CVE-2026-6433

CVE-2026-6433 — 개념 증명 FlipperCode — 커스텀 CSS, JS 및 PHP · 인증되지 않은 SQL 인젝션 → RCE eval을 통해 영향 받는 버전: FlipperCode 커스텀 CSS, JS 및 PHP ≤ 2.0.7 · WordPress 플러그인의 공격 표면 admin-ajax.php를 통해 한눈에 보기 항목| 세부사항 ---|--- 벡터| 플러그인 AJAX 액션을 통해 터널링된 인증되지 않은 SQLi 영향| WordPress 호스트에서 원격 코드 실행 페이로드가 문서 루트에 기록된 후 PHP 컨텍스트...

FlipperCode Custom CSS, JS & PHP <= 2.0.7 - Remote Code Execution

Custom css-js-php WordPress plugin through 2.0.7 contains a command injection caused by unsanitized user input used in SQL query and passed to eval, letting unauthenticated attackers execute arbitrary PHP code on the server. id: CVE-2026-6433 info: name: FlipperCode Custom CSS, JS & PHP = 2.0.7 -...

Exploit for CVE-2026-6433

CVE-2026-6433 — Proof of Concept FlipperCode — Custom CSS,...

PT-2026-33983

Name of the Vulnerable Software and Affected Versions Custom css-js-php versions prior to 2.0.8 Description The plugin fails to properly sanitize user input before incorporating it into a SQL query. The resulting output is then passed to the eval function, which enables unauthenticated users to...

CVE-2025-39465

Missing Authorization vulnerability in flippercode Advanced Google Maps wp-google-map-gold allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Advanced Google Maps: from n/a through = 5.8.4...

CVE-2025-39465

Missing Authorization vulnerability in flippercode Advanced Google Maps wp-google-map-gold allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Advanced Google Maps: from n/a through = 5.8.4...

CVE-2025-39465 WordPress Advanced Google Maps plugin <= 5.8.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in flippercode Advanced Google Maps wp-google-map-gold allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Advanced Google Maps: from n/a through = 5.8.4...

EUVD-2025-38029

Missing Authorization vulnerability in flippercode Advanced Google Maps wp-google-map-gold allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Advanced Google Maps: from n/a through = 5.8.4...

EUVD-2023-27961

Malicious code in bioql PyPI...

EUVD-2023-31880

Malicious code in bioql PyPI...

CVE-2023-28172

Cross-Site Request Forgery CSRF vulnerability in flippercode WordPress Plugin for Google Maps – WP MAPS formerly WP Google Map Plugin plugin = 4.4.2 versions...

CVE-2023-23878

Auth. editor+ Stored Cross-Site Scripting XSS vulnerability in flippercode WordPress Plugin for Google Maps – WP MAPS plugin = 4.3.9 versions...

CVE-2023-28172

Cross-Site Request Forgery CSRF vulnerability in flippercode WordPress Plugin for Google Maps – WP MAPS formerly WP Google Map Plugin plugin = 4.4.2 versions...

CVE-2023-28172

CVE-2023-28172 concerns CSRF in the WordPress WP MAPS plugin (formerly WP Google Map Plugin) by flippercode, affected versions up to 4.4.2. The issue is documented as unauthenticated CSRF with low to moderate impact depending on source; Patchstack reports a fix in 4.4.3. Red Hat/NVD Wordfence ent...

CVE-2023-28172: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in flippercode WordPress Plugin for Google Maps – WP MAPS formerly WP Google Map Plugin plugin = 4.4.2 versions...

CVE-2023-23878

Auth. editor+ Stored Cross-Site Scripting XSS vulnerability in flippercode WordPress Plugin for Google Maps – WP MAPS plugin = 4.3.9 versions...

PT-2023-19276 · Flippercode · Wp Maps Plugin

Name of the Vulnerable Software and Affected Versions: flippercode WordPress Plugin for Google Maps – WP MAPS plugin versions = 4.3.9 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability. This vulnerability affects users with editor or higher permissions. There is ...

CVE-2023-23878: Improper Neutralization of Input During Web Page Generation

Auth. editor+ Stored Cross-Site Scripting XSS vulnerability in flippercode WordPress Plugin for Google Maps – WP MAPS plugin = 4.3.9 versions...