Lucene search
+L

238525 matches found

Kitploit
Kitploit
added 2026/09/02 11:43 a.m.5 views

CVE-2025-32583

🚨 CVE-2025-32583 — WordPress PDF 2 Post RCE Exploit CRITICAL Vulnerability CVE-ID: CVE-2025-32583 Severity: 9.9 CRITICAL CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H 📖 Description A vulnerability in the PDF 2 Post WordPress plugin developed by termel allows Remote Code Inclusion RCE...

9.9CVSS8.2AI score0.18219EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/02 11:42 a.m.11 views

CVE-2025-4334

🔓 Simple User Registration = 6.3 - Escalada de Privilegios No Autenticada 📄 Descripción El plugin Simple User Registration para WordPress es vulnerable a una Escalada de Privilegios en todas las versiones hasta la 6.3 inclusive. Esto se debe a restricciones insuficientes en los valores meta de...

9.8CVSS6AI score0.02138EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/02 11:42 a.m.5 views

CVE-2025-39538

🛡️ CVE-2025-39538 - WordPress WP-Advanced-Search = 3.3.9.3 Arbitrary File Upload CVE-2025-39538 Published: 2025-04-16 Vulnerability Type: Arbitrary File Upload Unrestricted Upload of File with Dangerous Type Affected Plugin: WP-Advanced-Search by Mathieu Chartier Affected Versions: All versions up...

6.6CVSS8.2AI score0.0047EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/02 11:42 a.m.7 views

CVE-2025-39436

🚨 WordPress Plugin Exploit: CVE-2025-39436 📝 Description An Unrestricted Upload of File with Dangerous Type vulnerability exists in the "I Draw" WordPress plugin. This exploit allows attackers to upload malicious files without restriction. The issue impacts I Draw versions up to 1.0. 🛠️ Exploit...

9.1CVSS8.2AI score0.00689EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/02 11:42 a.m.7 views

CVE-2025-30911

Exploit for CVE-2025-30911 – WordPress RomethemeKit = 1.5.4 This script exploits a critical vulnerability in the RomethemeKit For Elementor WordPress plugin = v1.5.4 that allows authenticated arbitrary plugin installation and activation , potentially leading to Remote Code Execution RCE. 🛠️...

9.9CVSS8.4AI score0.01899EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/02 11:42 a.m.6 views

CVE-2025-3102

🔐 CVE-2025-3102 – Authentication Bypass in SureTriggers WordPress Plugin 🚨 CVE-2025-3102 is a critical authentication bypass vulnerability affecting the SureTriggers: All-in-One Automation Platform WordPress plugin, which is actively installed on over 100,000 websites. Due to the nature of the fl...

8.1CVSS8.1AI score0.759EPSS
SaveExploits8
Kitploit
Kitploit
added 2026/09/02 11:42 a.m.6 views

CVE-2025-23922

CVE-2025-23922 - WordPress iSpring Embedder CSRF to Arbitrary File Upload 📌 CVE Details CVE ID: CVE-2025-23922 Published: 2025-01-16 Plugin Affected: WordPress iSpring Embedder plugin Versions Affected: = 1.0 Author of Plugin: Harsh Vulnerability Type: Cross-Site Request Forgery CSRF → Arbitrary...

10CVSS8.2AI score0.01074EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/02 11:42 a.m.7 views

CVE-2025-2249

🔐 Plugin SoJ SoundSlides de WordPress ⚠️ DESCARGO DE RESPONSABILIDAD: Este exploit es solo con fines educativos y de pruebas autorizadas. 📌 Resumen de la Vulnerabilidad Plugin: SoJ SoundSlides Versiones Afectadas: = 1.2.2 Tipo: Subida Arbitraria de Archivos Autenticada Contribuidor+ Estado del...

8.8CVSS8.2AI score0.00756EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/02 11:42 a.m.10 views

CVE-2024-9698

CVE-2024-9698 Crafthemes Demo Import = 3.3 - Arbitrary File Upload Exploit 📌 Overview This exploit targets a critical vulnerability CVE-2024-9698 in the Crafthemes Demo Import plugin for WordPress. The vulnerability allows authenticated administrators to upload arbitrary files to the affected...

7.2CVSS8.2AI score0.01725EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/02 11:42 a.m.6 views

CVE-2024-7985-PoC

CVE-2024-7985-PoC FileOrganizer = 1.0.9 - Subida Arbitraria de Archivos Autenticada Suscriptor+ Exploit de FileOrganizer - CVE-2024-7985 📌 Resumen CVE-2024-7985 - El plugin FileOrganizer = 1.0.9 de WordPress es vulnerable a subidas arbitrarias de archivos autenticadas , permitiendo a atacantes co...

