SessionReaper-CVE-2025-54236

SessionReaper — CVE-2025-54236 CVE-2025-54236 （「SessionReaper」）の統合PoCです。Magento 2 / Adobe CommerceのREST APIにおけるネストされたデシリアライゼーションを悪用した、認証不要のクリティカルなRCEを示します。 CVSS: 9.1（クリティカル） 根本原因: ServiceInputProcessor における不適切な入力検証（CWE-20）。エクスプロイトのプリミティブは安全でないデシリアライゼーション（CWE-502） 発見者: Daniel "Blaklis" Le...

CVE-2026-86789

The Connections Business Directory WordPress plugin through 10.4.67 does not apply its visibility and moderation-status restrictions on certain REST API read endpoints, allowing unauthenticated attackers to retrieve directory entries that are marked private or unlisted, or that are still pending...

CVE-2026-83560

The New User Approve WordPress plugin before 3.2.10 does not properly verify authentication on a set of integration REST API routes when the integration is unconfigured, allowing unauthenticated attackers to retrieve personal data id, username, email address and registration date of registered...

CVE-2026-94274 YayReviews 1.0.4 - 1.4.0 - Unauthenticated Sensitive Data Disclosure via REST API

The YayReviews WordPress plugin before 1.4.1 does not restrict access to an API route that returns individual customer review records, including reviews still pending moderation, allowing unauthenticated attackers to harvest reviewers' email addresses and other non-public review content...

CVE-2026-94274

The YayReviews WordPress plugin, in versions prior to 1.4.1 , contains a vulnerability where it fails to restrict access to an API route designed to return individual customer review records. This oversight allows unauthenticated attackers to harvest sensitive data, including reviewers' email add...

CVE-2026-94274 YayReviews 1.0.4 - 1.4.0 - Unauthenticated Sensitive Data Disclosure via REST API

The YayReviews WordPress plugin before 1.4.1 does not restrict access to an API route that returns individual customer review records, including reviews still pending moderation, allowing unauthenticated attackers to harvest reviewers' email addresses and other non-public review content...

EUVD-2026-89629

The Connections Business Directory WordPress plugin through 10.4.67 does not apply its visibility and moderation-status restrictions on certain REST API read endpoints, allowing unauthenticated attackers to retrieve directory entries that are marked private or unlisted, or that are still pending...

CVE-2026-86789 Connections Business Directory <= 10.4.67 - Unauthenticated Non-Public Directory Entry Disclosure via cn-api/v1 REST Routes

The Connections Business Directory WordPress plugin through 10.4.67 does not apply its visibility and moderation-status restrictions on certain REST API read endpoints, allowing unauthenticated attackers to retrieve directory entries that are marked private or unlisted, or that are still pending...

CVE-2026-86789 Connections Business Directory <= 10.4.67 - Unauthenticated Non-Public Directory Entry Disclosure via cn-api/v1 REST Routes

The Connections Business Directory WordPress plugin through 10.4.67 does not apply its visibility and moderation-status restrictions on certain REST API read endpoints, allowing unauthenticated attackers to retrieve directory entries that are marked private or unlisted, or that are still pending...

CVE-2026-86789

The Connections Business Directory WordPress plugin, in versions up to and including 10.4.67 , fails to enforce visibility and moderation-status restrictions on specific REST API read endpoints (specifically cn-api/v1 routes). This flaw allows unauthenticated attackers to retrieve sensitive infor...

CVE-2026-83560 New User Approve 3.1.0 - 3.2.9 - Unauthenticated PII Disclosure via Zapier API Key Bypass

The New User Approve WordPress plugin before 3.2.10 does not properly verify authentication on a set of integration REST API routes when the integration is unconfigured, allowing unauthenticated attackers to retrieve personal data id, username, email address and registration date of registered...

EUVD-2026-89634

The New User Approve WordPress plugin before 3.2.10 does not properly verify authentication on a set of integration REST API routes when the integration is unconfigured, allowing unauthenticated attackers to retrieve personal data id, username, email address and registration date of registered...

CVE-2026-83560

The New User Approve WordPress plugin, versions 3.1.0 through 3.2.9 , contains a vulnerability where it fails to properly verify authentication on specific integration REST API routes when the integration is left unconfigured. This flaw allows unauthenticated attackers to perform a Zapier API Key...

CVE-2026-83560 New User Approve 3.1.0 - 3.2.9 - Unauthenticated PII Disclosure via Zapier API Key Bypass

The New User Approve WordPress plugin before 3.2.10 does not properly verify authentication on a set of integration REST API routes when the integration is unconfigured, allowing unauthenticated attackers to retrieve personal data id, username, email address and registration date of registered...

CVE-2025-12721

g-FFL Cockpit 'returntrue'，使其对任何未经身份验证的访问者完全可访问。 位于 class-sync-endpoint.php 中： 88: registerrestroute'fflcockpit/v1', '/serverstatus', 89: 'methods' = 'GET', 90: 'callback' = CLASS, 'handleserverstatus', 91: 'permissioncallback' = 'returntrue', // 公共端点 92: ; handleserverstatus 函数暴露： 服务器信息 ：PHP...

CVE-2024-10924

CVE-2024-10924 - Really Simple Security における認証バイパス 概要 このプロジェクトは、WordPressプラグイン「Really Simple Security」における重大な認証バイパス脆弱性であるCVE-2024-10924の悪用と緩和策を実証するものです。 ステップ1: 環境構築 脆弱なWordPress環境を起動します: cd wordpress-really-simple-security-authn-bypass-vulnerable-application docker-compose up -d...

PT-2026-103567

Name of the Vulnerable Software and Affected Versions Kiteworks Core affected versions not specified Description Kiteworks Core failed to apply gateway-level API security controls to all requests authenticated via the central authentication service. This allows an authenticated user to access RES...

CVE-2017-5487

PoC - CVE-2017-5487 - WordPressユーザー列挙（REST経由） セットアップ git clone https://github.com/ndr-repo/CVE-2017-5487.git powershell -noexit -ExecutionPolicy Bypass -File .ps1 使用方法 .\Enumerate-WordPressOrgMembersREST.ps1 代替ルート1（WAFバイパス用）...

Exploit for SQL Injection in Wordpress

WP2Shell — Unauthenticated SQL Injection Proof of Concept C...

CVE-2026-25197

CVE-2026-25197: ユーザー制御キーによる認証バイパス IDOR 勧告 フィールド| 値 ---|--- CVE| CVE-2026-25197 ICSA| ICSA-26-055-03 Update A CVSS 3.1| 9.1 Critical Vector| CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N CWE| CWE-639 Authorization Bypass Through User-Controlled Key Researcher| Michael Groberman — Gr0m Published|...