Lucene search
+L

238481 matches found

Kitploit
Kitploit
added 2026/09/02 11:58 a.m.6 views

CVE-2024-10245

CVE-2024-10245 Relais 2FA = 1.0 - Authentication Bypass Description The Relais 2FA plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 1.0. This is due to incorrect authentication and capability checking in the 'rldoajax' function. This makes it possible...

9.8CVSS8.2AI score0.01196EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/02 11:58 a.m.7 views

CVE-2024-0679

CVE-2024-0679 ColorMag = 3.1.2 - Missing Authorization to Authenticated Subscriber+ Arbitrary Plugin Installation/Activation Description: The ColorMag theme for WordPress is vulnerable to unauthorized access due to a missing capability check on the pluginactioncallback function in all versions up...

6.5CVSS7.2AI score0.01301EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/02 11:58 a.m.8 views

CVE-2023-6985

CVE-2023-6985 10Web AI Assistant – AI content writing assistant = 1.0.18 - Missing Authorization to Authenticated Subscriber+ Arbitrary Plugin Installation/Activation Description Description The 10Web AI Assistant – AI content writing assistant plugin for WordPress is vulnerable to unauthorized...

8.8CVSS8.1AI score0.01354EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/02 11:57 a.m.6 views

CVE-2023-47840

CVE-2023-47840 Qode Essential Addons = 1.5.2 - Missing Authorization to Authenticated Subscriber+ Arbitrary Plugin Installation/Activation Description: The Qode Essential Addons plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the...

9.9CVSS8AI score0.01408EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/02 11:57 a.m.4 views

CVE-2023-47529

CVE-2023-47529 Cloud Templates & Patterns collection = 1.2.2 - Sensitive Information Exposure via Log File root@kitploit: Description: The Cloud Templates & Patterns collection plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.2.2 via a l...

7.5CVSS7.6AI score0.00972EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/02 11:57 a.m.5 views

CVE-2023-41652

CVE-2023-41652 RSVPMarker = 10.6.6 - Inyección SQL sin autenticación Descripción: El plugin RSVPMarker para WordPress es vulnerable a la inyección SQL a través del parámetro 'email' en versiones hasta, e incluyendo, la 10.6.6 debido a un escape insuficiente en el parámetro proporcionado por el...

9.8CVSS8.2AI score0.01026EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/02 11:57 a.m.7 views

CVE-2021-25032

CVE-2021-25032 PublishPress Capabilities 2.2 - 2.3 - Unauthenticated Arbitrary Options Update to Blog Compromise Description The plugin does not have authorisation and CSRF checks when updating the plugin's settings via the init hook, and does not ensure that the options to be updated belong to t...

9.8CVSS8.2AI score0.06691EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/02 11:57 a.m.4 views

CVE-2023-30486

CVE-2023-30486 Square = 2.0.0 - Missing Authorization via activateplugin Description The Square theme for WordPress is vulnerable to unauthorized plugin activation due to a missing capability check on the activateplugin function called via an AJAX action in versions up to, and including, 2.0.0...

4.3CVSS8.2AI score0.00712EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/02 11:57 a.m.7 views

CVE-2022-45808

CVE-2022-45808 LearnPress Plugin 4.2.0 - Unauthenticated time-based blind SQLi Description The plugin does not properly sanitise and escape the order by parameter before using it in a SQL statement, leading to a SQL injection exploitable by unauthenticated users POC root@kitploit: $ python...

9.9CVSS8AI score0.04269EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/02 11:57 a.m.4 views

CVE-2021-24647

CVE-2021-24647 CVE-2021-24647 Pie Register 3.7.1.6 - Unauthenticated Arbitrary Login Info root@kitploit: usage: exploit.py -h -w URL -p PATH options: -h, --help show this help message and exit -w URL, --url URL URL of the WordPress site -p PATH, --path PATH Path of the Login Page /login/ or...

