE-2026-63030 batch desync, CVE-2026-60137 authornotin SQLi 受影响版本| WordPress 6.9.0 至 6.9.4, 7.0.0 至 7.0.1 修复版本| 6.9.5, 7.0.2 所需认证| 无 发现者| Adam Kues Searchlight Cyber / Assetnote 用法 裸主机 = 自动选择协议（依次尝试 https:// 和...
abdal-cve-2026-63030
English | فارسی 🛡️ Abdal CVE-2026-63030 PoC Exploits Abdal CVE-2026-63030 is a defensive WordPress exposure verifier for the REST API batch route confusion tracked as CVE-2026-63030. The issue can be chained with CVE-2026-60137 on affected WordPress releases and may lead to remote code execution...
Exploit for SQL Injection in Wordpress
PoC: WP2Shell — CVE-2026-63030 & CVE-2026-60137...
wp2shell-Exploit-Waf-Bypass
🛡️ wp2shell-Exploit-Waf-Bypass - Turn WordPress Vulnerabilitie...
Exploit for SQL Injection in Wordpress
|...
Exploit for Interpretation Conflict in Wordpress
wp2shell-hestia-scanner Read-only WordPress security scanner...
BIT-WORDPRESS-2026-63030 WordPress < 7.0.2 - REST API batch-route confusion and SQL injection issue leading to Remote Code Execution
WordPress 6.9.x before 6.9.5 and 7.0.x before 7.0.2 is affected by a REST API batch endpoint route confusion issue which, combined with the authornotin WPQuery SQL Injection CVE-2026-60137, could allow an attacker to perform SQL Injection and achieve Remote Code Execution...
Exploit for Interpretation Conflict in Wordpress
wp2shell CVE-2026-63030 + CVE-2026-60...
Exploit for SQL Injection in Wordpress
CVE-2026-60137-With-Skip-...
Exploit for CVE-2026-63030
Plugin Acyber Wordpress !WARNING Temporary Emergency...
WordPress Core Interpretation Conflict Vulnerability
WordPress Core contains an interpretation conflict vulnerability that could allow an attacker to perform SQL Injection and achieve Remote Code Execution. This vulnerability can be chained with CVE-2026-60137...
wp2shell-Wordpress-TOWN
wp2shell by : lucifer0xf Unauthenticated Remote Code...