EUVD-2026-83674

The Sign-up Sheets WordPress plugin before 2.4.0 does not properly validate the CSRF nonce that protects its sign-up deletion action, allowing attackers to delete sign-up records via a forged request handled in the session of a logged-in user with the required capability...

CVE-2026-92410 Sign-up Sheets < 2.4.0 - Arbitrary Sign-up Deletion via CSRF

The Sign-up Sheets WordPress plugin before 2.4.0 does not properly validate the CSRF nonce that protects its sign-up deletion action, allowing attackers to delete sign-up records via a forged request handled in the session of a logged-in user with the required capability...

CVE-2026-92410

CVE-2026-92410 affects the Sign-up Sheets WordPress plugin prior to version 2.4.0 . The plugin does not properly validate the CSRF nonce that protects its sign-up deletion action, allowing an attacker to delete sign-up records by sending a forged request that is processed within the session of a ...

CVE-2024-8682

CVE-2024-8682 - JNews 未認証ユーザー登録 PoC JNews = 11.6.6 には、WordPress のユーザー登録が無効になっている場合でも、?ajax-request=jnews エンドポイントを介して未認証のユーザー登録を許可する脆弱性があります。 これは、まず jnewsrefreshnonce アクションを介して有効な jnewsnonce を取得し、次にそれを registerhandler を介して新しいユーザーを登録するために使用することで機能します。 使用方法 root@kitploit: python3 cve-2024-8682.py -u...

CVE-2024-32444

CVE-2024-32444 截至 24/01/25，此漏洞尚未有补丁，因此这只是一个产品检测模板，所有与 RealHome wordpress 主题相关的产品均受影响。 该主题允许用户通过 inspiryajaxregister 函数注册新账户，但它未能正确检查授权或实现 nonce 验证。 如果网站启用了注册功能，攻击者可以在发送给注册函数的特制 HTTP 请求中任意指定其角色为“管理员”，从而绕过安全检查。 一旦注册为管理员，攻击者即可完全控制该 WordPress 站点，包括执行内容篡改、植入脚本以及访问用户或其他敏感数据。 如何运行此脚本？ 1. 从此处下载 Nuclei 2...

User Profile Builder 3.16.4 - Unauthenticated Authentication Bypass

The User Profile Builder plugin for WordPress version 3.16.4 is vulnerable to an authentication bypass via type confusion. Profile Builder's automatic-login-after-registration handler passes the return value of wpinsertuser through absint before testing it with iswperror, so the error check runs...

WP Maps Pro (wp-google-map-gold) <= 6.1.0 - Unauthenticated Administrator Account Creation

The WP Maps Pro plugin for WordPress is vulnerable to Privilege Escalation via Administrator Account Creation in all versions up to, and including, 6.1.0. This is due to the wpgmptempaccessajax AJAX action being registered with wpajaxnopriv and protected only by a nonce check using the...

Video Conferencing with Zoom API < 4.6.6 - Unauthenticated SDK Signature Generation

Zoom WordPress plugin 4.6.6 contains a broken authentication caused by disabled nonce verification in an AJAX handler, letting unauthenticated attackers generate valid Zoom SDK signatures and retrieve the Zoom SDK key. id: CVE-2026-1368 info: name: Video Conferencing with Zoom API 4.6.6 -...

ARMember < 3.4.8 - Unauthenticated Admin Account Takeover

The ARMember WordPress plugin before 3.4.8 is vulnerable to account takeover even the administrator due to missing nonce and authorization checks in an AJAX action available to unauthenticated users, allowing them to change the password of arbitrary users by knowing their username. id:...

Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit - Broken Access Control

The Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit plugin for WordPress is vulnerable to unauthorized arbitrary plugin installation due to a missing capability check on the installoractivateaddonplugins function and a weak nonce hash in all...

W3 Total Cache < 2.8.2 - Log File Exposure

The plugin is vulnerable to Information Exposure through the publicly exposed debug log file. This makes it possible for unauthenticated attackers to view potentially sensitive information in the exposed log file. For example, the log file may contain nonce values that can be used in further CSRF...

WordPress Contact Form 7 <2.3.4 - Arbitrary Nonce Generation

WordPress Contact Form 7 before version 2.3.4 allows unauthenticated users to use the wpcf7rgetnonce AJAX action to retrieve a valid nonce for any WordPress action/function. id: CVE-2021-24278 info: name: WordPress Contact Form 7 2.3.4 - Arbitrary Nonce Generation author: 2rs3c severity: high...

ecdsa-private-key-recovery

ecdsa-key-recovery ECDSAおよびDSAのNonce再利用による秘密鍵回復攻撃を実行します 署名の脆弱性を分析するための暗号研究ツールです 同じ nonce k を共有する2つの署名から秘密鍵を回復しましょう。同じ nonce k を選択すると、両方の署名が同一の署名値 r を持つことに注目してください。ECDSAのnonce再利用の良い候補を見つけるには、異なるメッセージ（またはハッシュ）に対して同じ r、pubkey、curve を共有する署名を探します。例：bitcoind ベースのブロックチェーンプロジェクトは通常、ECDSA署名素材の良い供給源です。...

CVE-2022-24611

CVE-2022-24611 Z-Wave S0-No-More攻撃の詳細。この攻撃の仕組みと調査結果を再現する方法についての完全な分析とレポートは、添付のPDFファイルを参照してください。 簡単な説明: S0およびS2デバイスに対するサービス妨害DoS攻撃Z-Wave ZW5xx製品ラインでテスト済み。具体的には、Z-Wave対応のAmazon Ring Gen. 1デバイスが対象です。攻撃者はS0...

CVE-2024-25600-Bricks-Builder-WordPress

CVE-2024-25600 익스플로잇 도구 🚀 설명 📝 이 도구 🛠️는 WordPress용 Bricks Builder 플러그인에서 발견된 CVE-2024-25600 취약점 🕳️을 익스플로잇하기 위해 설계되었습니다. 이 취약점은 영향을 받는 웹사이트에서 인증되지 않은 원격 코드 실행을 허용합니다 💻. 이 도구는 nonce를 검색하고 특별히 조작된 요청을 전송하여 임의의 명령을 실행함으로써 익스플로잇 과정을 자동화합니다. 특징 🌟 대화형 모드 : 실시간으로 대상 웹사이트와 상호작용 🕹️. 배치 모드 : 목록에서 여러 웹사이트를 스캔...

ecdsa-private-key-recovery

ecdsa-key-recovery Realiza ataques de recuperación de clave privada por reutilización de nonce en ECDSA y DSA Una herramienta de investigación criptográfica para analizar vulnerabilidades en firmas Recuperemos la clave privada de dos firmas que comparten el mismo nonce k. Observa cómo elegir el...

CVE-2026-11899

The PDF Builder for WooCommerce. Create invoices,packing slips and more plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.0.11. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible...

CVE-2026-13770 AppMySite <= 3.15.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting via save_ams_license_key AJAX Handler

The AppMySite – WordPress & WooCommerce Mobile App Builder No-Code Android & iOS App Maker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via saveamslicensekey AJAX Handler in all versions up to, and including, 3.15.3 due to insufficient input sanitization and output escaping...

EUVD-2026-83573

The PDF Builder for WooCommerce. Create invoices,packing slips and more plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.0.11. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible...

CVE-2026-11899

PDF Builder for WooCommerce – Create invoices, packing slips and more is a WordPress plugin vulnerable to authorization bypass in all versions up to and including 2.0.11 . The flaw exists in the GetInvoiceDetail AJAX handler (woocommerce-pdf-invoice-ajax.php), where the plugin fails to properly v...