CVE-2023-0630

CVE-2023-0630 CVE-2023-0630 - Slimstat Analytics 4.9.3.3 - Subscriber+ SQL Injection Must Have sqlmap installed & a valid username & password with subscriber+ Usage usage: CVE-2023-0630.py -h -w URL -u USERNAME -p PASSWORD options: -h, --help show this help message and exit -w URL, --url URL URL ...

reproducing-CVE-2025-1489

Reproducing CVE-2025-1489 This repository simulates a reproduction of a web-related CVE CVE-2025-1489 in a safe environment to demonstrate and practice my forensic/vulnerability analysis skills. The vulnerability identified and reproduced is a stored cross-site scripting XSS vulnerability in the...

EUVD-2026-100913

The Mang Board plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.4.3 via the 'type e.g. footype' parameter parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary .php files on the server, allowing the...

CVE-2026-92409

The Donation Thermometer WordPress plugin before 2.3.0 does not escape a colour value taken from a shortcode attribute before using it in an attribute of the generated legend markup, allowing users with the Contributor role and above to inject arbitrary event handlers that execute when the page i...

CVE-2026-105261

The Schedule Post Changes With PublishPress Future: Unpublish, Delete, Change Status, Trash, Change Categories WordPress plugin before 4.10.6 does not enforce a safe HTML-element allowlist on a shortcode attribute and does not neutralise attacker-controlled text placed inside the resulting elemen...

CVE-2026-105975

The CamPay Shortcode Payment Gateway WordPress plugin before 1.7 does not verify the authenticity of Mobile Money payment confirmations and derives the payment result from client-supplied parameters, allowing unauthenticated attackers to mark payment records as paid, destroy genuine payment...

CVE-2026-92409 Donation Thermometer 2.2.9 - 2.2.11 - Contributor+ Stored XSS via Shortcode

The Donation Thermometer WordPress plugin before 2.3.0 does not escape a colour value taken from a shortcode attribute before using it in an attribute of the generated legend markup, allowing users with the Contributor role and above to inject arbitrary event handlers that execute when the page i...

CVE-2026-92409

The Donation Thermometer WordPress plugin before version 2.3.0 is vulnerable to a Stored Cross-Site Scripting (XSS) flaw. The root cause is the failure to escape a colour value retrieved from a shortcode attribute before it is used within an attribute of the generated legend markup . This allows ...

CVE-2026-92409 Donation Thermometer 2.2.9 - 2.2.11 - Contributor+ Stored XSS via Shortcode

The Donation Thermometer WordPress plugin before 2.3.0 does not escape a colour value taken from a shortcode attribute before using it in an attribute of the generated legend markup, allowing users with the Contributor role and above to inject arbitrary event handlers that execute when the page i...

EUVD-2026-100863

The Donation Thermometer WordPress plugin before 2.3.0 does not escape a colour value taken from a shortcode attribute before using it in an attribute of the generated legend markup, allowing users with the Contributor role and above to inject arbitrary event handlers that execute when the page i...

CVE-2026-105261

The Schedule Post Changes With PublishPress Future: Unpublish, Delete, Change Status, Trash, Change Categories WordPress plugin versions 4.10.1 through 4.10.5 is vulnerable to a Stored Cross-Site Scripting (XSS) flaw. The root cause is the failure to enforce a safe HTML-element allowlist on short...

CVE-2026-105975

The CamPay Shortcode Payment Gateway WordPress plugin, in versions before 1.7 , is vulnerable to an unauthenticated payment status forgery vulnerability. The root cause is a failure to verify the authenticity of Mobile Money payment confirmations , as the plugin derives payment results from clien...

CVE-2026-105261 PublishPress Future 4.10.1 - 4.10.5 - Contributor+ Stored XSS via 'wrapper' and 'dateformat' Shortcode Attributes

The Schedule Post Changes With PublishPress Future: Unpublish, Delete, Change Status, Trash, Change Categories WordPress plugin before 4.10.6 does not enforce a safe HTML-element allowlist on a shortcode attribute and does not neutralise attacker-controlled text placed inside the resulting elemen...

EUVD-2026-100880

The CamPay Shortcode Payment Gateway WordPress plugin before 1.7 does not verify the authenticity of Mobile Money payment confirmations and derives the payment result from client-supplied parameters, allowing unauthenticated attackers to mark payment records as paid, destroy genuine payment...

EUVD-2026-100878

The Schedule Post Changes With PublishPress Future: Unpublish, Delete, Change Status, Trash, Change Categories WordPress plugin before 4.10.6 does not enforce a safe HTML-element allowlist on a shortcode attribute and does not neutralise attacker-controlled text placed inside the resulting elemen...

CVE-2026-105975 CamPay Shortcode Payment Gateway < 1.7 - Unauthenticated Payment Status Forgery via external_reference

The CamPay Shortcode Payment Gateway WordPress plugin before 1.7 does not verify the authenticity of Mobile Money payment confirmations and derives the payment result from client-supplied parameters, allowing unauthenticated attackers to mark payment records as paid, destroy genuine payment...

EUVD-2026-100801

The NewStatPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'QUERYSTRING / REQUESTURI' parameter in all versions up to, and including, 1.4.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

CVE-2026-100153 NewStatPress <= 1.4.5 - Unauthenticated Stored Cross-Site Scripting via URL Request Tracking (urlrequested field)

The NewStatPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'QUERYSTRING / REQUESTURI' parameter in all versions up to, and including, 1.4.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

CVE-2026-97398

The FV Flowplayer Video Player plugin for WordPress (versions up to and including 7.5.54.7212 ) is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is insufficient input sanitization and output escaping within the 'synopsis' Shortcode Attribute . Unauthenticated attackers can inje...

CVE-2026-95807

The FV Player 8 plugin for WordPress (versions up to and including 8.1.7 ) is vulnerable to Stored Cross-Site Scripting (XSS) via the 'synopsis' shortcode attribute . The root cause is insufficient input sanitization and output escaping. Authenticated attackers with contributor-level access or hi...