CVE-2015-8351

gwollebuster 此脚本用于利用 WordPress 旧版插件 gwolle 的漏洞 使用方法: ./gwollebuster.py 第一个参数 = 安装了 gwolle 的 WordPress 目标 URL 第二个参数 = 你的 IP 第三个参数 = 用于反向 shell 的监听端口 示例: ./gwollebuster.py http://vulnpress.com/ 192.168.1.5 1234 此脚本将生成 PHP 反向 shell 脚本并绑定简易服务器， 因此你需要在第一个终端打开两个新终端并监听 netcat，然后使用 curl 命令发起请求，...

exploit-CVE-2015-8351

Gwolle Guestbook WordPress Plugin RFI Exploit このPythonスクリプトは、Gwolle Guestbook WordPressプラグインの重大なリモートファイルインクルード（RFI）脆弱性を悪用します。この脆弱性により、認証されていない攻撃者がリモートのPHPファイルをインクルードし、脆弱なシステム上で任意のコードを実行できる可能性があります。 脆弱性の詳細 HTTP...

EUVD-2017-11096

Malware in sbrugna...

EUVD-2021-11892

Malware in sbrugna...

EUVD-2018-9625

Malware in sbrugna...

EUVD-2025-3902

Malicious code in bioql PyPI...

EUVD-2025-20882

Malicious code in bioql PyPI...

CVE-2025-5807

The Gwolle Guestbook plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘gwollegbcontent’ parameter in all versions up to, and including, 4.9.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitra...

CVE-2025-5807 Gwolle Guestbook <= 4.9.2 - Unauthenticated Stored Cross-Site Scripting via `gwolle_gb_content` Parameter

The Gwolle Guestbook plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘gwollegbcontent’ parameter in all versions up to, and including, 4.9.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitra...

CVE-2025-5807 Gwolle Guestbook <= 4.9.2 - Unauthenticated Stored Cross-Site Scripting via `gwolle_gb_content` Parameter

The Gwolle Guestbook plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘gwollegbcontent’ parameter in all versions up to, and including, 4.9.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitra...

CVE-2025-5807: Improper Neutralization of Input During Web Page Generation

The Gwolle Guestbook plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘gwollegbcontent’ parameter in all versions up to, and including, 4.9.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitra...

WordPress plugin Gwolle Guestbook 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin ... A cross-site scripting...

PT-2025-28971 · WordPress · Gwolle Guestbook

Name of the Vulnerable Software and Affected Versions: Gwolle Guestbook versions prior to 4.9.3 Description: The Gwolle Guestbook plugin for WordPress is vulnerable to Stored Cross-Site Scripting through the gwolle gb content parameter. Insufficient input sanitization and output escaping allow...

CVE-2021-24980

The Gwolle Guestbook WordPress plugin before 4.2.0 does not sanitise and escape the gwollegbuseremail parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting issue in an admin page...

CVE-2017-20089

A vulnerability was found in Gwolle Guestbook Plugin 1.7.4. It has been rated as problematic. This issue affects some unknown processing. The manipulation leads to basic cross site scripting. The attack may be initiated remotely...

CVE-2025-24710

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Marcel Pol Gwolle Guestbook gwolle-gb allows Reflected XSS.This issue affects Gwolle Guestbook: from n/a through = 4.7.1...

WordPress Gwolle Guestbook plugin <= 4.7.1 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Peter Thaleikis in WordPress Plugin Gwolle Guestbook versions = 4.7.1...

CVE-2025-24710

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Marcel Pol Gwolle Guestbook gwolle-gb allows Reflected XSS.This issue affects Gwolle Guestbook: from n/a through = 4.7.1...

CVE-2025-24710 WordPress Gwolle Guestbook plugin <= 4.7.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Marcel Pol Gwolle Guestbook gwolle-gb allows Reflected XSS.This issue affects Gwolle Guestbook: from n/a through = 4.7.1...

CVE-2025-24710 WordPress Gwolle Guestbook plugin <= 4.7.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Marcel Pol Gwolle Guestbook allows Reflected XSS. This issue affects Gwolle Guestbook: from n/a through 4.7.1...