CVE-2021-24356

CVE-2021-24356 Simple 301 Redirects by BetterLinks - 2.0.0 – 2.0.3 - 订阅者 + 任意插件安装 Description 该插件中的 AJAX 操作缺乏权限检查且 nonce 检查不充分，使得经过身份验证的用户可以在易受攻击的站点上安装任意插件。 使用方法 $ python3 CVE-2021-24356.py --url http://wordpress.lan --username user --password useruser1 --slug betterlinks Getting REST API Nonce!...

CVE-2025-2539

CVE-2025-2539 - WordPress File Away = 3.9.9.0.1 - Lectura Arbitraria de Archivos 🔥 Resumen de la Vulnerabilidad El plugin de WordPress File Away versión = 3.9.9.0.1 es vulnerable a una vulnerabilidad de lectura arbitraria de archivos sin autenticación. Esto permite a los atacantes leer cualquier...

CVE-2024-32444

CVE-2024-32444 As of 24/01/25 this vulnerabiltiy does not have a patch hence this is simply a product detection template as all products associated with the RealHome wordpress theme are vulnerable. The theme allows users to register new accounts via the inspiryajaxregister function, however, it...

CVE-2025-1306

Exploit de Newscrunch CVE-2025-1306 🚨 Descripción general Este exploit apunta a una vulnerabilidad de Cross-Site Request Forgery CSRF a Subida Arbitraria de Archivos CVE-2025-1306 en el tema Newscrunch para WordPress. Debido a la falta de validación de nonce en la función...

CVE-2026-11784-Optimole-CSRF

CVE-2026-11784：Optimole WordPress 插件中的 CSRF 导致任意文件覆盖 摘要 Optimole WordPress 插件（版本 = 4.2.5）中存在跨站请求伪造（CSRF）漏洞，由于缺少 nonce 验证，未经身份验证的攻击者可通过 wpajaxoptmlreplacefile AJAX 操作静默覆盖现有的媒体库资源。 CVE ID ：CVE-2026-11784 漏洞类型 ：跨站请求伪造（CSRF） 受影响插件 ：Optimole – 优化图片 修复版本 ：4.2.6 发现者 ：Alexandru Bucur 技术分析 漏洞位于...

CVE-2026-92410 Sign-up Sheets < 2.4.0 - Arbitrary Sign-up Deletion via CSRF

The Sign-up Sheets WordPress plugin before 2.4.0 does not properly validate the CSRF nonce that protects its sign-up deletion action, allowing attackers to delete sign-up records via a forged request handled in the session of a logged-in user with the required capability...

CVE-2026-92410 Sign-up Sheets < 2.4.0 - Arbitrary Sign-up Deletion via CSRF

The Sign-up Sheets WordPress plugin before 2.4.0 does not properly validate the CSRF nonce that protects its sign-up deletion action, allowing attackers to delete sign-up records via a forged request handled in the session of a logged-in user with the required capability...

EUVD-2026-83674

The Sign-up Sheets WordPress plugin before 2.4.0 does not properly validate the CSRF nonce that protects its sign-up deletion action, allowing attackers to delete sign-up records via a forged request handled in the session of a logged-in user with the required capability...

CVE-2026-92410

The Sign-up Sheets WordPress plugin, in versions before 2.4.0 , is vulnerable to a Cross-Site Request Forgery (CSRF) attack. The root cause is the insufficient validation of the CSRF nonce protecting the sign-up deletion action. An attacker can exploit this by sending a forged request to delete s...

libmongoc SCRAM client nonce-validation bypass

A flaw in libmongoc's SCRAM authentication implementation caused the client to continue the authentication handshake and transmit the client proof even when a nonce mismatch was detected in the server's first message. An unauthorized party with a man-in-the-middle position could exploit this by...

CVE-2026-93394

libmongoc (MongoDB C driver) contains a flaw in its SCRAM authentication implementation where the client continues the handshake and transmits the client proof even after detecting a nonce mismatch in the server's first message. An attacker with a man-in-the-middle position can inject a crafted s...

EUVD-2026-81353

The Invisible Anti-Spam & CAPTCHA — reCAPTCHA Alternative for All Forms WordPress plugin before 5.1.1 does not check the user's capabilities in its message deletion AJAX action, and only tests that a nonce parameter is present rather than validating it, allowing any authenticated user, such as a...

CVE-2026-91010

The Invisible Anti-Spam & CAPTCHA — reCAPTCHA Alternative for All Forms WordPress plugin (versions before 5.1.1 ) contains a vulnerability where the message deletion AJAX action fails to verify user capabilities. Instead of validating the nonce parameter, the plugin only checks for its presence. ...

CVE-2026-80172

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Insufficient Verification of Data Authenticity vulnerability. An unauthenticated attacker with remote access could exploit this, leading to unauthorized access. This...

CVE-2026-80172

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Insufficient Verification of Data Authenticity vulnerability. An unauthenticated attacker with remote access could exploit this, leading to unauthorized access. This...

CVE-2026-80172

Dell Secure Connect Gateway (SCG) 5.0 Appliance and Application versions contain an Insufficient Verification of Data Authenticity vulnerability. An unauthenticated remote attacker can repeatedly reuse a captured request to generate ADMIN access and refresh tokens , since there is no nonce valida...

CVE-2026-80172

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Insufficient Verification of Data Authenticity vulnerability. An unauthenticated attacker with remote access could exploit this, leading to unauthorized access. This...

EUVD-2026-74853

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Insufficient Verification of Data Authenticity vulnerability. An unauthenticated attacker with remote access could exploit this, leading to unauthorized access. This...

CVE-2026-82185

The WPLP Cookie Consent WordPress plugin before 4.4.2 does not have capability or nonce checks on some of its A/B testing actions, allowing any authenticated user, such as a subscriber, to overwrite the cookie banner configuration shown to every visitor and to irreversibly reset the stored A/B te...

EUVD-2026-71742

Trueview T18161 S 6.0.23.4 contains an improper verification in MQTT command processing. An attacker with network access can replay or modify captured MQTT messages, including security-related nonce, timestamp, and signature fields, and the device accepts the modified messages and executes the...