Lucene search
+L

21110 matches found

Kitploit
Kitploit
added 2026/09/17 7:18 a.m.12 views

CVE-2023-4861-PoC

CVE-2023-4861 PoC 本仓库包含针对 CVE-2023-4861 的 Python 概念验证(PoC),该漏洞是 WordPress 插件 File Manager Pro - Filester 中的一个经过身份验证的远程代码执行 问题。 漏洞摘要 CVE:CVE-2023-4861 产品:File Manager Pro - Filester(filester) 受影响版本: 1.8.1 修复版本:1.8.1 漏洞类型:经过身份验证的任意文件上传导致 RCE 所需权限:Filester 上的 Admin+ 权限 此 PoC 的功能 exploit.py...

7.2CVSS7.4AI score0.01331EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/17 2:36 a.m.8 views

QuickBox-Pro-2.1.8-Authenticated-RCE

QuickBox-Pro-2.1.8-Authenticated-RCE 已认证的低权限用户可以利用命令注入漏洞,以 www-data 身份实现代码执行,并凭借薄弱的 sudo 规则将权限提升至 root。 QuickBox Pro v2.1.8 及更早版本存在漏洞。...

6AI score
SaveExploits0
Nuclei
Nuclei
added 2026/09/17 2:05 a.m.118 views

SEH utnserver Pro/ProMAX/INU-100 20.1.22 - Cross-Site Scripting

A vulnerability was found in utnserver Pro, utnserver ProMAX, and INU-100 version 20.1.22 and earlier, affecting the device description parameter in the web interface. This flaw allows stored cross-site scripting XSS, enabling attackers to inject JavaScript code. The attack can be executed remote...

8.3CVSS5.5AI score0.055EPSS
SaveExploits3References5
Nuclei
Nuclei
added 2026/09/17 2:05 a.m.29 views

The Opal Estate Pro – Property Management <= 1.7.5 - Unauthenticated Privilege Escalation

The Opal Estate Pro plugin ≤ 1.7.5 is vulnerable to privilege escalation. Due to missing role restrictions in the onregisteruser function, users can register with any role. This allows unauthenticated attackers to create administrator accounts. id: CVE-2025-6934 info: name: The Opal Estate Pro –...

9.8CVSS5.8AI score0.26442EPSS
SaveExploits12References2
Nuclei
Nuclei
added 2026/09/17 2:05 a.m.54 views

Elementor Pro <=4.2.1 - Unauthenticated Arbitrary File Upload via Form Handler

Elementor Pro plugin for WordPress in versions =4.2.1 is vulnerable to unauthenticated arbitrary file upload in the Forms module File Upload field. The validation and processfield methods iterate over submitted file entries with different early-exit logic for UPLOADERRNOFILE entries. When an...

9CVSS6.2AI score0.02374EPSS
SaveExploits4References4
Nuclei
Nuclei
added 2026/09/17 2:05 a.m.45 views

Zoho ManageEngine - Access Control Bypass

Zoho ManageEngine Access Manager Plus before 4302, Password Manager Pro before 12007, and PAM360 before 5401 are vulnerable to access-control bypass on a few Rest API URLs for SSOutAction. SSLAction. LicenseMgr. GetProductDetails. GetDashboard. FetchEvents. and Synchronize via the ../RestAPI...

9.8CVSS8.1AI score0.83543EPSS
SaveExploits1References3
Nuclei
Nuclei
added 2026/09/17 2:05 a.m.43 views

WordPress Product Slider Pro for WooCommerce < 3.5.4 - Supply Chain Backdoor RCE

Improper Validation of Specified Quantity in Input vulnerability in ShapedPlugin, LLC Product Slider Pro for WooCommerce allows Malicious Software Implanted. This issue affects Product Slider Pro for WooCommerce: from n/a before 3.5.4. id: CVE-2026-49777 info: name: WordPress Product Slider Pro f...

10CVSS5.7AI score0.01656EPSS
SaveExploits4References3
Nuclei
Nuclei
added 2026/09/17 2:05 a.m.42 views

WP Maps Pro (wp-google-map-gold) <= 6.1.0 - Unauthenticated Administrator Account Creation

The WP Maps Pro plugin for WordPress is vulnerable to Privilege Escalation via Administrator Account Creation in all versions up to, and including, 6.1.0. This is due to the wpgmptempaccessajax AJAX action being registered with wpajaxnopriv and protected only by a nonce check using the...

9.8CVSS5.8AI score0.22728EPSS
SaveExploits8References3
Nuclei
Nuclei
added 2026/09/17 2:05 a.m.50 views

WordPress Custom 404 Pro <= 3.11.1 - Reflected XSS

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Kunal Nagar Custom 404 Pro allows Reflected XSS.This issue affects Custom 404 Pro: from n/a through 3.11.1. id: CVE-2024-39646 info: name: WordPress Custom 404 Pro = 3.11.1 - Reflected XSS...

7.1CVSS5.8AI score0.00624EPSS
SaveExploits0References3
Nuclei
Nuclei
added 2026/09/17 2:05 a.m.158 views

Dokan Pro <= 3.10.3 - SQL Injection

The Dokan Pro plugin for WordPress is vulnerable to SQL Injection via the 'code' parameter in all versions up to, and including, 3.10.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. id: CVE-2024-3922 info: name: Dokan Pro...

