730 matches found
HT Mega < 3.0.7 - Sensitive Information Disclosure
The HT Mega plugin for WordPress is vulnerable to Sensitive Information Exposure via AJAX actions. This template dynamically extracts the security nonce before exploitation. id: CVE-2026-4106 info: name: HT Mega 3.0.7 - Sensitive Information Disclosure author: EFETR severity: high description: |...
HT Mega – Absolute Addons for Elementor <= 2.2.0 - Missing Authorization to Privilege Escalation
The HT Mega plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 2.2.0. This is due to missing validation of the regrole parameter on the htmegaajaxregister function. This makes it possible for unauthenticated attackers to create administrator accounts. id...
HT-WPS-Breaker
HT-WPS BREAKER 言語: English High Touch WPS Breaker HT-WB は、bashスクリプト言語をベースにした小さなツールです。脆弱な多くのルーターからWPSピンを抽出し、パスワードを取得するのに役立ちます。最後に、HT-WPS Breakerは処理過程で以下のツールを使用していることをお知らせします。 "Piexiewps" "Reaver" "Bully" "Aircrack Suite" "Wash" そして、自動的にジョブを実行するためのいくつかのコマンドを使用しています。このツールを気に入っていただければ幸いです。 プレビュー ビデオ...
CVE-2026-84935
The HT Menu WordPress plugin before 1.2.7 does not perform any capability or object-ownership check when saving navigation menu-item settings, and does not escape those stored settings when the menu is rendered, allowing users with minimal permissions such as Subscribers to store JavaScript that...
CVE-2026-84935 HT Menu < 1.2.7 - Subscriber+ Stored XSS via Menu Settings
The HT Menu WordPress plugin before 1.2.7 does not perform any capability or object-ownership check when saving navigation menu-item settings, and does not escape those stored settings when the menu is rendered, allowing users with minimal permissions such as Subscribers to store JavaScript that...
EUVD-2026-71874
The HT Menu WordPress plugin before 1.2.7 does not perform any capability or object-ownership check when saving navigation menu-item settings, and does not escape those stored settings when the menu is rendered, allowing users with minimal permissions such as Subscribers to store JavaScript that...
CVE-2026-84935
The HT Menu WordPress plugin before 1.2.7 does not perform any capability or object-ownership check when saving navigation menu-item settings, and does not escape those stored settings when the menu is rendered, allowing users with minimal permissions such as Subscribers to store JavaScript that...
CVE-2026-4106
CVE-2026-4106: WordPress HT Mega 비인증 PII 노출 익스플로잇 WordPress용 HT Mega - Absolute Addons for Elementor 플러그인버전 3.0.7을 대상으로 하는 CVE-2026-4106 강력한 멀티스레드 PoCProof of Concept 익스플로잇입니다. 취약점 개요 HT Mega 플러그인은 위젯용 동적 콘텐츠를 가져오기 위해 여러 wpajaxnopriv 후크예: wcsalespurchasedproducts, htmegauserlistajax를 등록합니다. 그러나 적...
CVE-2024-4875
CVE-2024-4875 HT Mega – Absolute Addons For Elementor = 2.5.2 - 옵션 업데이트에 대한 권한 부족 설명: WordPress용 HT Mega – Absolute Addons For Elementor 플러그인은 버전 2.5.2 및 이전 버전에서 'ajaxdismiss' 함수에 대한 기능 검사 누락으로 인해 데이터의 무단 수정|손실에 취약합니다. 이로 인해 구독자 수준 이상의 권한을 가진 인증된 공격자가 userscanregister와 같은 옵션을 업데이트할 수 있으며, 이는 무단 사...
WordPress-HT-Contact-CVE-2025-7340-RCE
WordPress HT Contact Form Widget | CVE-2025-7340 파일 업로드 취약점 분석 취약점 위치 취약점 위치: ht-contactform/admin/Includes/Services/FileManager.php 핵심 함수: tempfileupload 1. 주요 취약점 지점: tempfileupload 함수 root@kitploit: 63행 public function tempfileupload$file $destination = "$this-dir/temp";...
CVE-2026-68197
In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: fix NULL dereference when the AP has HT-cap but no HT-oper mwifiextdlsaddhtoper gates its follow-the-AP-bandwidth path on bssdesc-bcnhtcap being present, but then dereferences a different pointer, bssdesc-bcnhtoper...
UBUNTU-CVE-2026-68197
In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: fix NULL dereference when the AP has HT-cap but no HT-oper mwifiextdlsaddhtoper gates its follow-the-AP-bandwidth path on bssdesc-bcnhtcap being present, but then dereferences a different pointer, bssdesc-bcnhtoper...
CVE-2026-68197
The CVE-2026-68197 entry describes a Linux kernel vulnerability in mwifiex where a NULL dereference can occur when connecting to an AP that advertises HT Capabilities but not HT Operation. The root cause is that bcn_ht_cap and bcn_ht_oper are populated independently while parsing beacon data; if ...
CVE-2026-68197 wifi: mwifiex: fix NULL dereference when the AP has HT-cap but no HT-oper
In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: fix NULL dereference when the AP has HT-cap but no HT-oper mwifiextdlsaddhtoper gates its follow-the-AP-bandwidth path on bssdesc-bcnhtcap being present, but then dereferences a different pointer, bssdesc-bcnhtoper...
CVE-2026-14206
The HT Contact Form WordPress plugin before 2.9.3 does not perform any authorization check on the endpoint that returns a saved form draft, allowing unauthenticated users to read the personal data name, email, phone, address stored in form drafts...
EUVD-2026-55020
The HT Contact Form WordPress plugin before 2.9.3 does not perform any authorization check on the endpoint that returns a saved form draft, allowing unauthenticated users to read the personal data name, email, phone, address stored in form drafts...
CVE-2026-14206
The CVE-2026-14206 entry concerns the HT Contact Form WordPress plugin prior to version 2.9.3. It discloses that an endpoint which returns a saved form draft does not perform any authorization checks, allowing unauthenticated users to read stored personal data (name, email, phone, address) in dra...
CVE-2026-66474
Unauthenticated Cross Site Request Forgery CSRF in Insert Headers and Footers Code – HT Script = 1.1.8 versions...
CVE-2026-66474
CVE-2026-66474 is an unauthenticated Cross Site Request Forgery (CSRF) vulnerability affecting the WordPress plugin Insert Headers and Footers Code – HT Script up to version 1.1.8 . The issue is described as CSRF in versions