amasty-chekout-POC-rce

CVE-2026-53787 - Amasty Order Attributes Unauthenticated File Upload Description CVE-2026-53787 is a critical unauthenticated arbitrary file upload vulnerability in the Amasty Order Attributes extension for Magento 2 versions prior to 4.0.0 . The vulnerability allows attackers to upload files of...

Blackash-CVE-2025-61757

🚨 CVE-2025-61757 — Alerta de RCE sin autenticación previa 🚨 🧩 Resumen ID: CVE-2025-61757 Producto: Oracle Identity Manager Oracle Fusion Middleware Componente: REST WebServices Versiones afectadas: 12.2.1.4.0 y 14.1.2.1.0 Gravedad: 🔴 Crítico — 9.8 CVSS 3.1 Publicado: 21 de octubre de 2025 Tipo:...

CVE-2026-7458

🧨 CVE-2026-7458 – PickPlugins User Verification OTP Bypass Unauthenticated Authentication Bypass via Loose Comparison in OTP Verification REST API PickPlugins User Verification ≤ 2.0.46 📖 Description The User Verification plugin by PickPlugins for WordPress versions ≤ 2.0.46 contains a critical...

CVE-2026-23550

🧨 CVE-2026-23550 – Modular Connector Admin Bypass Unauthenticated WordPress Admin Login viaorigin=mo Parameter Modular Connector Plugin ≤ 2.5.1 📖 Description The Modular Connector plugin for WordPress versions ≤ 2.5.1 contains a critical authentication bypass vulnerability. An unauthenticated...

the-token-was-a-row-number-cve-2026-67602-phpipam-rest-api-authentication-bypass

CVE-2026-67602 — phpIPAM 1.8.2 REST API Authentication Bypass Unauthenticated authentication bypass in the phpIPAM REST API, caused by an object-cache key collision: the database row cached while resolving an API app's appid satisfies the subsequent appcode token check whenever the supplied token...

CVE-2026-86815

The BackWPup WordPress plugin before 5.7.5 does not properly restrict access to several of its REST API routes for job, backup-destination, and backup-execution management, allowing users holding a BackWPup WordPress plugin before 5.7.5-defined, administrator-assigned limited role to create and r...

CVE-2026-86812

The WPCafe WordPress plugin before 3.0.18 does not correctly restrict access to a set of order-management REST endpoints because their permission callbacks return an incorrect type on failure, allowing unauthenticated users to disclose guest order information and to change the status of, or trash...

St2-052

Prueba del POC de S2-052 nombre original: despliegue de war en Tomcat Dirección del artículo original: http://blog.csdn.net/caiqiiqi/article/details/77861477 Descarga la última versión afectada, struts-2.5.12, desde el sitio oficial de Struts2, en la dirección:...

EUVD-2026-75973

The BackWPup WordPress plugin before 5.7.5 does not properly restrict access to several of its REST API routes for job, backup-destination, and backup-execution management, allowing users holding a BackWPup WordPress plugin before 5.7.5-defined, administrator-assigned limited role to create and r...

CVE-2026-86815 BackWPup 5.2.2 - 5.7.4 - BackWPup Jobs Checker+ Database Backup Exfiltration via Missing Authorization on Job REST Routes

The BackWPup WordPress plugin before 5.7.5 does not properly restrict access to several of its REST API routes for job, backup-destination, and backup-execution management, allowing users holding a BackWPup WordPress plugin before 5.7.5-defined, administrator-assigned limited role to create and r...

CVE-2026-86815

The BackWPup WordPress plugin (versions 5.2.2–5.7.4 ) lacks proper authorization on several REST API routes used for job, backup-destination, and backup-execution management. Users holding a plugin-defined, administrator-assigned limited role can create and execute backup jobs, enabling exfiltrat...

CVE-2026-86812 WPCafe 3.0.10 - 3.0.17 - Unauthenticated Order Disclosure and Modification via food-orders REST API

The WPCafe WordPress plugin before 3.0.18 does not correctly restrict access to a set of order-management REST endpoints because their permission callbacks return an incorrect type on failure, allowing unauthenticated users to disclose guest order information and to change the status of, or trash...

EUVD-2026-75972

The WPCafe WordPress plugin before 3.0.18 does not correctly restrict access to a set of order-management REST endpoints because their permission callbacks return an incorrect type on failure, allowing unauthenticated users to disclose guest order information and to change the status of, or trash...

CVE-2026-86812 WPCafe 3.0.10 - 3.0.17 - Unauthenticated Order Disclosure and Modification via food-orders REST API

The WPCafe WordPress plugin before 3.0.18 does not correctly restrict access to a set of order-management REST endpoints because their permission callbacks return an incorrect type on failure, allowing unauthenticated users to disclose guest order information and to change the status of, or trash...

CVE-2026-86812

WPCafe WordPress plugin versions 3.0.10 through 3.0.17 are affected by an authorization flaw in its food-orders REST API endpoints. The root cause is that permission callbacks return an incorrect type on failure , which bypasses access checks and allows unauthenticated users to disclose guest ord...

CVE-2024-2667-Poc

CVE-2024-2667-Poc 🚀 Descripción El plugin InstaWP Connect – 1-click WP Staging & Migration para WordPress es vulnerable a la subida arbitraria de archivos debido a una validación insuficiente de archivos en el endpoint de la API REST /wp-json/instawp-connect/v1/config en todas las versiones hasta...

Essential-Blocks-4.4.3---Unauthenticated-Local-File-Inclusion

Essential-Blocks-4.4.3---Unauthenticated-Local-File-Inclusion El plugin no impide que atacantes no autenticados sobrescriban variables locales al renderizar plantillas a través de la API REST, lo que puede conducir a ataques de inclusión local de archivos Local File Inclusion. Uso: root@kitploit:...

learning-management-system

learning-management-system Masteriyo - LMS para WordPress = 1.6.7 - Exposición de Información Sensible Información del Plugin root@kitploit: Tipo de Software Plugin Slug del Software learning-management-system ver en wordpress.org ¿Parcheado? Sí Remediación Actualizar a la versión 1.6.8, o a una...

CVE-2024-11423

CVE-2024-11423 Ultimate Gift Cards para WooCommerce = 3.0.6 - Falta de autorización para el glitch de dinero infinito Descripción El plugin Ultimate Gift Cards para WooCommerce – Crea tarjetas de regalo para WooCommerce, vales de regalo, canjea y gestiona cupones digitales de regalo. Ofrece...

cve-2024-56348

JetBrains TeamCity Bypass de Autenticación + RCE CVE-2024-56348 PoC 📜 Descripción CVE-2024-56348 es una vulnerabilidad crítica de bypass de autenticación en JetBrains TeamCity on-premises que afecta a todas las versiones anteriores a 2024.12. La API REST maneja incorrectamente las solicitudes a...