Lucene search
+L

10068 matches found

CVE
CVE
added 2026/09/13 8:06 p.m.7 views

CVE-2026-89050

The Quads Ads Manager for Google AdSense WordPress plugin, in versions before 3.0.5 , fails to verify payment completion with the configured payment gateway before marking an ad-selling order as paid. This allows authenticated users with the Subscriber+ role who can place an order to obtain a pai...

4.3CVSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/13 4:59 p.m.5 views

CVE-2024-8743-PoC

CVE-2024-8743 PoC 背景 针对 WordPress 插件 Bit File Manager 版本 = 6.5.7 中已验证身份(订阅者及以上)有限制 JavaScript 文件上传漏洞 CVE-2024-8743 的概念验证脚本 信息 描述: Bit File Manager – 100% 免费开源文件管理器和代码编辑器 WordPress 插件在包括 6.5.7 版本在内的所有版本中均存在有限制 JavaScript 文件上传漏洞。这是由于对允许的文件类型缺乏适当的检查。这使得经过身份验证的攻击者(具有订阅者及以上访问权限,并获得管理员授予的权限)能够上传 .css 和...

6.8CVSS5.8AI score0.00788EPSS
SaveExploits1References2
Kitploit
Kitploit
added 2026/09/13 4:53 p.m.8 views

CVE-2024-7856

CVE-2024-7856 ★ CVE-2024-7856 任意文件删除 PoC ★ 描述 CVE-2024-7856 : MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar -f python3 CVE-2024-7856.py -u -f -i -p 示例 root@kitploit: python3 CVE-2024-7856.py -u http://example.com/ -f /tmp/test python3 CVE-2024-7856.py -u http://example.com/ -f...

8.1CVSS5.9AI score0.19177EPSS
SaveExploits1
Nuclei
Nuclei
added 2026/09/13 4:24 p.m.26 views

WordPress CBX Bookmark & Favorite Plugin <= 2.0.4 - SQL Injection

CBX Bookmark & Favorite WordPress plugin = 2.0.4 contains a SQL injection caused by insufficient escaping of the 'orderby' parameter, letting authenticated attackers with Subscriber-level access extract sensitive database information id: CVE-2025-13652 info: name: WordPress CBX Bookmark & Favorit...

6.5CVSS5.8AI score0.01177EPSS
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/13 4:06 p.m.10 views

CVE-2023-2916

CVE-2023-2916 CVE-2023-2916 PoC WordPress 的 InfiniteWP Client 插件(版本至 1.11.1 及包括该版本)存在敏感信息泄露漏洞。该漏洞允许具有订阅者级别或更高权限的已认证攻击者提取包含配置详细信息在内的敏感数据。利用此漏洞的前提是插件尚未进行过配置。当与另一个任意插件安装和激活漏洞结合使用时,可能导致对站点的远程管理以及潜在的权限提升。...

7.5CVSS6.8AI score0.23987EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/13 3:32 p.m.5 views

CVE-2025-9215

StoreEngine 强大的 WordPress 电子商务插件(支付、会员、联盟营销、销售等)= 1.4.0 - 已认证(订阅者+)任意文件下载 StoreEngine 插件在其 CSV 导入/导出功能中包含一个漏洞,该漏洞允许任何已认证用户 (订阅者、作者、编辑等)从服务器下载任意文件,包括敏感的系统文件、WordPress 配置文件以及插件源代码。该漏洞源于 storeenginecsv/filedownload 端点缺乏适当的路径清理,仅依赖 nonce 验证来保证安全,而 storeenginenonce 通过插件的 JavaScript 暴露给所有前端用户...

6.5CVSS6AI score0.00598EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/09/13 3:30 p.m.5 views

CVE-2023-2833

Generador de Exploits Masivos CVE-2023-2833 por Alucard0x1 Este repositorio contiene un exploit para CVE-2023-2833, una vulnerabilidad de escalada de privilegios en el plugin ReviewX para WordPress versiones hasta la 1.6.13 inclusive. Descripción El plugin ReviewX es vulnerable a la escalada de...

8.8CVSS8.2AI score0.1748EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/13 2:54 p.m.8 views

CVE-2024-51665

CVE-2024-51665 Magical Addons For Elementor = 1.2.1 - 已认证(订阅者+)服务器端请求伪造 Description: Magical Addons For Elementor(页眉页脚构建器、免费Elementor小部件、Elementor模板库)WordPress插件在所有版本(包括1.2.1及以下)中存在服务器端请求伪造漏洞。这使得已通过身份验证的攻击者(拥有订阅者及以上级别访问权限)能够从Web应用程序向任意位置发起网络请求,从而查询和修改内部服务的信息。 root@kitploit: CVE: CVE-2024-51665...

4.9CVSS6AI score0.00572EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 2:50 p.m.5 views

CVE-2024-52429

CVE-2024-52429 WP Quick Setup history.pushState'', '', '/'; document.forms0.submit;...

9.9CVSS8.2AI score0.00919EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 2:44 p.m.9 views

CVE-2024-25092

CVE-2024-25092 NextMove Lite 2.18.0 - 订阅者及以上任意插件安装/激活 描述: NextMove Lite – WooCommerce 感谢页插件 for WordPress 存在因缺少对 'xladdoninstallation' 函数的能力检查而导致的数据未授权修改漏洞,影响版本直至 2.17.0(含)。该漏洞使得经过身份验证的攻击者(具有订阅者及以上权限)能够安装并激活任意插件。 root@kitploit: Severity: medium CVE ID: CVE-2024-25092 CVSS Score: 6.5 CVSS Metrics:...

