CVE-2021-21389

CVE-2021-21389 BuddyPress 7.2.1 - REST API権限昇格によるRCE PoC 完全版 影響を受けるバージョン: 5.0.0 から 7.2.0 ユーザー要件: 購読者ユーザー 手法: REST APIを介した管理者への権限昇格とRCEのトリガー エンドポイント: /v1/members/me エンドポイント Dockerの使い方 git clone https://github.com/HoangKien1020/CVE-2021-21389 cd CVE-2021-21389/ docker build . -t...

CVE-2023-2833

CVE-2023-2833 대량 익스플로잇 생성기 Alucard0x1 제작 이 저장소는 CVE-2023-2833에 대한 익스플로잇을 포함하고 있습니다. 이 취약점은 WordPress 버전 1.6.13 이하의 ReviewX 플러그인에 존재하는 권한 상승 취약점입니다. 설명 ReviewX 플러그인은 권한 상승에 취약하여, 구독자 수준의 사용자가 자신의 권한을 관리자 수준으로 상승시킬 수 있습니다. 사용 방법 1. 대상 웹사이트에 다음 자격 증명을 사용하여 구독자 계정을 생성합니다: 사용자 이름은 반드시 tt로 설정해야 합니다...

PT-2026-92016

The Consulting theme for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 6.7.16. This is due to a combination of two flaws: 1 the masterstudy ms stm set discard transient AJAX endpoint in admin/admin-notices/classes/STMHandler.php accepts an arbitrary transient k...

PT-2026-88896

The YITH WooCommerce Waitlist Premium plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 3.35.0. This is due to the add user in waiting list function registered on the wp ajax yith wcwtl add user action being missing both a capability check and a nonce...

CVE-2026-19453 JetBackup 3.1.7.9 - 3.1.23.3 - Subscriber+ Privilege Escalation via Restore Admin User Selection

The JetBackup WordPress plugin before 3.1.23.5 does not verify the role or capabilities of the account it preserves across a restore or migration before granting it administrator privileges, allowing a subscriber-level user to gain administrator access after the site owner restores or migrates th...

CVE-2026-19453 JetBackup 3.1.7.9 - 3.1.23.3 - Subscriber+ Privilege Escalation via Restore Admin User Selection

The JetBackup WordPress plugin before 3.1.23.5 does not verify the role or capabilities of the account it preserves across a restore or migration before granting it administrator privileges, allowing a subscriber-level user to gain administrator access after the site owner restores or migrates th...

CVE-2026-19453

The JetBackup WordPress plugin versions before 3.1.23.5 is vulnerable to a privilege escalation flaw. The plugin fails to verify the roles or capabilities of an account preserved during a restore or migration process. Consequently, a user with subscriber-level privileges can gain administrator ac...

CVE-2026-5617 Login as User <= 1.0.3 - Authenticated (Subscriber+) Privilege Escalation via 'oclaup_original_admin' Cookie

The Login as User plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.0.3. This is due to the handlereturntoadmin function trusting a client-controlled cookie oclauporiginaladmin to determine which user to authenticate as, without any server-side...