Lucene search
+L

238223 matches found

Kitploit
Kitploit
added 2026/09/02 11:43 a.m.8 views

CVE-2025-47539

🚨 CVE-2025-47539 – Explotación Crítica del Plugin Eventin de WordPress 🔥 Resumen de la Vulnerabilidad El plugin Event Manager, Events Calendar, Tickets, Registrations – Eventin para WordPress es vulnerable a escalada de privilegios sin autenticación debido a una verificación de autorización...

9.8CVSS8.4AI score0.27878EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/02 11:43 a.m.6 views

CVE-2025-47646

🔐 CVE-2025-47646 – Inicio de sesión y registro front-end de PSW = 1.12 📌 Información del plugin Plugin : PSW Front-end Login & Registration Versión vulnerable : = 1.12 CVE : CVE-2025-47646 Gravedad : Alta CVSS 9.8 Tipo de vulnerabilidad : Autenticación rota Privilegio requerido : No autenticado...

9.8CVSS8.1AI score0.24936EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/02 11:43 a.m.4 views

CVE-2025-5701

CVE-2025-5701 - Exploit de Escalada de Privilegios No Autenticada Severidad: CRÍTICA CVSS 9.8 Plugin Afectado: HyperComments para WordPress Versiones Afectadas: ≤ 1.2.2 📌 Resumen de Vulnerabilidad El plugin HyperComments para WordPress es vulnerable a la modificación no autorizada de opciones de...

8.8CVSS6AI score0.02063EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/02 11:43 a.m.5 views

CVE-2025-32641

🛡️ Anant Addons for Elementor = 1.1.5 - CSRF para instalación arbitraria de plugins 🧨 CVE-2025-32641 Vulnerabilidad de falsificación de solicitudes entre sitios CSRF en anantaddons ' Anant Addons for Elementor Este problema afecta a las versiones: desde una versión desconocida hasta la 1.1.5...

9.6CVSS8.1AI score0.00285EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/02 11:43 a.m.3 views

CVE-2025-6058

⚡ WPBookit = 1.0.4 - Unauthenticated Arbitrary File Upload 📝 Description The WPBookit plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the imageuploadhandle function, which is hooked via the addbookingtype route in all versions up to, and...

9.8CVSS5.9AI score0.05497EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/02 11:43 a.m.5 views

CVE-2025-32583

🚨 CVE-2025-32583 — WordPress PDF 2 Post RCE Exploit CRITICAL Vulnerability CVE-ID: CVE-2025-32583 Severity: 9.9 CRITICAL CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H 📖 Description A vulnerability in the PDF 2 Post WordPress plugin developed by termel allows Remote Code Inclusion RCE...

9.9CVSS8.2AI score0.18219EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/02 11:42 a.m.10 views

CVE-2025-4334

🔓 सरल उपयोगकर्ता पंजीकरण = 6.3 - बिना प्रमाणीकरण के विशेषाधिकार वृद्धि 📄 विवरण WordPress के लिए Simple User Registration प्लगइन 6.3 तक और सहित सभी संस्करणों में विशेषाधिकार वृद्धि के प्रति संवेदनशील है। यह पंजीकरण के दौरान प्रदान किए जा सकने वाले उपयोगकर्ता मेटा मानों पर अपर्याप्त प्रतिबंधों के...

9.8CVSS6AI score0.02138EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/02 11:42 a.m.5 views

CVE-2025-39538

🛡️ CVE-2025-39538 - WordPress WP-Advanced-Search = 3.3.9.3 Arbitrary File Upload CVE-2025-39538 Published: 2025-04-16 Vulnerability Type: Arbitrary File Upload Unrestricted Upload of File with Dangerous Type Affected Plugin: WP-Advanced-Search by Mathieu Chartier Affected Versions: All versions up...

6.6CVSS8.2AI score0.0047EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/02 11:42 a.m.7 views

CVE-2025-39436

🚨 WordPress Plugin Exploit: CVE-2025-39436 📝 Description An Unrestricted Upload of File with Dangerous Type vulnerability exists in the "I Draw" WordPress plugin. This exploit allows attackers to upload malicious files without restriction. The issue impacts I Draw versions up to 1.0. 🛠️ Exploit...

9.1CVSS8.2AI score0.00689EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/02 11:42 a.m.6 views

CVE-2025-30911

Exploit para CVE-2025-30911 – WordPress RomethemeKit = 1.5.4 Este script explota una vulnerabilidad crítica en el plugin RomethemeKit For Elementor para WordPress = v1.5.4 que permite la instalación y activación arbitraria de plugins autenticados , lo que potencialmente lleva a Ejecución Remota d...

