CVE-2023-51409

CVE-2023-51409 AI Engine: ChatGPT Chatbot = 1.9.98 - Unauthenticated Arbitrary File Upload via restupload Description This could allow a malicious actor to upload any type of file to your website. This can include backdoors which are then executed to gain further access to your website. usage:...

CVE-2024-10629

🛠️ GPX Viewer Exploit CVE-2024-10629 This repository contains a proof-of-concept exploit for the GPX Viewer plugin for WordPress, which is vulnerable to arbitrary file creation CVE-2024-10629. The vulnerability allows authenticated attackers with subscriber-level access and above to create...

CVE-2023-47668

CVE-2023-47668 Description Exposure of Sensitive Information to an Unauthorized Actor vulnerability in StellarWP Membership Plugin – Restrict Content plugin Example of the result root@kitploit: Log file content: 2024-12-24 20:47:19 - wprcpdiscounts table upgrade to 202003311 successful. 2024-12-2...

CVE-2026-15013

CVE-2026-15013 — miniOrange SAML SSO = 5.4.3 प्रमाणीकरण बायपास PoC CVE-2026-15013 के लिए प्रूफ-ऑफ-कॉन्सेप्ट: miniOrange SAML Single Sign On – SSO Login WordPress प्लगइन संस्करण 5.4.3 तक, समावेशी में SAML सिग्नेचर एल्गोरिथम कन्फ्यूजन HMAC-SHA1 के माध्यम से बिना प्रमाणीकरण के ऑथेंटिकेशन बायपास। केव...

CVE-2018-6574

कोड और सामान...

CVE-2026-21962-o

CVE-2026-21962 إنها أول ثغرة أمنية لي بتصنيف CVSS 10.0! 👍✅💯㊗️🀄️🈵 الملخص ثغرة أمنية قابلة للاستغلال بسهولة تسمح لمهاجم غير مصادق مع وصول إلى الشبكة عبر HTTP باختراق Oracle HTTP Server وOracle Weblogic Server Proxy Plug-in. مهم: رسالة من المكتشف الأصلي نظرًا للضرر المحتمل على عالم الإنترنت، سأقوم...

CVE-2024-10578

CVE-2024-10578: Pubnews = 1.0.7 - Unauthenticated Arbitrary Plugin Installation Description The Pubnews theme for WordPress is vulnerable to unauthorized arbitrary plugin installation due to a missing capability check on the pubnewsimporterpluginactionfornotice function in all versions up to, and...

CVE-2026-84780 WordPress WP Go Maps plugin <= 10.1.08 - Denial of Service Attack vulnerability

Unauthenticated Denial of Service Attack in WP Go Maps = 10.1.08 versions...

CVE-2026-84780

WP Go Maps is a WordPress plugin affected by an unauthenticated Denial of Service vulnerability in versions ≤ 10.1.08 , as reported by researcher Asim Alshaya via Patchstack. The CVSS 3.1 score is 5.3 (Medium) with a network attack vector, low complexity, and no privileges required, resulting in ...

EUVD-2026-69942

Unauthenticated Denial of Service Attack in WP Go Maps = 10.1.08 versions...

CVE-2026-84775

CVE-2026-84775 affects the Really Simple SSL WordPress plugin, versions 9.8.0 and earlier . The vulnerability allows an unauthenticated Denial of Service attack, meaning a remote attacker with no prior access can disrupt service availability. The CVSS 3.1 base score is 5.3 (MEDIUM) , with the pri...

CVE-2026-84775 WordPress Really Simple SSL plugin <= 9.8.0 - Denial of Service Attack vulnerability

Unauthenticated Denial of Service Attack in Really Simple SSL = 9.8.0 versions...

CVE-2026-84772

A Server-Side Request Forgery (SSRF) vulnerability was identified in the Broken Link Checker WordPress plugin, affecting versions ≤ 2.4.14 . The flaw is exploitable by users with Editor privileges, allowing them to forge server-side requests. The CVSS 3.1 score is 5.5 (Medium) with a changed scop...

CVE-2026-84772 WordPress Broken Link Checker plugin <= 2.4.14 - Server Side Request Forgery (SSRF) vulnerability

Editor Server Side Request Forgery SSRF in Broken Link Checker = 2.4.14 versions...

EUVD-2026-69940

Editor Server Side Request Forgery SSRF in Broken Link Checker = 2.4.14 versions...

CVE-2026-84771

This unauthenticated IDOR vulnerability affects the WordPress PublishPress Permissions plugin in versions 4.8.3 and earlier . Discovered by Brobicho and assigned by Patchstack , it allows a remote attacker with no privileges to access resources they should not, resulting in a low confidentiality ...

CVE-2026-84771 WordPress PublishPress Permissions plugin <= 4.8.3 - Insecure Direct Object References (IDOR) vulnerability

Unauthenticated Insecure Direct Object References IDOR in PublishPress Permissions = 4.8.3 versions...

EUVD-2026-69938

Unauthenticated Cross Site Request Forgery CSRF in Mang Board WP = 2.3.8 versions...

CVE-2026-84770 WordPress Mang Board WP plugin <= 2.3.8 - Cross Site Request Forgery (CSRF) vulnerability

Unauthenticated Cross Site Request Forgery CSRF in Mang Board WP = 2.3.8 versions...

CVE-2026-84770

CVE-2026-84770 is an unauthenticated Cross-Site Request Forgery (CSRF) vulnerability in the Mang Board WP WordPress plugin, affecting versions ≤ 2.3.8 . The vulnerability was discovered by John Ryan Albon and is rated CVSS 8.8 (HIGH) with the vector AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, meaning a ...