CVE-2026-49085

CVE-2026-49085 CVE-2026-49085 WP Insightly PHP Object Injection Exploit...

CVE-2025-32432

CraftCMS CVE-2025-32432 利用工具 - Chirag Artani 概述 本仓库包含针对 CVE-2025-32432 的概念验证利用脚本，该漏洞是一个影响 CraftCMS 4.x 和 5.x 版本的预认证远程代码执行（RCE）漏洞。漏洞存在于 CraftCMS 的资源变换生成功能中。 该利用脚本通过以下方式自动化检测和验证漏洞： 1. 从 CraftCMS 管理面板提取 CSRF 令牌 2. 通过 PHP 对象注入利用漏洞 3. 通过提取系统信息验证利用成功 免责声明 ⚠️ 本工具仅用于教育和授权的安全测试目的。...

CVE-2025-7384

CVE-2025-7384 — Inyección de Objetos PHP a RCE Plugin: Database for Contact Form 7 contact-form-entries ≤ 1.4.3 CVSS: 9.8 Crítico CWE: CWE-502 — Deserialización de Datos No Confiables Requisito de autenticación: Ninguno No autenticado Impacto: Ejecución Remota de Código Tabla de Contenidos 1...

WordPress LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes plugin <= 10.2.1 - Authenticated (Custom+) PHP Object Injection vulnerability

Authenticated Custom+ PHP Object Injection vulnerability discovered by Wordfence PRISM in WordPress Plugin LifterLMS versions = 10.2.1...

CVE-2026-94064

The BuddhaThemes Neo | Barber Shop WordPress Theme (neocut) is vulnerable to PHP Object Injection due to the Deserialization of Untrusted Data (CWE-502). This vulnerability affects versions up to and including 3.5 . Successful exploitation can lead to significant impacts on confidentiality , inte...

CVE-2023-6933

CVE-2023-6933 漏洞介绍 描述 WordPress 的 "Better Search Replace" 插件存在一个严重的 PHP 对象注入漏洞。该安全缺陷存在于所有版本（包括 1.4.4 及之前版本）。它源于对不受信任输入的反序列化，使未认证的攻击者能够向系统注入 PHP 对象。值得注意的是，该插件本身不包含 PHP 对象注入链。然而，如果目标系统上安装了另一个包含 POI 链的易受攻击的插件或主题，则该漏洞可能允许攻击者删除任意文件、访问敏感数据或执行恶意代码。 附加分析 在本次分析中，我们还将涵盖 WordPress 6.4.0...

CVE-2026-104392 WordPress Quiz And Survey Master plugin <= 11.2.7 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in ExpressTech Quiz And Survey Master quiz-master-next allows Object Injection.This issue affects Quiz And Survey Master: from n/a through 11.2.7...

CVE-2026-94568

The Pay with Vipps for WooCommerce (woo-vipps ) WordPress plugin is vulnerable to PHP Object Injection due to the deserialization of untrusted data . This flaw affects versions up to and including 6.2.0 . An attacker can exploit this vulnerability to perform object injection, potentially leading ...

vulnerable-bsr-lab-CVE-2023-6933

CVE-2023-6933 漏洞实验环境 概述 本实验环境演示了 CVE-2023-6933，这是 Better Search Replace WordPress 插件版本 ≤1.4.4 中的一个严重 PHP 对象注入漏洞。 漏洞详情 CVE ID ：CVE-2023-6933 CVSS 评分 ：9.8（严重） 受影响的插件 ：Better Search Replace ≤1.4.4 漏洞类型 ：通过反序列化用户输入导致的 PHP 对象注入 攻击向量 ：AJAX 端点 /wp-admin/admin-ajax.php，动作 searchreplacedb 快速开始 1. 部署实验环境...

CVE-2026-82226

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · CVE-2026-82226 CVE-2026-82226 Tickera 3.6.0.2 - Tickera I am @abraxasnull. Loopback lab. The client is CVE-2026-82226-Abraxas-Labs.py. Checkout unserializes the attendee. Unauthenticated cart - process-payment...

