DB_Audit_Research

Auditorías autodestructivas — laboratorio reproducible Licencia: MIT código / CC BY 4.0 documentación Investigación de seguridad defensiva que comprueba si un rol de base de datos de bajos privilegios y solo inyección puede cegar reversiblemente a un auditor basado en disparadores y envenenar la...

CVE-2026-89008: Exposure of Sensitive Information to an Unauthorized Actor

The Bookit — Booking & Appointment Calendar WordPress plugin before 2.6.0.5 does not perform an authorization check on one of its appointment-retrieval actions, allowing users with a low-privilege Bookit — Booking & Appointment Calendar WordPress plugin before 2.6.0.5-specific role to read other...

CVE-2022-4483

The Insert Pages WordPress plugin before 3.7.5 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege...