EUVD-2026-68795

Unauthenticated Broken Authentication in RegistrationMagic = 6.0.9.8 versions...

CVE-2026-82225

RegistrationMagic (Custom Registration Form Builder with Submission Manager) WordPress plugin versions ≤ 6.0.9.8 are affected by an unauthenticated Broken Authentication vulnerability, discovered by Emiliano Carrizo. The CVSS v3.1 score is 7.4 (HIGH) with a network attack vector, high complexity,...

CVE-2026-82225 WordPress RegistrationMagic plugin <= 6.0.9.8 - Broken Authentication vulnerability

Unauthenticated Broken Authentication in RegistrationMagic = 6.0.9.8 versions...

CVE-2026-82225 WordPress RegistrationMagic plugin <= 6.0.9.8 - Broken Authentication vulnerability

Unauthenticated Broken Authentication in RegistrationMagic = 6.0.9.8 versions...

CVE-2026-82221 WordPress RegistrationMagic plugin <= 6.0.9.8 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in RegistrationMagic = 6.0.9.8 versions...

CVE-2026-82221 WordPress RegistrationMagic plugin <= 6.0.9.8 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in RegistrationMagic = 6.0.9.8 versions...

CVE-2026-82221

CVE-2026-82221 affects the RegistrationMagic WordPress plugin (a custom registration form builder with submission manager) in versions ≤ 6.0.9.8 . The vulnerability is an unauthenticated Cross Site Scripting (XSS) , rated CVSS 3.1: 7.1 (HIGH) with a vector of AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L, ...

EUVD-2026-68793

Unauthenticated Cross Site Scripting XSS in RegistrationMagic = 6.0.9.8 versions...

CVE-2026-81763 WordPress Throws SPAM Away plugin <= 3.8.2 - SQL Injection vulnerability

Unauthenticated SQL Injection in Throws SPAM Away = 3.8.2 versions...

EUVD-2026-68787

Unauthenticated SQL Injection in Throws SPAM Away = 3.8.2 versions...

CVE-2026-81763

CVE-2026-81763 is an unauthenticated SQL injection vulnerability in the WordPress plugin Throws SPAM Away (versions ≤ 3.8.2 ), discovered by Jiemook . The flaw allows a network-based attacker with no privileges to inject SQL queries, leading to a High impact on confidentiality and a Low impact on...

EUVD-2026-68777

Subscriber SQL Injection in Charitable = 1.8.12.1 versions...

CVE-2026-81287 WordPress Charitable plugin <= 1.8.12.1 - SQL Injection vulnerability

Subscriber SQL Injection in Charitable = 1.8.12.1 versions...

CVE-2026-81287

CVE-2026-81287 affects the WordPress Charitable plugin in versions 1.8.12.1 and earlier , where a subscriber-level SQL injection vulnerability exists. The flaw allows an authenticated subscriber to exploit a SQL injection, with a CVSS 3.1 score of 8.5 (HIGH) . The vector CVSS:3.1/AV:N/AC:L/PR:L/U...

CVE-2026-82852 WordPress MapSVG plugin <= 8.15.0 - Server Side Request Forgery (SSRF) vulnerability

Unauthenticated Server Side Request Forgery SSRF in MapSVG = 8.15.0 versions...

CVE-2026-82852

CVE-2026-82852 is an unauthenticated Server-Side Request Forgery (SSRF) vulnerability in the WordPress MapSVG plugin (Interactive Vector Maps), affecting versions 8.15.0 and earlier . The vulnerability is rated CVSS 5.4 (MEDIUM) with a vector of AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N, indicating net...

EUVD-2026-68775

Unauthenticated Server Side Request Forgery SSRF in MapSVG = 8.15.0 versions...

r00kie-kr00kie

r00kie-kr00kie Disclaimer This is a PoC exploit for the CVE-2019-15126 kr00k vulnerability. This project is intended for educational purposes only and cannot be used for law violation or personal gain. The author of this project is not responsible for any possible harm caused by the materials...

Injection-vulnerability-in-Paradox-Security-Systems-IPR512-CVE-2023-24709-PoC

Injection vulnerability in Paradox Security Systems IPR512 - CVE-2023-24709 PoC In Paradox Security System IPR512 Web console login form page, attacker can input JavaScript string, such as that will overwrite configurations in the file "login.xml" and cause the login form to crash and make it...

CVE-2023-45542

CVE-2023-45542 A reflected cross-site scripting XSS vulnerability exisits in the q parameter on search function of mooSocial v3.1.8 which allows attackers to steal user's session cookies and impersonate their account via a crafted URL. Vulerable Parameter: q Exploit - Proof of Concept POC Reflect...