CVE-2023-41652

CVE-2023-41652 RSVPMarker = 10.6.6 - Unauthenticated SQL Injection Description: The RSVPMarker plugin for WordPress is vulnerable to SQL Injection via the 'email' parameter in versions up to, and including, 10.6.6 due to insufficient escaping on the user supplied parameter and lack of sufficient...

CVE-2021-25032

CVE-2021-25032 PublishPress Capabilities 2.2 - 2.3 - Actualización no autenticada de opciones arbitrarias que compromete el blog Descripción El plugin no tiene comprobaciones de autorización ni CSRF al actualizar sus ajustes a través del hook init, y no garantiza que las opciones a actualizar...

CVE-2023-30486

CVE-2023-30486 Square = 2.0.0 - Autorización faltante mediante activateplugin Descripción El tema Square para WordPress es vulnerable a la activación no autorizada de plugins debido a una falta de verificación de capacidades en la función activateplugin llamada mediante una acción AJAX en version...

CVE-2022-45808

CVE-2022-45808 LearnPress Plugin 4.2.0 - Unauthenticated time-based blind SQLi Description The plugin does not properly sanitise and escape the order by parameter before using it in a SQL statement, leading to a SQL injection exploitable by unauthenticated users POC root@kitploit: $ python...

CVE-2021-24647

CVE-2021-24647 CVE-2021-24647 Pie Register 3.7.1.6 - Inicio de sesión arbitrario no autenticado Información root@kitploit: usage: exploit.py -h -w URL -p PATH options: -h, --help show this help message and exit -w URL, --url URL URL of the WordPress site -p PATH, --path PATH Path of the Login Pag...

CVE-2019-15896

CVE-2019-15896 LifterLMS = 3.34.5 - Unauthenticated Options Import Description Unauthenticated Options Import, which could lead to Website Redirection Administrator Account Creation Content Injection Stored XSS The issues have been reported as fixed in 3.35.0. However v3.35.1 added additional inp...

CVE-2020-36730

CVE-2020-36730 CMP - Coming Soon & Maintenance 3.8.2 - Improper Access Controls on AJAX Calls Subscriber+ Description: Some of the AJAX calls from the plugin do not properly check for capabilities and CSRF tokens, leading to issues such as arbitrary post read, subscribers list export and plugin...

CVE-2022-1203

CVE-2022-1203 Content Mask 1.8.4 - Subscriber+ Arbitrary Options Update Description The Content Mask WordPress plugin before 1.8.4.1 does not have authorisation and CSRF checks in various AJAX actions, as well as does not validate the option to be updated to ensure it belongs to the plugin. As a...

CVE-2022-0439

CVE-2022-0439 CVE-2022-0439 - Email Subscribers & Newsletters 5.3.2 - Subscriber+ Blind SQL injection Must Have sqlmap installed & a valid username & password with subscriber+ Usage root@kitploit: usage: CVE-2022-0439.py -h -w URL -u USERNAME -p PASSWORD options: -h, --help show this help message...

CVE-2024-5084

Hash Form 9.9.1 file upload vulnerability Exploit The Hash Form – Drag & Drop Form Builder plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'fileuploadaction' function in all versions up to, and including, 1.1.0. This makes it possible for...

CVE-2023-5360

CVE-2023-5360 An Open-source EXPLOIT for The Royal Elementor Addons and Templates WordPress plugin before 1.3.79 does not properly validate uploaded files, which could allow unauthenticated users to upload arbitrary files, such as PHP and achieve RCE. Table of Contents Introduction Features Usage...

CVE-2026-84217 WordPress Classified Listing plugin <= 6.1.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in Mamunur Rashid Classified Listing allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Classified Listing: from n/a through 6.1.1...

CVE-2026-84217

CVE-2026-84217 is a Missing Authorization (Broken Access Control) vulnerability in the WordPress plugin Classified Listing by Mamunur Rashid, affecting versions from unknown (n/a) through 6.1.1 . The flaw allows authenticated low-privilege users to access functionality not properly constrained by...

CVE-2023-4634

CVE-2023-4634 WordPress Media-Library 插件 3.10 的 RCE 利用 CVE-2023-4634 信息 Patrowl 在 Wordpress 插件 Media-Librairy-Assistant 版本 3.10 中发现了一个未认证的 RCE 漏洞。 该利用并非易事，只需要按照下方说明进行简单设置即可。 完整的漏洞发现与利用可参考我们的博客：https://patrowl.io/blog-wordpress-media-library-rce-cve-2023-4634/ 利用前提 已安装 Wordpress（所有版本均可）...

CVE-2024-41110-SCAN

CVE-2024-41110 Docker 安全检查器 此工具旨在检查主机是否存在与 Docker 安装中 CVE-2024-41110 相关的漏洞。 它会专门查找易受攻击的 Docker 版本以及 AuthZ 插件的使用情况，这些都可能潜在地导致安全问题。 使用方法 使用以下命令运行脚本： root@kitploit: python3 scan-CVE-2024-41110.py 备注 Vladimir Poglazov 项目的精简版 - GitHub...

CVE-2026-84835 WordPress Rentsyst plugin <= 2.1.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in DimaFreund Rentsyst allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Rentsyst: from n/a through 2.1.2...

CVE-2026-84835

CVE-2026-84835 is a Missing Authorization (Broken Access Control) vulnerability in the DimaFreund Rentsyst WordPress plugin, affecting versions through 2.1.2 . The flaw allows an unauthenticated, remote attacker to exploit incorrectly configured access control security levels, resulting in low co...

CVE-2025-4094-POC

WordPress Plugin Digits Bypass de OTP CVE-2025-4094 Resumen Este script es un exploit para el plugin Digits de WordPress versiones -p -i OPCIONES Argumentos -u, --url: Requerido URL objetivo p.ej., https://example.com/wp-admin/admin-ajax.php -p, --phone: Requerido Número de teléfono objetivo solo...

WordPress Rentsyst plugin <= 2.1.2 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by benzdeus in WordPress Plugin Rentsyst versions = 2.1.2...

WordPress Product Variations Swatches for WooCommerce plugin <= 1.1.18 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Roll in WordPress Plugin Product Variations Swatches for WooCommerce versions = 1.1.18...