8.8CVSS8.1AI score0.01376EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/13 1:08 p.m.8 views

CVE-2024-7703

CVE-2024-7703 root@kitploit: Exploit CVE-2024-7703: Cross-Site Scripting XSS Almacenado mediante Carga de Archivos SVG en el Plugin ARMember de WordPress Descripción general Este repositorio contiene un exploit de prueba de concepto PoC para la vulnerabilidad identificada como CVE-2024-7703. La...

6.4CVSS6AI score0.01142EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/13 10:49 a.m.4 views

CVE-2021-21389

CVE-2021-21389 BuddyPress 7.2.1 - REST API 权限提升至 RCE PoC(完整) 受影响的版本:5.0.0 至 7.2.0 用户要求:订阅者用户 方法:通过 REST API 将权限提升至管理员并触发 RCE 端点:/v1/members/me 端点。 如何使用 Docker root@kitploit: git clone https://github.com/HoangKien1020/CVE-2021-21389 cd CVE-2021-21389/ docker build . -t...

9CVSS7.9AI score0.13521EPSS
SaveExploits2
NVD
NVD
added 2026/09/13 6:16 a.m.10 views

CVE-2026-88912

The rtMedia for WordPress, BuddyPress and bbPress WordPress plugin before 4.7.12 does not check ownership before changing the privacy level of an activity and its attached media, relying only on a nonce shared with every logged-in user, allowing users with a subscriber-level account or above to...

4.2CVSS
SaveExploits0References1
CVE
CVE
added 2026/09/13 6:00 a.m.19 views

CVE-2026-88912

The rtMedia for WordPress, BuddyPress and bbPress plugin before 4.7.12 contains an IDOR -type flaw: it does not verify ownership before changing the privacy level of an activity and its attached media, relying solely on a nonce shared with every logged-in user . As a result, any user with a subsc...

4.2CVSS
SaveExploits0References1
CVE
CVE
added 2026/09/13 6:00 a.m.18 views

CVE-2026-86406

The User Registration & Membership WordPress plugin (versions before 5.2.8 ) fails to check the capability of the user initiating a membership purchase and does not validate the submitted payment method or plan. This allows any authenticated user at the subscriber level to receive the WordPress r...

7.5CVSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/13 4:49 a.m.9 views

CVE-2026-52134-libiec61850

CVE-2026-52134: Replay de GOOSE y manejo de frescura de mensajes en libiec61850 v1.6 Estado Se ha asignado CVE-2026-52134. La publicación del registro CVE correspondiente está pendiente. Producto afectado Proveedor: MZ Automation GmbH Producto: libiec61850 Versión probada: 1.6 Estado de otras...

9.8CVSS5.9AI score0.00625EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/13 2:40 a.m.5 views

CVE-2023-47504-POC

CVE-2023-47504 POC 针对 CVE-2023-47504 的利用程序。 根据 NIST 的描述,该漏洞应允许未经身份验证的用户访问 Elementor Website Builder 插件中的功能。 根据我对该漏洞的研究,以及从描述该漏洞的 Patchstack URL...

9.8CVSS7.8AI score0.01452EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/13 12:44 a.m.7 views

CVE-2024-50427

CVE-2024-50427 SurveyJS: Drag & Drop WordPress Form Builder = 1.9.136 - 已验证(订阅者+)任意文件上传 描述: WordPress 插件 SurveyJS: Drag & Drop WordPress Form Builder(用于创建、样式化并嵌入多种复杂表单)在所有版本(1.9.136 及更早版本)中因缺少文件类型验证,导致存在任意文件上传漏洞。这使得经过身份验证的攻击者(具有订阅者级别及以上访问权限)能够在受影响站点的服务器上上传任意文件,从而可能实现远程代码执行。 root@kitploit:...

9.9CVSS5.8AI score0.01035EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/12 10:39 p.m.4 views

CVE-2024-30485

CVE-2024-30485 漏洞利用 📌 概述 CVE-2024-30485 是一个高危漏洞,存在于 WordPress 的 Finale Lite 插件中(版本 = 2.18.0)。该漏洞允许已认证用户(Subscriber+)在未经适当授权的情况下安装并激活任意插件。 严重性 : 高危 CVSS 8.8 受影响版本 : Finale Lite = 2.18.0 CWE : CWE-862 缺少授权 🚀 功能 ✅ 检测 WordPress 站点是否存在漏洞 ✅ 使用有效凭证进行身份验证 ✅ 提取安全 nonce ✅ 安装任意插件 ✅ 激活已安装的插件 🛠 要求 Python 3...

8.8CVSS8.2AI score0.01038EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/12 9:49 p.m.5 views

CVE-2022-1051

CVE-2022-1051 WPQA 5.2 - Subscriber+ Cross-Site Scripting Almacenado mediante campos de perfil Descripción El plugin, utilizado como complemento para los temas Discy y Himer, no sanitiza ni escapa los campos de ciudad, teléfono o credenciales del perfil al mostrarlos en la página de perfil,...

5.4CVSS6AI score0.01271EPSS
SaveExploits2
Rows per page
Query Builder