295266 matches found
CVE-2022-0441
A vulnerability classified as critical was found in MasterStudy LMS Plugin up to 2.7.5 on WordPress WordPress Plugin. This vulnerability affects an unknown part of the component New Account Handler. The manipulation with an unknown input leads to a privileges management vulnerability. The CWE...
Mass-CVE-2026-23550-Exploit
π₯ CVE-2026-23550 Modular DS Scanner Multi-threaded Python scanner for CVE-2026-23550 CVSS 10.0 WordPress Modular DS plugin β€2.5.1 vulnerability affecting 40k+ sites. Detects unauthenticated admin takeover via getLogin bypass with full wp-admin access verification. Features β¨ π₯ Full admin access...
CVE-2023-4800
CVE ID: CVE-2023-4800 Vulnerability Type: Sensitive Data Exposure Description: The DoLogin Security plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the dashboard widget in versions up to, and including, 3.7. This makes it possible for...
wp_bookingpress_1.0.11
CVE-2022-0739 CVE-2022-0739 Wordpress BookingPress Plugin 1.0.11 Unauthenticated SQL Injection Getting Started Executing program With python3 python3 sqli.py -u 'http://wordpress.site' -p 'wpnoncevalue' Help For help menu: python3 sqli.py -h Disclaimer All the code provided on this repository is...
CVE-2023-6063-PoC
CVE-2023-6063 PoC Reference Unauthenticated SQL Injection Vulnerability Addressed in WP Fastest Cache 1.2.2 | WPScan Plugin setting Enable "WP Fastest Cache". PoC The "wordpressloggedin" cookie parameter is vulnerable. $ python sqlmap.py --dbms=mysql -u "http://127.0.0.1/wp-login.php"...
CVE-2023-1405
CVE-2023-1405 Formidable Forms = 6.1.2 - Unauthenticated PHP Object Injection Description: The Formidable Forms plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 6.1.2 via deserialization of untrusted input from form submissions. This allows...
CVE-2024-1380
CVE-2024-1380 Relevanssi β A Better Search = 4.22.0 - Missing Authorization to Unauthenticated Query Log Export Description The Relevanssi β A Better Search plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the relevanssiexportlogcheck function...
CVE-2025-23942-poc
WP Load Gallery Exploit CVE-2025-23942 π Description Unrestricted Upload of File with Dangerous Type vulnerability in NgocCode WP Load Gallery allows Upload a Web Shell to a Web Server. This issue affects WP Load Gallery: from n/a through 2.1.6. β οΈ Vulnerability Details CVE ID: CVE-2025-23942...
CVE-2024-12209
CVE-2024-12209 WP Umbrella: Update Backup Restore & Monitoring = 2.17.0 - Unauthenticated Local File Inclusion Description The WP Umbrella: Update Backup Restore & Monitoring plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.17.0 via the 'filename'...
CLEANSTART-2026-UA46955 security issue was discovered in Kubernetes where users may be able to launch containers that bypass the mountable secrets policy enforced by the ServiceAccount admission plugin when using containe...
Security vulnerability affects the nodetaint package. A security issue was discovered in Kubernetes where users may be able to launch containers that bypass the mountable secrets policy enforced by the ServiceAccount admission plugin when using containers, init containers, and ephemeral container...
nate158g-m-w-n-l-p-d-a-o-e
nate158g-m-w-n-l-p-d-a-o-e This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-frameworkclass MetasploitModule 'Wordpress Popular Posts Authenticated RCE', 'Description' = %q This exploit requires Metasploit to have a FQDN and the...
CVE-2025-32206
CVE-2025-32206 - WordPress Processing Projects "Unrestricted Upload of File with Dangerous Type vulnerability in LABCAT Processing Projects allows attackers to upload a web shell to a web server. This can lead to full compromise." π§βπ» Exploit Description This Python exploit script targets WordPress...
nuclei-plugin
Fast and customisable vulnerability scanner based on simple YAML based DSL. Vulnerability scanning using Nuclei How it works The plugin downloads the latest release of Nuclei from GitHub, based on the build executor's operating system and architecture The downloaded artifact is uncompressed If th...
CVE-2024-43160
Wordpress BerqWP = 1.7.6 - Unauthenticated Arbitrary File Uplaod CVE-2024-43160 The BerqWP β Automated All-In-One PageSpeed Optimization Plugin for Core Web Vitals, Cache, CDN, Images, CSS, and JavaScript plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type...
XSS2Shell
XSS2Shell XSS2Shell is an educational proof of concept for CVE-2026-64638 , demonstrating the impact of a pre-authentication XSS issue in vulnerable WordPress installations. With an administrator's explicit participation, the PoC captures a WordPress Application Password, publishes a temporary...
CVE-2024-6205
CVE-2024-6205 pip install requests This is a python written PoC of a recent vulnerability in a wordpress plugin. More information on that here https://nvd.nist.gov/vuln/detail/CVE-2024-6205 https://cvefeed.io/vuln/detail/CVE-2024-6205...
CVE-2024-54239
CVE-2024-54239 Eyewear prescription form = 4.0.18 - Missing Authorization to Unauthenticated Arbitrary Options Update Description The Eyewear prescription form plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability...
POC-CVE-2023-3244
proof of concept for CVE-2023-3244 Hello, this is a simple Proof of Concept PoC for the CVE-2023-3244 vulnerability found in the WordPress plugin "comments-like-dislike". The vulnerability affects plugin versions up to and including 1.2.0. To exploit this vulnerability, you can refer to the Pytho...
CVE-2020-12800
CVE-2020-12800 POC Script for CVE-2020-12800: RCE through Unrestricted File Type Upload Vulnerable plugin for testing hosted at: https://mega.nz/file/aQUClQKCZYeiTYSrPuRnwwlRavy4cqfEXs34Tkq6KQig2RcOas Pentester Academy lab...
CVE-2026-0740
CVE-2026-0740 : Ninja Forms - File Upload = 3.3.26 Unauthenticated Arbitrary File Upload. Description : The Ninja Forms - File Uploads plugin for WordPress is vulnerable to unauthenticated arbitrary file upload due to missing file type validation and missing capability checks in the...