CVE-2020-28032_PoC

CVE-2020-28032PoC PoC for CVE-2020-28032 It's just a POP chain in WordPress RequestsUtilityFilteredIterator Object callback:protected = system storage:ArrayIterator:private = Array 0 = id uid=1000nth347 gid=1000nth347...

Laravel-vul

Laravel-vul A POP chain discovered during personal audit of Laravel 5, Vulnerability ID: CVE-2021-43503 Details see issues...

CVE-2021-43503

Warning The vulnerability has been revoked Override This is Abount CVE-2021-43503, I can not replicate this vulnerability through exp Requirement PHP 7.1. Composer registrar=$b; namespace Illuminate\Queue\Capsule class Manager protected $manager; public function construct$c $this-manager-method=$...

CVE-2026-82222

CVE-2026-82222 — GiveWP 작성자: Rx019 CVSS: 10.0 치명적 유형: 인증되지 않은 PHP 객체 주입 → 원격 코드 실행 플러그인: GiveWP give — 기부 플러그인 및 펀드레이징 플랫폼 영향 버전: 패치 버전: 4.16.8 설명 GiveWP는 기부자의 lastname을 검증 없이 PHP 세션에 저장합니다. givelast 필드 없이 기부가 제출되면, GiveWP는 데이터베이스의 원시 값을 세션에 직접 역직렬화합니다. 이를 통해 인증되지 않은 공격자가 기부자 프로필 엔드포인트를 통해...

CVE-2019-9081_PoC

CVE-2019-9081poc Poc for CVE-2019-9081, this CVE is just a new POP chain. The project is a pre-built vulnerable Laravel 5.7.x application with an entry point for POI vulnerability at URI /deserialize POST-request. Lab setup: Starting the vulnerable application: $ git clone...

CVE-2026-82222-MassExploit

CVE-2026-82222 — GiveWP WordPress 플러그인 인증 없이 원격 코드 실행 치명적인 인증 없는 원격 코드 실행 CVSS 9.8 — GiveWP ≤ 4.16.7.1 이 도구는 WordPress GiveWP 플러그인의 취약점인 CVE-2026-82222 을 악용하며, 인증되지 않은 공격자 가 PHP 객체 주입POP 체인 역직렬화 공격을 통해 서버에서 임의의 명령을 실행할 수 있게 합니다. ⚠️ 취약점 개요 속성| 값 ---|--- CVE ID| CVE-2026-82222 CVSS 점수| 9.8 치명적 CWE|...

CVE-2024-56058

CVE-2024-56058 VRPConnector = 2.0.1 - Unauthenticated PHP Object Injection Description The VRPConnector plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 2.0.1 via deserialization of untrusted input. This makes it possible for unauthenticated attackers t...

CVE-2024-56059

CVE-2024-56059 Partners = 0.2.0 - 인증되지 않은 PHP 객체 인젝션 설명 WordPress용 Partners 플러그인은 0.2.0 이하 버전에서 신뢰할 수 없는 입력의 역직렬화를 통해 PHP 객체 인젝션에 취약합니다. 이로 인해 인증되지 않은 공격자가 PHP 객체를 주입할 수 있습니다. 취약한 소프트웨어에는 알려진 POP 체인이 존재하지 않습니다. 대상 시스템에 설치된 추가 플러그인이나 테마를 통해 POP 체인이 존재하는 경우, 공격자가 임의의 파일을 삭제하거나, 민감한 데이터를 검색하거나, 코드를...

CVE-2019-9081_PoC

CVE-2019-9081poc Poc for CVE-2019-9081, this CVE is just a new POP chain. The project is a pre-built vulnerable Laravel 5.7.x application with an entry point for POI vulnerability at URI /deserialize POST-request. Lab setup: Starting the vulnerable application: $ git clone...

CVE-2026-91827

The Ninja Forms WordPress plugin 3.15.3 does not prevent user-submitted form field values from being deserialised when an administrator later exports form submissions to CSV, allowing unauthenticated attackers to perform PHP Object Injection; if a suitable POP chain is present via another install...

CVE-2026-19658

Give Tributes WordPress plugin (≤ 2.3.1 ) is vulnerable to PHP Object Injection via deserialization of untrusted input in the give_tributes_ecard_notify[recipient][personalized][] parameter, exploitable by unauthenticated attackers. No known POP chain exists within the plugin itself, so impact de...

CVE-2026-19658 Give Tributes <= 2.3.1 - Unauthenticated PHP Object Injection via 'give_tributes_ecard_notify[recipient][personalized][]' Parameter

The Give Tributes plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.3.1 via deserialization of untrusted input . This makes it possible for unauthenticated attackers to inject a PHP Object. No known POP chain is present in the vulnerable software,...

CVE-2026-19658: Deserialization of Untrusted Data

The Give Tributes plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.3.1 via deserialization of untrusted input . This makes it possible for unauthenticated attackers to inject a PHP Object. No known POP chain is present in the vulnerable software,...

CVE-2026-17086

The ShortPixel Image Optimizer – Optimize Images, Convert WebP & AVIF plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 6.5.5 via deserialization of untrusted input . This makes it possible for authenticated attackers, with author-level access and...

CVE-2026-17086 ShortPixel Image Optimizer <= 6.5.5 - Authenticated (Author+) PHP Object Injection via Nested JSON Post Content

The ShortPixel Image Optimizer – Optimize Images, Convert WebP & AVIF plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 6.5.5 via deserialization of untrusted input . This makes it possible for authenticated attackers, with author-level access and...

CVE-2026-17086 ShortPixel Image Optimizer <= 6.5.5 - Authenticated (Author+) PHP Object Injection via Nested JSON Post Content

The ShortPixel Image Optimizer – Optimize Images, Convert WebP & AVIF plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 6.5.5 via deserialization of untrusted input . This makes it possible for authenticated attackers, with author-level access and...

EUVD-2026-82653

The ShortPixel Image Optimizer – Optimize Images, Convert WebP & AVIF plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 6.5.5 via deserialization of untrusted input . This makes it possible for authenticated attackers, with author-level access and...

CVE-2026-17086

The ShortPixel Image Optimizer WordPress plugin (versions

CVE-2026-78175 Tutor LMS <= 4.0.7 - Authenticated (Subscriber+) PHP Object Injection to Remote Code Execution

The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 4.0.7 via the withdrawmethodfield parameter of the tutorsavewithdrawaccount AJAX handler. This is due to the handler lacking any capability or role...

CVE-2026-78175

Tutor LMS (WordPress eLearning plugin) is vulnerable to PHP Object Injection in versions up to and including 4.0.7 via the withdraw_method_field parameter of the tutor_save_withdraw_account AJAX handler. The handler relies solely on a nonce without capability checks, and a flaw in how esc_sql() h...