CVE-2024-12877

CVE-2024-12877 GiveWP – Donation Plugin and Fundraising Platform = 3.19.2 - Inyección de Objetos PHP no Autenticada Descripción El plugin GiveWP – Donation Plugin and Fundraising Platform para WordPress es vulnerable a la Inyección de Objetos PHP en todas las versiones hasta la 3.19.2 incluida,...

CVE-2026-84753

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · CVE-2026-84753 CVE-2026-84753 Mail Mint 1.31.0 - WPFunnels I am @abraxasnull. Loopback lab. The client is CVE-2026-84753-Abraxas-Labs.py. The function is named safe. Unauthenticated REST mint-form-submit copies extra...

CVE-2024-8353

本文是由EQSTLab发布的研究文章。 感谢cuokon，他发现了此漏洞。 引言 进一步分析CVE-2024-5932 EQST Insight R&TPDF文件。 https://github.com/user-attachments/assets/085c2f81-2894-4bb7-a3f5-62406dcb1021 CVE-2024-8353 ★ CVE-2024-8353 任意文件删除与RCE PoC ★ 描述 CVE-2024-8353：GiveWP PHP 对象注入漏洞 描述：givewp –...

CVE-2023-1405

CVE-2023-1405 Formidable Forms = 6.1.2 - 未经身份验证的PHP对象注入 描述： Formidable Forms WordPress插件在版本6.1.2及之前存在PHP对象注入漏洞，通过反序列化来自表单提交的不可信输入实现。这允许未经身份验证的攻击者注入PHP对象。受影响插件本身不存在POP链。如果目标系统上安装了其他插件或主题提供了POP链，则可能允许攻击者删除任意文件、检索敏感数据或执行代码。 Type: plugin CVSS Score: 9.8 CVSS Vector:...

CVE-2023-27372-SPIP-4.2.1-Unauthenticated-RCE-PoC

CVE-2023-27372 — SPIP SPIP 4.2.1 之前的版本存在未认证的远程代码执行漏洞。密码重置表单中的 oubli 参数因反序列化处理不当，导致 PHP 对象注入。精心构造的序列化负载以 Web 用户身份在服务端执行，其输出会反映在响应中 oubli 输入字段的值内。 工作原理 1. 从 /spip.php?page=spippass 获取反 CSRF 令牌。 2. 发送包含 PHP 序列化负载的 POST 请求，注入到 oubli 参数中。 3. 从响应中已反射的 value 属性中提取命令输出。 4. 循环执行交互式命令，每次请求都刷新 CSRF 令牌。 依赖要求...

GiveWP Donation Plugin <= 3.16.1 - Unauthenticated PHP Object Injection

The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.16.1. This is due to insufficient input validation on user-supplied data. An unauthenticated attacker can inject a serialized PHP object, which...

GiveWP - PHP Object Injection

The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.14.1 via deserialization of untrusted input from the 'givetitle' parameter. id: CVE-2024-5932 info: name: GiveWP - PHP Object Injection author:...

Better Search Replace < 1.4.5 - PHP Object Injection

The Better Search Replace plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.4.4 via deserialization of untrusted input. This makes it possible for unauthenticated attackers to inject a PHP Object. No POP chain is present in the vulnerable plugin. I...

My Geo Posts Free <= 1.2 - PHP Object Injection

The My Geo Posts Free plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 1.2 via deserialization of untrusted input. This makes it possible for unauthenticated attackers to inject a PHP Object. No known POP chain is present in the vulnerable software. If ...

CVE-2019-6340

CVE-2019-6340 仅供教育目的 运行 $ docker run --rm -p 8080:80 knqyf263/cve-2019-6340 利用 GET $ curl -XGET -H "Content-Type: application/hal+json" "http://localhost:8080/node/1?format=haljson" -d ' "link": "value": "link", "options":...