CVE-2024-7135

CVE-2024-7135 إن إضافة Tainacan لـ WordPress معرضة للوصول غير المصرح به إلى البيانات بسبب عدم وجود فحص للصلاحية في الدالة 'getfile' في جميع الإصدارات حتى 0.21.7 وما يشملها. كما أن الدالة معرضة أيضًا لثغرة اجتياز الدليل directory traversal. وهذا يتيح للمهاجمين المصادق عليهم، من مستوى Subscriber فم...

CVE-2023-0630

CVE-2023-0630 CVE-2023-0630 - Slimstat Analytics 4.9.3.3 - SQL-инъекция через Subscriber+ Необходимо установленный sqlmap и действительные имя пользователя и пароль с ролью Subscriber+ Использование root@kitploit: usage: CVE-2023-0630.py -h -w URL -u USERNAME -p PASSWORD options: -h, --help show...

CVE-2025-15260

CVE-2025-15260: Autorizzazione Mancante / Controllo di Accesso Interrotto nel Plugin - MyRewards – Loyalty Points and Rewards for WooCommerce Disclaimer: Questo repository è creato solo per scopi educativi e divulgazione etica. La vulnerabilità è stata segnalata responsabilmente al fornitore e...

CVE-2024-7703

Exploit CVE-2024-7703: Cross-Site Scripting XSS Memorizzato tramite Caricamento di File SVG nel Plugin WordPress ARMember Panoramica Questo repository contiene un proof-of-concept PoC per la vulnerabilità identificata come CVE-2024-7703. La vulnerabilità riguarda il Plugin WordPress ARMember, in...

CVE-2023-47504-POC

CVE-2023-47504 POC Exploit für CVE-2023-47504. Laut NIST sollte diese Schwachstelle nicht authentifizierten Benutzern den Zugriff auf Funktionen des Elementor Website Builder Plugins ermöglichen. Basierend auf meiner Recherche zu der Schwachstelle und auch anhand der URL von Patchstack, die die...

CVE-2024-50427

CVE-2024-50427 SurveyJS: Drag & Drop WordPress Form Builder = 1.9.136 - Autenticato Subscriber+ Caricamento File Arbitrario Descrizione: Il plugin per WordPress SurveyJS: Drag & Drop WordPress Form Builder, che consente di creare, personalizzare e incorporare più moduli di qualsiasi complessità, ...

CVE-2020-36730

CVE-2020-36730 CMP - Coming Soon & Maintenance 3.8.2 - Controlli di accesso impropri nelle chiamate AJAX Subscriber+ Descrizione: Alcune chiamate AJAX del plugin non verificano correttamente le capacità e i token CSRF, portando a problemi come lettura arbitraria di post, esportazione della lista ...

CVE-2024-1247-PoC

CVE-2024-1247-PoC Post Saint = 1.3.1 plugin per WordPress Arbitrary File Upload Descrizione Il plugin Post Saint per WordPress versioni fino alla 1.3.1 inclusa è vulnerabile al caricamento arbitrario di file a causa della mancanza di controlli delle capacità e della validazione del tipo di file...

CVE-2024-3217-POC

CVE-2024-3217-POC Mitre Beschreibung Das WP Directory Kit Plugin für WordPress ist anfällig für SQL-Injection über die Parameter 'attributevalue' und 'attributeid' in allen Versionen bis einschließlich 1.3.0. Dies liegt an unzureichender Maskierung der benutzergesteuerten Parameter und fehlender...

WordPress Mang Board WP plugin <= 2.3.7 - Authenticated (Subscriber+) Privilege Escalation to Forged Authentication Cookie vulnerability

Authenticated Subscriber+ Privilege Escalation to Forged Authentication Cookie vulnerability discovered by daroo in WordPress Plugin Mang Board WP versions = 2.3.7...

CVE-2026-75977

Mang Board WP WordPress plugin (all versions ≤ 2.3.7 ) suffers from a Missing Authorization vulnerability via authentication cookie forgery. The root cause is flawed HMAC generation in mbw_get_hash_key(), which uses the current user's identity instead of the cookie's username parameter when a Wor...

CVE-2024-7856

CVE-2024-7856 ★ CVE-2024-7856 PoC di eliminazione arbitraria di file ★ Descrizione CVE-2024-7856 : MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar = 5.7.0.1 – Mancanza di autorizzazione per l'eliminazione arbitraria di file da parte di utenti autenticati Subscriber+ Ricercatore ...

CVE-2026-75797

The AI Engine WordPress plugin before 3.7.2 does not confine a caller-supplied URL when mapping it to a local filesystem path before reading the file and forwarding its contents to an external service, allowing users with a subscriber-level account to read arbitrary files from the server and...

CVE-2026-75797

The AI Engine WordPress plugin before 3.7.2 does not confine a caller-supplied URL when mapping it to a local filesystem path before reading the file and forwarding its contents to an external service, allowing users with a subscriber-level account to read arbitrary files from the server and...

EUVD-2026-66281

The AI Engine WordPress plugin before 3.7.2 does not confine a caller-supplied URL when mapping it to a local filesystem path before reading the file and forwarding its contents to an external service, allowing users with a subscriber-level account to read arbitrary files from the server and...

CVE-2026-74930 WP Project Manager 2.2.0 - 4.0.6 - Subscriber+ User Activity Feed Disclosure via IDOR

The Project Manager WordPress plugin before 4.0.7 does not check that the user whose activity is being requested is the one making the request in one of its REST API routes, allowing any authenticated user, such as a subscriber, to read any other user's activity history along with their email...

CVE-2026-75797 AI Engine 3.3.3 - 3.7.1 - Subscriber+ Arbitrary File Read via 'url' Parameter

The AI Engine WordPress plugin before 3.7.2 does not confine a caller-supplied URL when mapping it to a local filesystem path before reading the file and forwarding its contents to an external service, allowing users with a subscriber-level account to read arbitrary files from the server and...

CVE-2026-74929

The WP Project Manager WordPress plugin (by WEDevs) prior to 4.0.7 suffers from an IDOR (Insecure Direct Object Reference) flaw in several of its REST API routes . Because these routes are not properly scoped to the projects a user belongs to, any authenticated user with at least Subscriber role ...

WordPress CBX Bookmark & Favorite Plugin <= 2.0.4 - SQL Injection

CBX Bookmark & Favorite WordPress plugin = 2.0.4 contains a SQL injection caused by insufficient escaping of the 'orderby' parameter, letting authenticated attackers with Subscriber-level access extract sensitive database information id: CVE-2025-13652 info: name: WordPress CBX Bookmark & Favorit...

CVE-2026-18547 Ultimate Member <= 2.12.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Textarea Profile Field with HTML Support (DOM Gadget via id Attribute)

The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Textarea Profile Field with HTML Support DOM Gadget via id Attribute in all versions up to, and including, 2.12....