10CVSS5.7AI score0.52915EPSS
SaveExploits0References2
Nuclei
Nuclei
added 2026/09/17 2:05 a.m.102 views

WordPress Paid Memberships Pro <2.6.7 - Blind SQL Injection

WordPress Paid Memberships Pro plugin before 2.6.7 is susceptible to blind SQL injection. The plugin does not escape the discountcode in one of its REST routes before using it in a SQL statement. An attacker can possibly obtain sensitive information, modify data, and/or execute unauthorized...

9.8CVSS8.3AI score0.81828EPSS
SaveExploits2References5
Nuclei
Nuclei
added 2026/09/17 2:05 a.m.102 views

WooCommerce Designer Pro <= 1.9.28 - Arbitrary File Read

WooCommerce Designer Pro theme for WordPress = 1.9.28 contains an arbitrary file read vulnerability caused by improper input validation, letting unauthenticated attackers read arbitrary files including sensitive configuration files, exploit requires no authentication. id: CVE-2025-10897 info: nam...

8.6CVSS5.9AI score0.01817EPSS
SaveExploits1References2
Nuclei
Nuclei
added 2026/09/17 2:05 a.m.35 views

WordPress ShowBiz Pro <= 1.7.1 - Authenticated Arbitrary File Upload to RCE

The WordPress ShowBiz Pro plugin version = 1.7.1 allows arbitrary PHP file upload via the admin-ajax.php endpoint.This leads to unauthenticated remote code execution. id: CVE-2015-9499 info: name: WordPress ShowBiz Pro = 1.7.1 - Authenticated Arbitrary File Upload to RCE author:...

9.8CVSS8.4AI score0.16254EPSS
SaveExploits1References3
Nuclei
Nuclei
added 2026/09/17 2:05 a.m.42 views

Everest Forms Pro <= 1.9.12 - Unauthenticated RCE via Calculation Formula Injection

The Everest Forms Pro plugin for WordPress is vulnerable to Remote Code Execution via PHP Code Injection in all versions up to, and including, 1.9.12. This is due to the Calculation Addon's processfilter function concatenating user-submitted form field values into a PHP code string without proper...

9.8CVSS6.5AI score0.39159EPSS
SaveExploits1References4
Nuclei
Nuclei
added 2026/09/17 2:05 a.m.45 views

Tyto Sahi pro 7.x/8.x - Local File Inclusion

Tyto Sahi Pro versions through 7.x.x and 8.0.0 are susceptible to a local file inclusion vulnerability in the web reports module which can allow an outside attacker to view contents of sensitive files. id: CVE-2018-20470 info: name: Tyto Sahi pro 7.x/8.x - Local File Inclusion author: daffainfo...

7.5CVSS7.2AI score0.4606EPSS
SaveExploits6References4
Nuclei
Nuclei
added 2026/09/17 2:05 a.m.75 views

Ads Pro Plugin <= 4.88 - Unauthenticated SQL Injection

The Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager plugin for WordPress is vulnerable to SQL Injection via the 'aid' parameter in all versions up to, and including, 4.88 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQ...

7.5CVSS8.1AI score0.01735EPSS
SaveExploits0References3
Nuclei
Nuclei
added 2026/09/17 2:05 a.m.64 views

Custom 404 Pro < 3.2.8 - Cross-Site Scripting

Custom 404 Pro before 3.2.9 is susceptible to cross-site scripting via the title parameter due to insufficient input sanitization and output escaping. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to...

6.1CVSS6.2AI score0.01611EPSS
SaveExploits2References4
Nuclei
Nuclei
added 2026/09/17 2:05 a.m.47 views

WordPress Personal Dictionary <1.3.4 - Blind SQL Injection

WordPress Personal Dictionary plugin before 1.3.4 contains a blind SQL injection vulnerability. The plugin fails to properly sanitize user-supplied POST data before being interpolated in an SQL statement and executed. An attacker can possibly obtain sensitive information, modify data, and/or...

9.8CVSS8.3AI score0.07681EPSS
SaveExploits2References5
Nuclei
Nuclei
added 2026/09/17 2:05 a.m.35 views

Ads Pro Plugin <= 4.89 - Local File Inclusion

The Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.89 via the 'bsatemplate' parameter of the bsapreviewcallback function. This makes it possible for unauthenticated attackers to includ...

9.8CVSS6.3AI score0.40352EPSS
SaveExploits1References2
Nuclei
Nuclei
added 2026/09/17 2:05 a.m.152 views

Duplicator < 1.5.7.1; Duplicator Pro < 4.5.14.2 - Unauthenticated Sensitive Data Exposure

The Duplicator WordPress plugin before 1.5.7.1, Duplicator Pro WordPress plugin before 4.5.14.2 does not disallow listing the backups-dup-lite/tmp directory or the backups-dup-pro/tmp directory in the Pro version, which temporarily stores files containing sensitive data. When directory listing is...

7.5CVSS7.4AI score0.30894EPSS
SaveExploits5References4
Rows per page
Query Builder