CVE-2026-89274-wp-recipe-maker-poc

CVE-2026-89274 - WP Recipe Maker Arbitrary Shortcode Execution Validation Lab Security-research material for reproducing and validating CVE-2026-89274 : WP Recipe Maker Use only on systems you own or are explicitly authorized to test. The PoC posts one rating comment containing a lab-registered...

CBM

Car Backdoor Maker The Car Backdoor Maker is a software for making attack templates and load them into The Bicho. Before starting, please read how to Get The Bicho hardware. Screnshot Install and Usage This project has its wiki where you will find the following useful documentation: Installation...

Form-Maker < 1.15.20 - Unauthenticated Arbitrary File Upload

The plugin does not validate signatures when creating them on the server from user input, allowing unauthenticated users to create arbitrary files and lead to RCE. id: CVE-2023-4666 info: name: Form-Maker 1.15.20 - Unauthenticated Arbitrary File Upload author: pussycat0x severity: critical...

Popup-Maker < 1.8.12 - Broken Authentication

An issue was discovered in the Popup Maker plugin before 1.8.13 for WordPress. An unauthenticated attacker can partially control the arguments of the doaction function to invoke certain popmake or pum methods, as demonstrated by controlling content and delivery of popmake-system-info.txt aka the...

Combo Blocks < 2.2.76 - Improper Access Control

The Post Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel WordPress plugin before 2.2.76 does not prevent password protected posts from being displayed in the result of some unauthenticated AJAX actions, allowing unauthenticated users to read such posts id:...

cve-maker

CVE-MAKER Use this software only for legal purposes. I am in no way responsible for your actions. Use python 3.11.2 Made by msd0pe DESCRIPTION cve-maker is a hub for finding CVEs and exploits. It is based on the official NIST, ExploitDB and Github databases. The tool makes it quick and easy to...

CVE-2024-27876

CVE-2024-27876 libAppleArchive exploit maker, read the writeup here https://snoolie.gay/blog/CVE-2024-27876...

cve-2026-3359-exp

CVE-2026-3359 is an unauthenticated SQL Injection vulnerability situated within Web10's wordpress plugin "Form Maker" in all versions up to version 1.15.42. In order to use this PoC/exploit, first set up a virtual enviroment through the commands "virtualenv name of your enviroment here" or "venv...

CVE-2026-89274

CVE-2026-89274 — WP Recipe Maker Arbitrary Shortcode Execution Python 3 PoC scanner/exploit for CVE-2026-89274 in WP Recipe Maker. | ---|--- Plugin| wp-recipe-maker Affected| ≤ 10.8.1 Fixed in| 10.8.2+ CVSS| 9.1 Critical Auth| Unauthenticated comment submit CWE| CWE-94 Summary...

CVE-2026-87915-PoC-pwnVader

CVE-2026-87915 — Popup Maker = 1.24.0 — Unauthenticated stored XSS valuesName Author: pwnVader · License: MIT repository root | ---|--- Component| Popup Maker – Boost Sales, Conversions, Optins, Subscribers WordPress plugin Type| CWE-79 — Stored Cross-Site Scripting Affected| = 1.24.0 Fixed| 1.25...

By-Poloss..-.CVE-2026-89274

CVE-2026-89274 PoC Poloss : @WPEF0 Proof-of-Concept exploit untuk CVE-2026-89274 — kerentanan Unauthenticated Arbitrary Shortcode Execution pada plugin WordPress WP Recipe Maker versi ≤ 10.8.1. ⚠️ LEGAL & ETHICAL WARNING This script is provided only for security research in a local environment...

CVE-2024-6028-Poc

CVE-2024-6028-Poc CVE-2024-6028 Quiz Maker method getquestionscategories image image image Poc POST /wp-admin/admin-ajax.php HTTP/1.1 Host: Accept-Encoding: gzip, deflate Accept: / Accept-Language: en-US;q=0.9,en;q=0.8 User-Agent: Mozilla/5.0 Windows NT 10.0; Win64; x64 AppleWebKit/537.36 KHTML,...

CVE-2026-119483

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in 10Web Form Maker by 10Web form-maker allows Stored XSS.This issue affects Form Maker by 10Web: from n/a through 1.15.50...

CVE-2026-119483 WordPress Form Maker by 10Web plugin <= 1.15.50 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in 10Web Form Maker by 10Web form-maker allows Stored XSS.This issue affects Form Maker by 10Web: from n/a through 1.15.50...

CVE-2026-119483

The 10Web Form Maker by 10Web WordPress plugin (versions n/a through 1.15.50 ) is vulnerable to a Stored Cross-site Scripting (XSS) vulnerability. This issue is caused by the improper neutralization of input during web page generation . The vulnerability allows an attacker to inject and store mal...

EUVD-2026-119923

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in 10Web Form Maker by 10Web form-maker allows Stored XSS.This issue affects Form Maker by 10Web: from n/a through 1.15.50...

CVE-2026-119483: 10Web Form Maker by 10Web: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 10Web Form Maker…

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in 10Web Form Maker by 10Web form-maker allows Stored XSS.This issue affects Form Maker by 10Web: from n/a through 1.15.50...

PT-2026-140331

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in 10Web Form Maker by 10Web form-maker allows Stored XSS.This issue affects Form Maker by 10Web: from n/a through 1.15.50...

CVE-2026-122060

The WP Recipe Maker WordPress plugin before 10.9.2 does not check whether the post a recipe is embedded in is password protected before returning the recipe through its REST API and structured data output, allowing unauthenticated users to read the full content of recipes in password-protected...

CVE-2026-122060

The WP Recipe Maker WordPress plugin (versions before 10.9.2 ) contains a vulnerability where it fails to verify if a post containing a recipe is password-protected. This allows unauthenticated users to access and read the full content of recipes hosted in password-protected posts via the plugin'...