OpenAttack

Documentation • Features & Uses • Usage Examples • Attack Models • Toolkit Design OpenAttack is an open-source Python-based textual adversarial attack toolkit, which handles the whole process of textual adversarial attacking, including preprocessing text, accessing the victim model, generating...

OSIB

OWASP Open Security Information Base OSIB Project Page: https://owasp.org/www-project-open-security-information-base Software Repository: https://github.com/OWASP/OSIB Provided Tools: mkdocsmacroosib.py manually insallable python module osibmacro.py macro to copy that imports the python module...

keebcap

Keebcap This repository contains the code associated to this article in which we talk about building a win32 keylogger that supports all languages not using input method editors. All tests were done on Windows 10 22h2. tree . keylog code ├── capgks.c sample keylogger using GetKeyState ├── capllh....

hacktricks

HackTricks Hacktricks logos & motion design by @ppieranacho . Run HackTricks Locally Download latest version of hacktricks git clone https://github.com/HackTricks-wiki/hacktricks Select the language you want to use export HTLANG="master" Leave master for English "af" for Afrikaans "de" for German...

CVE-2026-76877

The WPML Multilingual CMS plugin for WordPress is vulnerable to Authentication Bypass via Race Condition in versions up to, and including, 4.9.7. This is due to the processiframerequest function's language-per-domain SSO handler generating the cross-domain sign-in token via wpcreatenonce'wpmlsso'...

EUVD-2026-120823

The WPML Multilingual CMS plugin for WordPress is vulnerable to Authentication Bypass via Race Condition in versions up to, and including, 4.9.7. This is due to the processiframerequest function's language-per-domain SSO handler generating the cross-domain sign-in token via wpcreatenonce'wpmlsso'...

CVE-2026-76877

The WPML Multilingual CMS plugin for WordPress (versions up to and including 4.9.7 ) is vulnerable to an Authentication Bypass via Race Condition in its language-per-domain SSO handler. The vulnerability exists because the process_iframe_request function generates a cross-domain sign-in token usi...

CVE-2026-76877 WPML Multilingual CMS <= 4.9.7 - Unauthenticated Authentication Bypass in Language-per-Domain SSO via 'wpml_sso_token_domain' Parameter

The WPML Multilingual CMS plugin for WordPress is vulnerable to Authentication Bypass via Race Condition in versions up to, and including, 4.9.7. This is due to the processiframerequest function's language-per-domain SSO handler generating the cross-domain sign-in token via wpcreatenonce'wpmlsso'...

PT-2026-141546

Name of the Vulnerable Software and Affected Versions WPML Multilingual CMS versions prior to 4.9.8 Description An authentication bypass exists in the language-per-domain Single Sign-On SSO handler. The issue occurs within the process iframe request function during the logout process. When a user...

CVE-2026-76877: WPML WPML Multilingual CMS: The WPML Multilingual CMS plugin for WordPress is vulnerable to Authentication Bypass via Race Condition in versions up…

The WPML Multilingual CMS plugin for WordPress is vulnerable to Authentication Bypass via Race Condition in versions up to, and including, 4.9.7. This is due to the processiframerequest function's language-per-domain SSO handler generating the cross-domain sign-in token via wpcreatenonce'wpmlsso'...

WordPress WPML Multilingual CMS plugin <= 4.9.7 - Unauthenticated Authentication Bypass in Language-per-Domain SSO vulnerability

Unauthenticated Authentication Bypass in Language-per-Domain SSO vulnerability discovered by Yuto Hyakumoto in WordPress Plugin Multilingual CMS versions = 4.9.7...

CVE-2026-121765

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Cozmoslabs TranslatePress translatepress-multilingual allows Stored XSS.This issue affects TranslatePress: from n/a through 3.3.8...

CVE-2026-121765

The Cozmoslabs TranslatePress (translatepress-multilingual) WordPress plugin is vulnerable to Stored Cross-Site Scripting (XSS) due to improper neutralization of input during web page generation. This vulnerability affects versions from n/a through 3.3.8 . Successful exploitation could allow an a...

EUVD-2026-119211

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Cozmoslabs TranslatePress translatepress-multilingual allows Stored XSS.This issue affects TranslatePress: from n/a through 3.3.8...

CVE-2026-121765 WordPress TranslatePress plugin <= 3.3.8 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Cozmoslabs TranslatePress translatepress-multilingual allows Stored XSS.This issue affects TranslatePress: from n/a through 3.3.8...

PT-2026-139207

Name of the Vulnerable Software and Affected Versions TranslatePress versions prior to 3.3.9 Description Insufficient input sanitization and output escaping allow unauthenticated attackers to perform Stored Cross-Site Scripting. This occurs via the comment parameter used for storage and the...

CVE-2026-120563

The WooCommerce Multilingual & Multicurrency with WPML plugin for WordPress is vulnerable to SQL Injection in all versions up to, and including, 5.5.7. This is due to insufficient input validation on the currency exchange rate parameter in the savecurrency AJAX handler, which lacks capability...

WordPress WPML Multilingual & Multicurrency for WooCommerce plugin <= 5.5.7 - Authenticated (Shop Manager+) SQL Injection vulnerability

Authenticated Shop Manager+ SQL Injection vulnerability discovered by Muni Nitish Kumar Yaddala Stranger825 in WordPress Plugin WooCommerce Multilingual & Multicurrency versions = 5.5.7...

CVE-2026-120563 WPML Multilingual & Multicurrency for WooCommerce <= 5.5.7 - Authenticated (Shop Manager+) SQL Injection via Exchange Rate Field

The WooCommerce Multilingual & Multicurrency with WPML plugin for WordPress is vulnerable to SQL Injection in all versions up to, and including, 5.5.7. This is due to insufficient input validation on the currency exchange rate parameter in the savecurrency AJAX handler, which lacks capability...

CVE-2026-120563

The WooCommerce Multilingual & Multicurrency with WPML plugin for WordPress is vulnerable to SQL Injection in versions up to and including 5.5.7 . The root cause is insufficient input validation on the currency exchange rate parameter within the save_currency() AJAX handler, which lacks proper ca...