8.1CVSS7.5AI score0.0983EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/02 11:57 a.m.8 views

CVE-2019-15896

CVE-2019-15896 LifterLMS = 3.34.5 - Unauthenticated Options Import Description Unauthenticated Options Import, which could lead to Website Redirection Administrator Account Creation Content Injection Stored XSS The issues have been reported as fixed in 3.35.0. However v3.35.1 added additional inp...

9.8CVSS8AI score0.06488EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/02 11:57 a.m.6 views

CVE-2020-36730

CVE-2020-36730 CMP - Coming Soon & Maintenance 3.8.2 - Improper Access Controls on AJAX Calls Subscriber+ Description: Some of the AJAX calls from the plugin do not properly check for capabilities and CSRF tokens, leading to issues such as arbitrary post read, subscribers list export and plugin...

9.3CVSS8.2AI score0.02269EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/02 11:56 a.m.5 views

CVE-2022-1203

CVE-2022-1203 Content Mask 1.8.4 - Actualización arbitraria de opciones por Suscriptor+ Descripción El plugin de WordPress Content Mask anterior a la versión 1.8.4.1 no realiza comprobaciones de autorización y CSRF en varias acciones AJAX, y tampoco valida que la opción a actualizar pertenezca al...

4.3CVSS5.8AI score0.00993EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/02 11:56 a.m.10 views

CVE-2022-0439

CVE-2022-0439 CVE-2022-0439 - Email Subscribers & Newsletters 5.3.2 - Subscriber+ Blind SQL injection Must Have sqlmap installed & a valid username & password with subscriber+ Usage root@kitploit: usage: CVE-2022-0439.py -h -w URL -u USERNAME -p PASSWORD options: -h, --help show this help message...

8.8CVSS7.7AI score0.04156EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/02 11:56 a.m.5 views

CVE-2024-5084

Hash Form 9.9.1 file upload vulnerability Exploit The Hash Form – Drag & Drop Form Builder plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'fileuploadaction' function in all versions up to, and including, 1.1.0. This makes it possible for...

9.8CVSS8.2AI score0.50653EPSS
SaveExploits8
Cvelist
Cvelist
added 2026/09/02 11:56 a.m.40 views

CVE-2026-84217 WordPress Classified Listing plugin <= 6.1.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in Mamunur Rashid Classified Listing allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Classified Listing: from n/a through 6.1.1...

5.4CVSS0.00265EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/02 11:56 a.m.5 views

CVE-2023-5360

CVE-2023-5360 An Open-source EXPLOIT for The Royal Elementor Addons and Templates WordPress plugin before 1.3.79 does not properly validate uploaded files, which could allow unauthenticated users to upload arbitrary files, such as PHP and achieve RCE. Table of Contents Introduction Features Usage...

9.8CVSS8.2AI score0.81695EPSS
SaveExploits18
CVE
CVE
added 2026/09/02 11:56 a.m.17 views

CVE-2026-84217

CVE-2026-84217 is a Missing Authorization (Broken Access Control) vulnerability in the WordPress plugin Classified Listing by Mamunur Rashid, affecting versions from unknown (n/a) through 6.1.1 . The flaw allows authenticated low-privilege users to access functionality not properly constrained by...

5.4CVSS5.9AI score0.00265EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2026/09/02 11:55 a.m.9 views

WordPress Classified Listing plugin <= 6.1.2 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Muhammad Bilal bilalmajid1 in WordPress Plugin Classified Listing versions = 6.1.2...

5.4CVSS5.9AI score0.00265EPSS
SaveExploits0Affected Software1
Kitploit
Kitploit
added 2026/09/02 11:52 a.m.4 views

CVE-2023-4634

CVE-2023-4634 RCE Exploit for Wordpress Plugin Media-Library Plugin 3.10 CVE-2023-4634 Info Patrowl discovered An unauthenticated RCE Vulnerability on Media-Librairy-Assistant Wordpress Plugin in version 3.10. The exploit is not trivial and requires just a little setup explained bellow. Global...

9.8CVSS8.2AI score0.8589EPSS
SaveExploits6References1
Rows per page
Query Builder