Form-Maker < 1.15.20 - Unauthenticated Arbitrary File Upload

The plugin does not validate signatures when creating them on the server from user input, allowing unauthenticated users to create arbitrary files and lead to RCE. id: CVE-2023-4666 info: name: Form-Maker 1.15.20 - Unauthenticated Arbitrary File Upload author: pussycat0x severity: critical...

Popup-Maker < 1.8.12 - Broken Authentication

An issue was discovered in the Popup Maker plugin before 1.8.13 for WordPress. An unauthenticated attacker can partially control the arguments of the doaction function to invoke certain popmake or pum methods, as demonstrated by controlling content and delivery of popmake-system-info.txt aka the...

Combo Blocks < 2.2.76 - Improper Access Control

The Post Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel WordPress plugin before 2.2.76 does not prevent password protected posts from being displayed in the result of some unauthenticated AJAX actions, allowing unauthenticated users to read such posts id:...

cve-maker

CVE-MAKER Используйте это программное обеспечение только в законных целях. Я никоим образом не несу ответственности за ваши действия. Используйте Python 3.11.2. Создано msd0pe ОПИСАНИЕ cve-maker — это центр поиска CVE и эксплойтов. Он основан на официальных базах данных NIST, ExploitDB и GitHub...

CBM

Car Backdoor Maker Car Backdoor Maker — это программное обеспечение для создания шаблонов атак и их загрузки в The Bicho. Перед началом работы прочитайте, как получить оборудование The Bicho. Скриншот Установка и использование У этого проекта есть вики-страница, где вы найдете следующую полезную...

CVE-2024-6028-Poc

CVE-2024-6028-Poc CVE-2024-6028 Quiz Maker метод getquestionscategories image image image Poc root@kitploit: POST /wp-admin/admin-ajax.php HTTP/1.1 Host: Accept-Encoding: gzip, deflate Accept: / Accept-Language: en-US;q=0.9,en;q=0.8 User-Agent: Mozilla/5.0 Windows NT 10.0; Win64; x64...

cve-2026-3359-exp

CVE-2026-3359 — это неаутентифицированная уязвимость SQL-инъекции, находящаяся в плагине WordPress "Form Maker" от Web10 во всех версиях до версии 1.15.42. Чтобы использовать этот PoC/эксплойт, сначала настройте виртуальное окружение с помощью команд "virtualenv имя вашего окружения" или "venv им...

CVE-2026-7877

The WP Recipe Maker Premium plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wprm-call-to-action' shortcode in all versions up to, and including, 10.5.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possibl...

CVE-2026-7877

WP Recipe Maker Premium for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in the wprm-call-to-action shortcode, affecting all versions up to and including 10.5.0 . The root cause is insufficient input sanitization and output escaping on user-supplied attributes. Attackers with cont...

EUVD-2026-69093

The WP Recipe Maker Premium plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wprm-call-to-action' shortcode in all versions up to, and including, 10.5.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possibl...

CVE-2026-7877 WP Recipe Maker Premium <= 10.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'wprm-call-to-action' Shortcode

The WP Recipe Maker Premium plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wprm-call-to-action' shortcode in all versions up to, and including, 10.5.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possibl...

WordPress WP Recipe Maker Premium plugin <= 10.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'wprm-call-to-action' Shortcode vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via 'wprm-call-to-action' Shortcode vulnerability discovered by theviper17y in WordPress Plugin WP Recipe Maker Premium versions = 10.5.0...

CVE-2024-27876

CVE-2024-27876 libAppleArchive 익스플로잇 제작기, writeup을 여기서 읽으세요 https://snoolie.gay/blog/CVE-2024-27876...

CVE-2026-66616

Unauthenticated Cross Site Scripting XSS in Form Maker by 10Web = 1.15.46 versions...

EUVD-2026-63300

Unauthenticated Cross Site Scripting XSS in Form Maker by 10Web = 1.15.46 versions...

CVE-2026-66616 WordPress Form Maker by 10Web plugin <= 1.15.46 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Form Maker by 10Web = 1.15.46 versions...

CVE-2026-66616

CVE-2026-66616 is an unauthenticated Cross-Site Scripting (XSS) vulnerability in the WordPress plugin Form Maker by 10Web , affecting versions ≤ 1.15.46 . The flaw allows a remote, unauthenticated attacker to inject malicious scripts into the context of a victim's browser, requiring user interact...

PT-2026-78973

Name of the Vulnerable Software and Affected Versions Form Maker by 10Web versions prior to 1.15.47 Description An unauthenticated Cross Site Scripting XSS issue exists, which allows an attacker to execute malicious scripts in the browser of a user without requiring prior authentication...

WordPress Form Maker by 10Web plugin <= 1.15.46 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Elijah Chia in WordPress Plugin Form Maker by 10Web versions = 1.15.46...

CVE-2026-15993

The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to blind SQL Injection via 'username' Placeholder in Dynamic-Choice Field WHERE Clause in all versions up to, and including, 1.15.44 due to insufficient escaping on the user supplied...