8.8CVSS7.4AI score0.02355EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/02 11:42 a.m.8 views

CVE-2024-9234

CVE-2024-9234 GutenKit = 2.1.0 - Subida de archivos arbitraria no autenticada POC python CVE-2024-9234.py -h baseurl Nota Este script se proporciona únicamente con fines educativos. El autor no se responsabiliza por los daños causados por el mal uso de este script...

9.8CVSS8.3AI score0.10446EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/02 11:42 a.m.9 views

CVE-2024-6460

CVE-2024-6460 Grow by Tradedoubler 2.0.22 - Unauthenticated LFI Usage root@kitploit: usage: CVE-2024-6460.py -h -u URL -U USERNAME -P PASSWORD -c COMPONENT Grow by Tradedoubler 2.0.22 - Unauthenticated LFI options: -h, --help show this help message and exit -u URL, --url URL Target WordPress site...

9.8CVSS5.8AI score0.04826EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/02 11:42 a.m.5 views

CVE-2025-25101

🚀 CVE-2025-25101 - WordPress Munk Sites Plugin = 1.0.7 - CSRF to Arbitrary Plugin Installation 📌 Overview CVE-2025-25101 is a Cross-Site Request Forgery CSRF vulnerability in the MetricThemes Munk Sites plugin for WordPress versions ≤ 1.0.7. This vulnerability allows an unauthenticated attacker t...

9.6CVSS8.2AI score0.00551EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/02 11:41 a.m.4 views

CVE-2025-1304

🚨 WordPress NewsBlogger Theme = 0.2.5.1 - Arbitrary File Upload CVE-2025-1304 CVSS Score: 8.8 High Vulnerability Type: Arbitrary File Upload Component: WordPress Theme CVE ID: CVE-2025-1304 🔥 Vulnerability Overview The NewsBlogger WordPress theme versions = 0.2.5.1 is vulnerable to an Arbitrary...

8.8CVSS8.1AI score0.01063EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/02 11:41 a.m.8 views

CVE-2024-9756

🚀 WooCommerce Arbitrary File Upload Exploit CVE-2024-9756 📌 Overview This exploit leverages an unauthorized limited arbitrary file upload vulnerability in the Order Attachments for WooCommerce plugin versions 2.0 to 2.4.1 for WordPress. The vulnerability allows authenticated users Subscriber+ to...

4.3CVSS5.9AI score0.0086EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/02 11:41 a.m.8 views

CVE-2024-6366-PoC

CVE-2024-6366-PoC User Profile Builder = 3.11.7 - Unauthenticated Media Upload Description The User Profile Builder WordPress plugin before 3.11.8 does not have proper authorisation, allowing unauthenticated users to upload media files via the async upload functionality of WP. Usage: root@kitploi...

9.1CVSS6AI score0.28993EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/02 11:41 a.m.8 views

CVE-2024-6244

🚀 pz-frontend-manager = 1.0.5 - CSRF Profile Picture Exploit 🛠️ Description This script exploits a CSRF vulnerability in the WordPress plugin pz-frontend-manager versions = 1.0.5 to change the profile picture of a logged-in user without their consent. 🔴 CVE-2024-6244 The plugin lacks proper CSRF...

8.8CVSS5.9AI score0.02836EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/02 11:41 a.m.10 views

CVE-2024-9707-Poc

CVE-2024-9707-Poc 🌐 Description This script exploits the vulnerability in the WordPress Hunk Companion plugin CVE-2024-9707, allowing unauthorized attackers to install and activate arbitrary plugins via the /wp-json/hc/v1/themehunk-import REST API endpoint. Features...

9.8CVSS8.4AI score0.09078EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/02 11:41 a.m.6 views

CVE-2024-56249

🛠️ WordPress Master Toolkit Exploit CVE-2024-56249 🌟 Overview This script exploits an Arbitrary File Upload vulnerability in the WordPress WPMasterToolKit plugin, allowing an attacker to upload a web shell to the server. The vulnerability exists in versions -un -p -fn 📋 Parameters...

9.1CVSS8.5AI score0.01264EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/02 11:41 a.m.7 views

CVE-2024-56071

🚨 Simple Dashboard = 2.0 - Unauthenticated Privilege Escalation 📄 Description The Simple Dashboard plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.0. This makes it possible for unauthenticated attackers to elevate their privileges to that of an...

9.8CVSS8.2AI score0.00622EPSS
SaveExploits1
Rows per page
Query Builder