CVE-2023-32590

CVE-2023-32590 Subscribe to Category = 2.7.4 - 未认证SQL注入 描述 Subscribe to Category WordPress插件在版本2.7.4及之前存在SQL注入漏洞，原因是用户提供的参数转义不足，且现有SQL查询缺乏充分的预处理。这使得未经身份验证的攻击者能够将额外的SQL查询追加到现有查询中，从而从数据库中提取敏感信息。CVE-2023-38382可能是此问题的重复分配。 详细信息 类型 : 插件 Slug : subscribe-to-category 受影响版本 : 2.7.4 CVSS分数 : 9.8 CVSS评级 : ...

Relevanssi <= 4.24.4 (Free) - Unauthenticated SQL Injection

The Relevanssi – A Better Search plugin for WordPress is vulnerable to time-based SQL Injection via the cats and tags query parameters in all versions up to, and including, 4.24.4 Free and = 2.27.4 Premium due to insufficient escaping on the user supplied parameter and lack of sufficient...

CVE-2024-3293-Poc

CVE-2024-3293-Poc rtMedia para WordPress, BuddyPress y bbPress get \buddypress-media\app\helper\RTMediaModel.php:61 RTMediaModel-getmedia \buddypress-media\app\helper\RTMediaModel.php:227 RTMediaQuery-populatemedia \buddypress-media\app\main\routers\query\RTMediaQuery.php:869...

CVE-2024-24576-PoC

CVE-2024-24576 PoC Command::arg 和 Command::args API 在文档中声明，参数将原封不动地传递给派生进程，无论参数内容如何，并且不会被 shell 求值。这意味着将不受信任的输入作为参数传递应该是安全的。 在 Windows 上，此实现的复杂度高于其他平台，因为 Windows API 仅提供一个包含所有参数的单一字符串给派生进程，由派生进程自行拆分。大多数程序使用标准 C 运行时 argv，实际上会导致参数拆分方式基本一致。 但有一个例外是...

cve-2020-7247

cve-2020-7247 Título del exploit: OpenSMTPD 6.6.2 - Ejecución Remota de Código. Fecha: 2020-01-29. Autor del exploit: 1F98D. Autor original: Qualys Security Advisory. Sitio web del proveedor: https://www.opensmtpd.org/. Enlace del software:...

CVE-2024-55988

CVE-2024-55988 Navayan CSV Export = 1.0.9 - Inyección SQL no autenticada Descripción El plugin Navayan CSV Export para WordPress es vulnerable a Inyección SQL en versiones hasta la 1.0.9 inclusive, debido a un escape insuficiente del parámetro proporcionado por el usuario y a la falta de...

CVE-2024-55982

CVE-2024-55982 Share Buttons – Social Media = 1.0.2 - Inyección SQL no autenticada Descripción El plugin Share Buttons – Social Media para WordPress es vulnerable a Inyección SQL en las versiones hasta la 1.0.2 incluida, debido a un escape insuficiente del parámetro proporcionado por el usuario y...

CVE-2024-55978

CVE-2024-55978 Code Generator Pro = 1.2 - Unauthenticated SQL Injection Description The Code Generator Pro plugin for WordPress is vulnerable to SQL Injection in versions up to, and including, 1.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on th...

CVE-2026-73073

A flaw was found in Vim, an open-source command-line text editor. An attacker could craft a malicious tags file that, when processed by Vim's C omni-completion feature, leads to insufficient escaping of input. This vulnerability allows for the execution of arbitrary Ex commands and, subsequently,...

CVE-2024-1874

CVE-2024-1874 Prueba de concepto para CVE-2024-1874 Inyección de comandos a través del parámetro $command tipo array de procopen bypass de la corrección de CVE-2024-1874 El CVE: En las versiones de PHP 8.1. anteriores a 8.1.29, 8.2. anteriores a 8.2.20, 8.3. anteriores a 8.3.8, la corrección para...

CVE-2026-5513

CVE-2026-5513 https://t.me/FreeToolsCpa CVE-2026-5513 — Bookly ≤ 27.2 存储型XSS via Cookie CVE-2026-5513 — Bookly ≤ 27.2 存储型XSS via Cookie CVE CVSS 类型 认证 https://t.me/FreeToolsCpa CVE 文件在群组 概述 字段 值 CVE ID CVE-2026-5513 漏洞类型 存储型跨站脚本（XSS） 插件 Bookly — 在线预约和预约管理系统 受影响版本 ≤ 27.2 修复版本 27.3+ CVSS 3.1 7.2（高危...

CVE-2024-3217-POC

CVE-2024-3217-POC Descripción de Mitre El plugin WP Directory Kit para WordPress es vulnerable a inyección SQL a través de los parámetros 'attributevalue' y 'attributeid' en todas las versiones hasta la 1.3.0 inclusive, debido a un escape insuficiente en el parámetro proporcionado por el usuario ...

CVE-2026-19859 JetFormBuilder < 3.6.5.2 - Unauthenticated Arbitrary Shortcode Execution via 'status' Parameter

The JetFormBuilder WordPress plugin before 3.6.5.2 does not sanitize a request parameter before rendering it as message content, allowing unauthenticated users to execute arbitrary shortcodes registered on the site on any page displaying a form. Escaping is applied to that content before a later...

CVE-2026-15101

The WPBakery Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'data' parameter in all versions up to, and including, 8.7.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level...

CVE-2026-55673 PowSyBl: Command Injection in LocalCommandExecutor-s

PowSyBl Power System Blocks is a framework to build power system oriented software. Prior to 7.2.2, UnixLocalCommandExecutor and WindowsLocalCommandExecutor concatenate command arguments and environment variables into strings interpreted through bash -c or cmd /c without sufficient escaping...

CVE-2026-78468

...

CVE-2026-78468

CVE-2026-78468 is a reservation duplicate of CVE-2026-78270 . Per connected documents, the underlying vulnerability affects the FluentCRM Pro WordPress plugin in all versions up to and including 3.1.12 . The root cause is SQL Injection due to insufficient escaping on user-supplied parameters and ...

EUVD-2026-65579

The FluentCRM Pro – Email Newsletter, Automation, Email Marketing, Email Campaigns, Optins, Leads, and CRM Solution plugin for WordPress is vulnerable to SQL Injection in all versions up to, and including, 3.1.12 due to insufficient escaping on the user supplied parameter and lack of sufficient...

EUVD-2026-65459

The Media Sweep – WordPress Media Cleaner plugin for WordPress is vulnerable to generic SQL Injection via the 'fields' parameter in all versions up to, and including, 1.1.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. Th...

CVE-2026-77824

Media Sweep – WordPress Media Cleaner (all versions up to and including 1.1.3 ) is affected by a SQL Injection vulnerability in the 'fields' parameter of its REST API. The root cause is insufficient escaping of the user-supplied parameter combined with lack of proper query preparation, as seen in...