CVE-2021-29447

WAV iXML XXE Exploit Generator Generates malicious WAV files that exploit XXE vulnerabilities in WordPress plugins parsing iXML metadata chunks e.g., BookingPress │ Target │ └──────────┘ └──────────┘ ▲ │ │ │ 2. Parse XML │ │ │ 3. GET /xxe.dtd │ │─────────────────────────────┘ │ │ 4. GET...

CVE-2024-50491

CVE-2024-50491 RSVP ME = 1.9.9 - Unauthenticated SQL Injection Description The RSVP ME plugin for WordPress is vulnerable to SQL Injection in versions up to, and including, 1.9.9 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL...

CVE-2024-9756

🚀 WooCommerce Arbitrary File Upload Exploit CVE-2024-9756 📌 Overview This exploit leverages an unauthorized limited arbitrary file upload vulnerability in the Order Attachments for WooCommerce plugin versions 2.0 to 2.4.1 for WordPress. The vulnerability allows authenticated users Subscriber+ to...

NOP_Plugin

NOPPlugin Plugin for NOPing instructions in IDA. The creation of the plugin was inspired by Vidar Stealer I was trying to remove the junk bytes / instructions. Before: After: Instructions Paste the NOPPlugin.py file under "plugins" subdirectory of IDA. To NOP the instructions out just select the...

cve-2026-7665

CVE-2026-7665 — Unauthenticated Information Disclosure in Essential Addons for Elementor Field| Detail ---|--- CVE ID| CVE-2026-7665 Severity| Medium CVSS Score| 5.3 AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N Affected Plugin| Essential Addons for Elementor Affected Versions| ≤ 6.6.4 Active Installs|...

jira-mobile-ssrf-exploit

CVE-2022-26135 - Full-Read Server Side Request Forgery in Mobile Plugin for Jira Data Center and Server About Assetnote Assetnote automatically maps your external assets and monitors them for changes and security issues to help prevent serious breaches. This research was performed by Assetnote's...

LSTAR

LSTAR - Aggressor A plugin from initial access to domain takeover, enabling intranet traversal With the goal of simplifying CS right-click operations and facilitating integration, referencing a large number of post-exploitation plugins Restructured and enriched host credential acquisition,...

-CVE-2026-7465

-CVE-2026-7465 CVE-2026-7465 Spectra Gutenberg Blocks Authenticated RCE Exploit...

CVE-2023-6063-PoC

CVE-2023-6063-PoC Exploiting SQL Injection Vulnerability in WP Fastest Cache CVE-2023-6063...

CVE-2024-3673

CVE-2024-3673 CVE-2024-3673 Exploit: Local File Inclusion in Web Directory Free WordPress Plugin before 1.7.3 Overview CVE-2024-3673 describes a critical vulnerability in the Web Directory Free WordPress plugin versions prior to 1.7.3. The plugin fails to validate a parameter before using it in a...

CVE-2026-10795-Lab

CVE Lab: CVE-2026-10795 - UpdraftPlus UpdraftCentral RPC Authentication Bypass Chained to Plugin Installation Executive Summary This repository contains a local Docker lab for reproducing and validating CVE-2026-10795, an unauthenticated authentication bypass vulnerability affecting the UpdraftPl...

CVE-2024-13513

Oliver POS – A WooCommerce Point of Sale POS = 2.4.2.3 - Sensitive Information Exposure to Privilege Escalation Account TakeOver CVE-2024-13513 The Oliver POS – A WooCommerce Point of Sale POS plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and includin...

CVE-2025-4094-POC

WordPress Plugin Digits OTP Bypass CVE-2025-4094 Overview This script is an exploit for the WordPress Plugin Digits versions -p -i OPTIONS Arguments -u, --url: Required Target URL e.g., https://example.com/wp-admin/admin-ajax.php -p, --phone: Required Target phone number digits only -i,...

CVE-2026-11551-PoC

CVE-2026-11551 - Unauthenticated Privilege in White Label & Branding, Free Login Page Customizer White Label & Branding, Free Login Page Customizer update $wpdb-users, $data, ... ← Line 2515: DOUBLE HASH TERSIMPAN Kode yang Vulnerable inc/modules/login-screen/signup-password.php:230-251 /...

log4j-recognizer

log4j-recognizer A utility to look for log4j in the currently running JVM CVE-2021-44228 Log4Shell. This is useful for systems that allow plugins to introduce their own jars. Therefore, you can find if someone brought log4j in a dangerous version. Usage Just instantiate Log4jRecognizer with your...

CVE-2026-78006-POC

CVE-2026-78006-POC POC for CVE-2026-78006 The Events Calendar = 6.17.4 - Unauthenticated PHP Object Injection to Remote Code Execution CONTACT telegram for any ask : @soldout0O 💙 Support the Project If you appreciate my work, consider supporting the project via USDT TRC20:...

CVE-2026-1555

CVE-2026-1555 WebStack = 1.2024 - Unauthenticated Arbitrary File Upload 👤 By: Nxploited 🔗 Nxploited ZeroDay Hub — t.me/KNxploited 💀 CVE-2026-1555 — WebStack WordPress Arbitrary File Upload Unauthenticated Remote Code Execution viaimgupload AJAX handler 📌 Vulnerability Overview Field| Detail ---|-...

CVE-2025-68055-poc

CVE-2025-68055 Authenticated SQL injection in Hydra Booking Plugin get function, Hydra Booking hardcodes user input directly into the raw sql request instead of using prepare to sanitize input, leading to Time-Based Blind SQL injection. Exploit A simple run command as such will tell you whether o...

CVE-2025-13673

CVE-2025-13673 — Tutor LMS SQL Injection Lab Unauthenticated SQL Injection in Tutor LMS WordPress plugin = 3.9.6 via the couponcode parameter. Quick Start 1. Clone and start the lab git clone https://github.com/dinosn/CVE-2025-13673.git cd CVE-2025-13673 ./setup.sh Deploys WordPress + Tutor LMS...

CVE-2024-7703

CVE-2024-7703 CVE-2024-7703 Exploit: Stored Cross-Site Scripting XSS via SVG File Upload in ARMember WordPress Plugin Overview This repository contains a proof-of-concept PoC exploit for the vulnerability identified as CVE-2024-7703. The vulnerability affects the ARMember WordPress Plugin,...