CVE-2023-29384

CVE-2023-29384 CVE-2023-29384 Auto Exploiter on WordPress Job Board and Recruitment Plugin Vulnerability type: Arbitrary File Upload...

Trinity-Audio-CVE-Report

Trinity-Audio-CVE-Report Disclosure for CVE-2025-9196 CVE-2025-9196 - Vulnerability in Trinity Audio This repository discloses a vulnerability discovered in Trinity Audio = 5.20.1,WordPress plugin developed by sergiotrinity. 🛠 Affected Version Product : Trinity Audio Version : v5.20.1 URL :...

CVE-2023-37979

CVE-2023-37979 Unauth. Reflected Cross-Site Scripting XSS vulnerability in Saturday Drive Ninja Forms Contact Form plugin = 3.6.25 versions. PoC and Checker , for educational purposes only 'python3 exploit.py https://target.com'...

CVE-2022-21661

CVE-2022-21661 CVE-2022-21661 docker and poc functions.php needs to replace the original functions.php in the image, and mount it directly in docker-compose.yml poc POST /wp-admin/admin-ajax.php HTTP/1.1 Host: your-ip:8080 User-Agent: Mozilla/5.0 Windows NT 10.0; Win64; x64; rv:132.0 Gecko/201001...

CVE-2024-5084-Red-Team

🚀 HashForm Exploit – Lab Demo This repository contains a proof-of-concept exploit for CVE-2024-5084, a vulnerability found in the Hash Form WordPress plugin. It’s meant only for learning, lab testing, and security research. 📌 About the Vulnerability CVE ID: CVE-2024-5084 Issue: Unauthenticated fi...

CVE-2025-2249

🔐 WordPress SoJ SoundSlides Plugin ⚠️ DISCLAIMER: This exploit is for educational and authorized testing purposes only. 📌 Vulnerability Summary Plugin: SoJ SoundSlides Affected Versions: = 1.2.2 Type: Authenticated Contributor+ Arbitrary File Upload Patch Status: ❌ No official fix available The So...

CVE-2023-51409

CVE-2023-51409 AI Engine: ChatGPT Chatbot = 1.9.98 - Unauthenticated Arbitrary File Upload via restupload Description: The AI Engine: Chatbots, Generators, Assistants, GPT 4 and more! plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the...

CVE-2025-3102

CVE-2025-3102 🛠️ SureTriggers Exploit Script This script is used to identify and exploit security vulnerabilities in the SureTriggers plugin on WordPress sites using a vulnerable version ≤ v1.0.78. If successful, the script will automatically create a WordPress admin account. ⚙️ Features Detection...

CVE-2024-55988

CVE-2024-55988 Navayan CSV Export = 1.0.9 - Unauthenticated SQL Injection Description The Navayan CSV Export plugin for WordPress is vulnerable to SQL Injection in versions up to, and including, 1.0.9 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation o...

wordpress-really-simple-security-authn-bypass-vulnerable-application

wordpress-really-simple-security-authn-bypass-vulnerable-application This is a vulnerable application to test the exploit for the Really Simple Security 9.1.2 authentication bypass CVE-2024-10924. WARNING! This application contains serious security vulnerabilities. Run it at your own risk! It is...

manim-cranim

cranim Manim toolkit for cryptographic scenes. Check out the example gallery: https://nccgroup.github.io/manim-cranim/ Local install: From the repo's root directory, run pip install -e . or pip install . if you don't expect to ever make local changes. This is a Manim plugin. Manim requires plugin...

Limesurvey-RCE

Limesurvey-RCE LimeSurvey Authenticated RCE Proof of Concept: 1. Create your files config.xml and php reverse shell files 2. Create archive with these files 3. Login with credentials 4. Go Configuration - Plugins - Upload & Install 5. Choose your zipped file 6. Upload 7. Install 8. Activate plugi...

CVE-2024-10516

CVE-2024-10516 Swift Performance Lite = 2.3.7.1 - Unauthenticated Local PHP File Inclusion via 'ajaxify' Description The Swift Performance Lite plugin for WordPress is vulnerable to Local PHP File Inclusion in all versions up to, and including, 2.3.7.1 via the 'ajaxify' function. This makes it...

DriverBuddy

Quickstart DriverBuddy Installation Instructions 1. Copy DriverBuddy folder and DriverBuddy.py file into the IDA plugins folder C:\Program Files x86\IDA 6.8\plugins or wherever you installed IDA DriverBuddy Usage Instructions 1. Start IDA and open a Windows kernel driver 2. Go to Edit-Plugins and...

CVE-2021-43798-Grafana-File-Read

Grafana-File-Read Grafana Unauthorized File Read Affected versions: 8.0.0-latest poc: /public/plugins/icon/../../../../../../../../../../../../../../../../../../etc/passwd GET /public/plugins/icon/../../../../../../../../../../../../../../../../../../etc/passwd HTTP/1.1 Host: 127.0.0.1:3000...

CVE-2026-1581-Analysis-Lab

CVE-2026-1581 — wpForo Forum GET'wpfob' → wpforosanitizeorderby..., context, default Behav...

CVE-2023-32590

CVE-2023-32590 Subscribe to Category = 2.7.4 - Unauthenticated SQL Injection Description The Subscribe to Category plugin for WordPress is vulnerable to SQL Injection in versions up to, and including, 2.7.4 due to insufficient escaping on the user supplied parameter and lack of sufficient...

CVE-2026-1056-POC

CVE-2026-1056-POC Snow Monkey Forms - Unauthenticated Arbitrary File Deletion PoC This repository contains a Proof of Concept PoC for a critical vulnerability in the Snow Monkey Forms WordPress plugin versions send; // Direct execution flow to send // CSRF check is only performed for other method...

CVE-2023-2916

CVE-2023-2916 CVE-2023-2916 PoC The InfiniteWP Client plugin for WordPress, in versions up to and including 1.11.1, is vulnerable to a Sensitive Information Exposure flaw. This vulnerability allows authenticated attackers with subscriber-level permissions or above to extract sensitive data,...

CVE-2026-31816-rshell

CVE-2026-31816 Reverse Shell Exploit Overview This tool exploits CVE-2026-31816 to establish a reverse shell connection on a target Budibase server. Attack Chain : Authentication Bypass → Upload DATASOURCE Plugin → Server-side Code Execution → Reverse Shell Requirements Python 3.6+ requests libra...