24 matches found
wp2shell-Exploit-Waf-Bypass
root@kitploit: | \ / / / / / | | /| / / \ / // / / / / / | |/ |/ / // // / / / / / / / |/|/////// ///// WordPress Pre-Auth RCE — CVE-2026-63030 + CVE-2026-60137 di Venexy M4xSec Esecuzione remota di codice senza autenticazione su WordPress 6.8.0–6.8.5, 6.9.0–6.9.4, 7.0.0–7.0.1. Corretto in...
wp2shell-poc-fulljs
WordPress CVE Logical Flow Demonstration Overview This project allows to reproduce the logical flow related to CVE-2026-63030 and CVE-2026-60137 leading to an sql injection serving as a base to finally trigger a RCE in WordPress. CVE-2026-63030 CVE-2026-60137 The demonstration illustrates how the...
wp2shell-scanner
wp2Shell Scanner – con PoC CVE-2026-63030 e CVE-2026-60137 – scanner per la catena di vulnerabilità wp2shell di WordPress Strumento autorizzato per la ricerca sulla sicurezza con PoC opzionale di verifica dei comandi. wp2shell-scanner rileva la catena di vulnerabilità wp2shell di WordPress...
wp2shell_scanner
wp2shellscanner Scanner di rilevamento non intrusivo per le recenti vulnerabilità del core di WordPress — inclusa la catena RCE pre-autenticazione wp2shell. wp2shellscanner.py identifica la versione del core di un sito WordPress e legge la sua superficie dell'API REST pubblicamente esposta, quind...
CVE-2026-63030
wp2shell CVE-2026-63030 / CVE-2026-60137...
Ultimate-wp2shell
WP2Shell – Prova di Concetto Prova di Concetto PoC educativa e difensiva per la validazione dell'esposizione alle vulnerabilità del WordPress Core CVE-2026-60137 e CVE-2026-63030 WP2Shell. Panoramica Questo repository fornisce una prova di concetto difensiva per il rilevamento e la validazione...
wp2shell
wp2shell CVE-2026-63030 + CVE-2026-60137+poc Esta vulnerabilidade não é muito fácil de explorar. Comando de execução de comandos no banco de dados: SELECT GROUPCONCATSCHEMANAME FROM INFORMATIONSCHEMA.SCHEMATA Referência: https://github.com/Icex0/wp2shell-poc Porém, há um problema aqui: a adição d...
Exploit for SQL Injection in Wordpress
|...
Exploit for Interpretation Conflict in Wordpress
wp2shell-hestia-scanner Read-only WordPress security scanner...
BIT-WORDPRESS-2026-63030 WordPress < 7.0.2 - REST API batch-route confusion and SQL injection issue leading to Remote Code Execution
WordPress 6.9.x before 6.9.5 and 7.0.x before 7.0.2 is affected by a REST API batch endpoint route confusion issue which, combined with the authornotin WPQuery SQL Injection CVE-2026-60137, could allow an attacker to perform SQL Injection and achieve Remote Code Execution...
Exploit for Interpretation Conflict in Wordpress
wp2shell CVE-2026-63030 + CVE-2026-60...
Exploit for SQL Injection in Wordpress
CVE-2026-60137-With-Skip-...
Exploit for CVE-2026-63030
Plugin Acyber Wordpress !WARNING Temporary Emergency...
WordPress Core Interpretation Conflict Vulnerability
WordPress Core contains an interpretation conflict vulnerability that could allow an attacker to perform SQL Injection and achieve Remote Code Execution. This vulnerability can be chained with CVE-2026-60137...
wp2shell-Wordpress-TOWN
wp2shell by : lucifer0xf Unauthenticated Remote Code...
Exploit for CVE-2026-63030
Lab — CVE-2026-63030 “wp2shell” + CVE-2026-60137 Ambiente D...
Exploit for CVE-2026-63030
wp2shell-check Non-intrusive exposure checker for the WordPre...
Exploit for CVE-2026-60137
wp2shell-scanner by @bahartanirhttps://github.com/baha...