9.9CVSS8.4AI score0.01899EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/02 11:42 a.m.6 views

CVE-2025-3102

🔐 CVE-2025-3102 – Authentication Bypass in SureTriggers WordPress Plugin 🚨 CVE-2025-3102 is a critical authentication bypass vulnerability affecting the SureTriggers: All-in-One Automation Platform WordPress plugin, which is actively installed on over 100,000 websites. Due to the nature of the fl...

8.1CVSS8.1AI score0.759EPSS
SaveExploits8
Kitploit
Kitploit
added 2026/09/02 11:42 a.m.6 views

CVE-2025-23922

CVE-2025-23922 - WordPress iSpring Embedder: de CSRF a Subida Arbitraria de Archivos 📌 Detalles del CVE CVE ID: CVE-2025-23922 Publicado: 2025-01-16 Plugin afectado: WordPress iSpring Embedder plugin Versiones afectadas: = 1.0 Autor del plugin: Harsh Tipo de vulnerabilidad: Cross-Site Request...

10CVSS8.2AI score0.01074EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/02 11:42 a.m.6 views

CVE-2025-2249

🔐 Plugin SoJ SoundSlides de WordPress ⚠️ DESCARGO DE RESPONSABILIDAD: Este exploit es solo con fines educativos y de pruebas autorizadas. 📌 Resumen de la Vulnerabilidad Plugin: SoJ SoundSlides Versiones Afectadas: = 1.2.2 Tipo: Subida Arbitraria de Archivos Autenticada Contribuidor+ Estado del...

8.8CVSS8.2AI score0.00756EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/02 11:42 a.m.10 views

CVE-2024-9698

CVE-2024-9698 Exploit de Carga Arbitraria de Archivos en Crafthemes Demo Import = 3.3 📌 Resumen Este exploit aprovecha una vulnerabilidad crítica CVE-2024-9698 en el plugin Crafthemes Demo Import para WordPress. La vulnerabilidad permite a administradores autenticados cargar archivos arbitrarios ...

7.2CVSS8.2AI score0.01725EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/02 11:42 a.m.6 views

CVE-2024-7985-PoC

CVE-2024-7985-PoC FileOrganizer = 1.0.9 - Authenticated Subscriber+ Arbitrary File Upload FileOrganizer Exploit - CVE-2024-7985 📌 Overview CVE-2024-7985 - WordPress Plugin FileOrganizer = 1.0.9 is vulnerable to authenticated arbitrary file uploads , allowing attackers with Subscriber+ privileges...

8.8CVSS7.4AI score0.02355EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/02 11:42 a.m.8 views

CVE-2024-9234

CVE-2024-9234 GutenKit = 2.1.0 - Subida de archivos arbitraria no autenticada POC python CVE-2024-9234.py -h baseurl Nota Este script se proporciona únicamente con fines educativos. El autor no se responsabiliza por los daños causados por el mal uso de este script...

9.8CVSS8.3AI score0.10446EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/02 11:42 a.m.8 views

CVE-2024-6460

CVE-2024-6460 Grow by Tradedoubler 2.0.22 - Unauthenticated LFI Usage root@kitploit: usage: CVE-2024-6460.py -h -u URL -U USERNAME -P PASSWORD -c COMPONENT Grow by Tradedoubler 2.0.22 - Unauthenticated LFI options: -h, --help show this help message and exit -u URL, --url URL Target WordPress site...

9.8CVSS5.8AI score0.04826EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/02 11:42 a.m.5 views

CVE-2025-25101

🚀 CVE-2025-25101 - Complemento Munk Sites de WordPress = 1.0.7 - CSRF para instalación arbitraria de complementos 📌 Resumen CVE-2025-25101 es una vulnerabilidad de Cross-Site Request Forgery CSRF en el complemento MetricThemes Munk Sites para WordPress versiones ≤ 1.0.7. Esta vulnerabilidad permi...

9.6CVSS8.2AI score0.00551EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/02 11:41 a.m.4 views

CVE-2025-1304

🚨 WordPress NewsBlogger Theme = 0.2.5.1 - Arbitrary File Upload CVE-2025-1304 CVSS Score: 8.8 High Vulnerability Type: Arbitrary File Upload Component: WordPress Theme CVE ID: CVE-2025-1304 🔥 Vulnerability Overview The NewsBlogger WordPress theme versions = 0.2.5.1 is vulnerable to an Arbitrary...

8.8CVSS8.1AI score0.01063EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/02 11:41 a.m.8 views

CVE-2024-9756

🚀 WooCommerce Arbitrary File Upload Exploit CVE-2024-9756 📌 Overview This exploit leverages an unauthorized limited arbitrary file upload vulnerability in the Order Attachments for WooCommerce plugin versions 2.0 to 2.4.1 for WordPress. The vulnerability allows authenticated users Subscriber+ to...

4.3CVSS5.9AI score0.0086EPSS
SaveExploits1
Rows per page
Query Builder