4903 matches found
EUVD-2026-124972
The SureDash β Community, Courses & Member Dashboard plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.13.0 This is due to the savesettings REST handler at /suredash/v1/save-settings being gated only by adminpermissioncallback, which authorizes any...
EUVD-2026-124847
The WPCOM Member WordPress plugin before 1.8.3 does not limit or bind attempts to verify WeChat login codes, allowing unauthenticated attackers to brute-force a code issued to another user and log in as that user, including administrators, when WeChat official-account keyword login is enabled...
CVE-2026-123711
The WPCOM Member WordPress plugin, versions before 1.8.3 , contains a vulnerability where it fails to limit or bind attempts to verify WeChat login codes . When WeChat official-account keyword login is enabled, an unauthenticated attacker can brute-force a code issued to another user. This can le...
bitwarden-cipher-create-acl
abraxaslabs.tech Β· github.com/abraxas Β· @abraxasnull Β· [email protected] Β· bitwarden-cipher-create-acl Write-up: https://abraxaslabs.tech/research/bitwarden-cipher-create-acl bitwarden-cipher-create-acl Bitwarden Server v2026.9.2 - Bitwarden Org cipher create on the Entity Framework path...
Ultimate Member < 2.1.12 - Unauthenticated Privilege Escalation via User Meta
An issue was discovered in the Ultimate Member plugin before 2.1.12 for WordPress, aka Unauthenticated Privilege Escalation via User Meta. An attacker could supply an array parameter for sensitive metadata, such as the wpcapabilities user meta that defines a user's role. During the registration...
Member Hero <=1.0.9 - Remote Code Execution
WordPress Member Hero plugin through 1.0.9 is susceptible to remote code execution. The plugin lacks authorization checks and does not validate the a request parameter in an AJAX action, allowing an attacker to call arbitrary PHP functions with no arguments. An attacker can thus execute malware,...
WordPress WPCOM Member <= 1.7.6 - SQL Injection
WPCOM Member plugin for WordPress up to 1.7.6 contains a time-based SQL Injection caused by insufficient escaping and lack of preparation on the 'userphone' parameter, letting unauthenticated attackers extract sensitive information, exploit requires sending crafted 'userphone' parameter. id:...
WordPress Ultimate Member 2.1.3 - 2.8.2 β SQL Injection
The Ultimate Member - User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to SQL Injection via the βsortingβ parameter in versions 2.1.3 to 2.8.2 due to insufficient escaping on the user supplied parameter and lack of...
CVE-2023-3460
π¨ CVE-2023-3460 - WordPress Ultimate Member Privilege Escalation Exploit This is a proof-of-concept PoC exploit for CVE-2023-3460, a critical vulnerability in the WordPress plugin Ultimate Member. It allows unauthenticated users to escalate their privileges to Administrator by crafting a maliciou...
CVE-2026-96451
CVE-2026-96451 WordPress Ultimate Member plugin Authorization Bypass Through User-Controlled Key vulnerability in Ultimate Member Ultimate Member ultimate-member allows Privilege Escalation. This issue affects Ultimate Member: from n/a through 2.13.1. Field| Value ---|--- π CVE| CVE-2026-96451 π·οΈ...
CVE-2024-1071-SQL-Injection
Proof of concept CVE-2024-1071: WordPress Vulnerability Exploited Disclaimer : This Proof of Concept POC is made for educational and ethical testing purposes only. Usage of this tool for attacking targets without prior mutual consent is illegal. It is the end userβs responsibility to obey all...
CVE-2023-3460
CVE-2023-3460 Exploit for CVE-2023-3460 - Unauthorized admin access for Ultimate Member plugin. PoC is now published. It was created for educational/research purposes only! Use it at your own risk!...
CVE-2026-65591
CVE-2026-65591 Name of the Vulnerable Software and Affected Versions n8n versions prior to 1.123.64 n8n versions prior to 2.29.8 n8n versions prior to 2.30.1 Description A sanitizer bypass exists in the legacy expression evaluator's computed-member handler. An authenticated user with permissions ...
WordPress-Exploit-CVE-2024-1071
WordPress CVE 2024-1071 SQL Exploit This exploit, which runs on WordPress versions 2.1.3 to 2.8.2, allows unauthenticated attackers to add additional SQL queries to existing queries that can be used to pull sensitive information from the database. Dork: body="/wp-content/plugins/ultimate-member" ...
S2-053-CVE-2017-12611
S2-053-CVE-2017-12611 A simple script for exploit RCE for Struts 2 S2-053CVE-2017-12611 Usage exploit.py Example $ python s2-053-exploit.py "http://127.0.0.1" "name" "uname -a" Generated EXP:...
CVE-2023-3460
Ultimate Member - Overview Welcome to the Ultimate Member GitHub repository! Ultimate Member is a powerful and flexible user profile and membership plugin for WordPress but Sometimes Plugins has some vulnerability and lead to website compromisation Important Notice: Please note that the version o...
CVE-2024-1071-PoC-Script
CVE-2024-1071 Exploit Script π π Disclaimer This Proof of Concept POC is made for educational and ethical testing purposes only. Usage of this tool for attacking targets without prior mutual consent is illegal. It is the end userβs responsibility to obey all applicable local, state, and federal...
CVE-2026-46552
CVE-2026-46552 NocoDB Shared-Base Links Could Invite Real Base Members and Survive Share Revocation Intro I found this issue while reviewing NocoDB , with a simple security question in mind: Can a public shared-base link cross the boundary from temporary shared access into real authenticated base...
CVE-2026-67541
Heym builds and runs agentic systems and business-process automations on self-hosted infrastructure. Prior to version 0.0.70, team-member management add / remove / update is gated only on team membership, not on the team creator/admin role β and TeamMember has no role column. Any non-creator memb...