CVE-2026-18233

CVE-2026-18233 affects the MStore API WordPress plugin before 4.21.1 . The plugin fails to verify that an order targeted by one of its delivery endpoints actually belongs to the requester. This allows any authenticated user—even those with the lowest Subscriber role—to mark arbitrary orders as co...

EUVD-2026-68047

The MStore API WordPress plugin before 4.21.1 does not verify that the order targeted by one of its delivery endpoints belongs to the requester, allowing any authenticated user, including Subscribers, to mark arbitrary orders as completed and paid without any payment being made...

CVE-2026-16947

CVE-2026-16947 affects the Total processing card payments for WooCommerce WordPress plugin (through version 7.3 ). The plugin fails to validate a user-supplied path before using it to build a server-side verification request, and does not verify the authenticity of the response. This allows unaut...

CVE-2026-18233 MStore API < 4.21.1 - Subscriber+ Arbitrary Order Completion

The MStore API WordPress plugin before 4.21.1 does not verify that the order targeted by one of its delivery endpoints belongs to the requester, allowing any authenticated user, including Subscribers, to mark arbitrary orders as completed and paid without any payment being made...

PT-2026-83423

Name of the Vulnerable Software and Affected Versions macrozheng mall versions prior to 1.0.4 Description A race condition exists in the Order Submission component within the '/order/submit' endpoint. This issue allows a remote attacker to manipulate the system, although the attack is characteriz...

amasty-chekout-POC-rce

CVE-2026-53787 - Amasty Order Attributes Caricamento File Non Autenticato Descrizione CVE-2026-53787 è una vulnerabilità critica di caricamento file arbitrario non autenticato nell'estensione Amasty Order Attributes per Magento 2 nelle versioni precedenti alla 4.0.0. La vulnerabilità consente agl...

CVE-2026-65761

CVE-2026-65761 — EasyStore Joomla SQL-Injection ohne Authentifizierung filtersortby-Richtung → ORDER-BY-Injection → vollständiges Auslesen der Datenbank Übersicht CVE-2026-65761 CVSS 9.3 kritisch ist eine SQL-Injection ohne Authentifizierung in EasyStore für Joomla von JoomShaper, die Versionen ≤...

CVE-2026-25513

CVE-2026-25513: FacturaScripts ha un'SQL Injection nella clausola ORDER BY dell'API Panoramica...

CVE-2026-40776

CVE-2026-40776 Eventin wp-event-solution टूटा हुआ एक्सेस नियंत्रण WordPress प्लगइन Eventin 10,000+ सक्रिय स्थापनाएँ में अप्रमाणित PII प्रकटीकरण और आदेश जालसाजी । एक सार्वजनिक REST एंडपॉइंट किसी भी विज़िटर को wprest nonce देता है, और तीन डाउनस्ट्रीम अनुमति कॉलबैक उस nonce को प्रमाणीकरण के विकल्प क...

CVE-2024-8484

CVE-2024-8484 REST API TO MiniProgram = 4.7.1 - SQL Injection non autenticata root@kitploit: CVE: CVE-2024-8484 CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS Score: 7.5 Slugs: rest-api-to-miniprogram Descrizione: Il plugin REST API TO MiniProgram per WordPress è vulnerabile a SQL...

CVE-2022-0439

CVE-2022-0439 CVE-2022-0439 - Email Subscribers & Newsletters 5.3.2 - Blind SQL injection da subscriber+ Requisiti sqlmap installato e un nome utente e password validi con subscriber+ Utilizzo root@kitploit: usage: CVE-2022-0439.py -h -w URL -u USERNAME -p PASSWORD options: -h, --help show this...

CVE-2024-9756

🚀 Exploit di Caricamento Arbitrario di File WooCommerce CVE-2024-9756 📌 Panoramica Questo exploit sfrutta una vulnerabilità di caricamento arbitrario limitato e non autorizzato nel plugin Order Attachments for WooCommerce versioni 2.0 - 2.4.1 per WordPress. La vulnerabilità consente a utenti...

EverShop-Lab-CVE-2026-25993

CVE-2026-25993 — Laboratorio SQL Injection di Secondo Ordine EverShop Prerequisiti Docker Engine 24+ con Docker Compose v2+ 2 GB di RAM libera Distribuzione root@kitploit: cd EverShop-Lab/ docker compose up Attendi circa 2 minuti per la prima build clona EverShop v2.1.0, compila, esegue le...

CVE-2025-33053_PoC

CVE-2025-33053 POC Exploit Panoramica La directory di lavoro in un file .url può essere impostata su un server WebDAV remoto. Quando viene aperto da un client Windows, le dipendenze per l'eseguibile definito nel campo URL vengono cercate nella condivisione WebDAV remota. Se a un eseguibile o DLL...

CVE-2026-80685

In the Linux kernel, the following vulnerability has been resolved: mm/util: don't read page2 for order-1 folios in snapshotpage snapshotpage currently reads page2 after checking nrpages 1, but it should only do so when nrpages 2. If an order-1 folio is allocated at the end of a vmemmap section,...

CVE-2019-17671

＃CVE-2019-17671 ＃url + /？static = 1＆order = asc...

CVE-2025-68999-POC

CVE-2025-68999 Happy Addons for Elementor prepare, ma poi inserisce $entry-metakey direttamente nella stringa SQL senza escape: root@kitploit: $records = " $duplicatedpostid, '$entry-metakey', '$value' "; // ... $wpdb-query $query ; Poiché metakey proviene dal database, il codice lo considera...

CVE-2026-80704 drm/amd/display: use proper context for logging

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: use proper context for logging The same as the rest of the code, getssinfofromatombios uses calcpllcs-ctx-logger for logging. But calcpllcs-ctx is initialized only later in calcpllmaxvcoconstruct. Therefore, any...

EUVD-2026-67561

In the Linux kernel, the following vulnerability has been resolved: mm/util: don't read page2 for order-1 folios in snapshotpage snapshotpage currently reads page2 after checking nrpages 1, but it should only do so when nrpages 2. If an order-1 folio is allocated at the end of a vmemmap section,...

CVE-2026-80685

A Linux kernel vulnerability in the snapshot_page() function within mm/util causes an out-of-bounds read of the __page_2 field for order-1 folios allocated at the end of a vmemmap section . The function incorrectly reads __page_2 when nr_pages &gt; 1, but should only do so when nr_pages &gt; 2; s...