WP-Links-Page-CVE-Report

WP-Links-Page-CVE-Report Divulgación de CVE-2025-10175 CVE-2025-10175 - Vulnerabilidad en WP Links Page Este repositorio divulga una vulnerabilidad descubierta en WP Links Page getresults"SELECT FROM $table WHERE id = $id ..." Vector de ataque : Inyección SQL ciega basada en AJAX autenticada...

CVE-2024-42758

CVE-2024-42758 Existe una vulnerabilidad de Cross-site Scripting XSS en la versión v2024-01-05 del plugin indexmenu cuando se utiliza y está habilitado en Dokuwiki Motor de Wiki de Código Abierto. Un atacante malintencionado puede introducir payloads XSS, por ejemplo, al crear o editar una página...

CVE-2023-1665

CVE-2023-1665 Fuerza Bruta en Twake App Versión Open Source de Microsoft Teams v2023.Q1.1223 CVSS: 7.8 La aplicación de colaboración Twake https://twake.app antes de las versiones v2023.Q1.1223 no restringe los intentos de inicio de sesión no autenticados, lo que permite ataques de fuerza bruta e...

CVE-2026-48908-by-yora

🔐 Escáner CVE-2026-48908 y PoC Seguro Joomla SP Page Builder — Carga de Archivos No Autenticada / RCE Potencial Desarrollado poryora 📌 Acerca de Este proyecto es una herramienta de investigación de seguridad y detección de vulnerabilidades desarrollada por yora para ayudar a identificar...

CVE-2022-44875-Test

CVE-2022-44875-Prueba Probando CVE-2022-44875. Actualmente redirigido. Recuerda desactivar la redirección para usarlo. https://aesirsec.io/CVE-2022-44875.html...

CVE-2024-50475

CVE-2024-50475 Signup Page = 1.0 - Actualización no autenticada de opciones arbitrarias Descripción: El plugin Signup Page para WordPress es vulnerable a modificaciones no autorizadas de datos que pueden llevar a una escalada de privilegios debido a una falta de verificación de capacidades en tod...

CVE-2026-105116

OpenAM versions prior to 16.1.3 are affected by a latent cross-site scripting (XSS) defect. The vulnerability occurs because the SAML message , relay state , and target URL are placed unencoded into the load-balancer cookie bounce auto-submit page. If the cookieHashRedirectEnabled setting is acti...

EUVD-2026-92020

OpenAM before 16.1.3 contains a latent cross-site scripting defect that places the SAML message, relay state and target URL unencoded into the load-balancer cookie bounce auto-submit page. If reachable with cookieHashRedirectEnabled set, crafted requests could execute script in the OpenAM origin,...

EUVD-2026-92018

OpenAM before 16.1.3 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject script by supplying crafted parameters rendered unencoded on the OAuth2 authorization error page. Attackers can lure victims to a crafted /oauth2/authorize link with repeat...

CVE-2026-105114 OpenAM before 16.1.3 Reflected XSS via OAuth2 Authorization Error Page

OpenAM before 16.1.3 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject script by supplying crafted parameters rendered unencoded on the OAuth2 authorization error page. Attackers can lure victims to a crafted /oauth2/authorize link with repeat...

WordPress Kubio AI Page Builder plugin <= 2.9.2 - Unauthenticated Stored Cross-Site Scripting vulnerability

Unauthenticated Stored Cross-Site Scripting vulnerability discovered by daroo in WordPress Plugin Kubio AI Page Builder versions = 2.9.2...

cve-2025-22294

CVE-2025-2294 – Local File Inclusion LFI en el plugin de WordPress Kubio AI Page Builder Enlace al write-up detallado Enlace al deploy Enlace al exploit Enlace a archivos para verificación masiva: Plantilla para verificación activa Plantilla para verificación pasiva Exploit para verificación masi...

CVE-2026-92084

The The Beaver Builder Page Builder – Drag and Drop Website Builder plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.11.0.5. This is due to the software allowing users to execute an action that does not properly validate a value before...

CVE-2026-92084

The Beaver Builder Page Builder plugin for WordPress is vulnerable to unauthenticated arbitrary shortcode execution in all versions up to and including 2.11.0.5 . The root cause is the software's failure to properly validate a value before executing the do_shortcode function. This vulnerability c...

CVE-2026-92084 Beaver Builder Page Builder <= 2.11.0.5 - Unauthenticated Arbitrary Shortcode Execution via Sidebar Module Widget Output

The The Beaver Builder Page Builder – Drag and Drop Website Builder plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.11.0.5. This is due to the software allowing users to execute an action that does not properly validate a value before...

EUVD-2026-91966

The The Beaver Builder Page Builder – Drag and Drop Website Builder plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.11.0.5. This is due to the software allowing users to execute an action that does not properly validate a value before...

vulnerability-in-Remix-React-Router-CVE-2025-31137-

Resumen Después de leer el write-up de @zhero en su blog personal, decidí construir este CTF para aprender cómo funcionan las cosas y, después de eso, decidí compartirlo con cualquiera que quiera aprender a explotar esta vulnerabilidad. Intenté hacer el CTF con la versión [email protected],...

CVE-2026-88783

The Kubio AI Page Builder WordPress plugin before 2.9.3 does not limit its widening of the allowed HTML elements to the editor context, so the wider set is applied when filtering content submitted by unauthenticated users as well, allowing them to store markup which the Kubio AI Page Builder...

CVE-2026-88782

The Kubio AI Page Builder WordPress plugin before 2.9.3 does not validate the URI scheme of a user-supplied value before outputting it as a link target, allowing users with the contributor role and above to store a payload which executes in the browser of anyone who follows the link, including an...

CVE-2026-88783 Kubio AI Page Builder < 2.9.3 - Unauthenticated Stored XSS via Comment Content

The Kubio AI Page Builder WordPress plugin before 2.9.3 does not limit its widening of the allowed HTML elements to the editor context, so the wider set is applied when filtering content submitted by unauthenticated users as well, allowing them to store markup which the Kubio AI Page Builder...