CVE-2026-92806

phpList versions before 3.6.17 are vulnerable to Cross-Site Request Forgery (CSRF) in the mass subscriber removal form handler (massremove.php). The root cause is the absence of CSRF token validation, allowing an attacker to craft a page that, when visited by a logged-in administrator, triggers s...

CVE-2026-92806 phpList before 3.6.17 Cross-Site Request Forgery via massremove.php

phpList versions before 3.6.17 fail to validate cross-site request forgery tokens in the mass subscriber removal form handler. Attackers can induce logged-in administrators to visit crafted pages that silently delete and blacklist arbitrary subscriber addresses without authentication verification...

EUVD-2026-81066

phpList versions before 3.6.17 fail to validate cross-site request forgery tokens in the mass subscriber removal form handler. Attackers can induce logged-in administrators to visit crafted pages that silently delete and blacklist arbitrary subscriber addresses without authentication verification...

CVE-2026-92806 phpList before 3.6.17 Cross-Site Request Forgery via massremove.php

phpList versions before 3.6.17 fail to validate cross-site request forgery tokens in the mass subscriber removal form handler. Attackers can induce logged-in administrators to visit crafted pages that silently delete and blacklist arbitrary subscriber addresses without authentication verification...

CVE-2025-14172-Nuclei-Template

📄 CVE-2025-14172 用 Nuclei テンプレート 🚀 概要 このリポジトリは、WordPress プラグイン WP Page Permalink Extension における Missing Authorization Vulnerability（CVE-2025-14172） を検出するために特別に設計された Nuclei テンプレートを提供します。この問題により、認証済みの攻撃者が脆弱な AJAX アクションを介してサイトのリライトルールをリモートでフラッシュすることが可能になります。 🔍 脆弱性の説明 CVE-2025-14172 は、WordPress 用プラグイ...

CVE-2023-6985

CVE-2023-6985 10Web AI Assistant – AI 콘텐츠 작성 도우미 = 1.0.18 - 인증된 사용자Subscriber+에 의한 임의 플러그인 설치/활성화 권한 누락 설명 설명 WordPress용 10Web AI Assistant – AI 콘텐츠 작성 도우미 플러그인은 1.0.18 이하의 모든 버전에서 installplugin AJAX 액션에 대한 기능 검사 누락으로 인해 데이터 무단 수정에 취약합니다. 이로 인해 구독자 수준 이상의 인증된 공격자가 임의의 플러그인을 설치할 수 있으며, 이를 통해 손상된...

CVE-2023-0630

CVE-2023-0630 CVE-2023-0630 - Slimstat Analytics 4.9.3.3 - Subscriber+ SQLインジェクション 必須要件 sqlmapがインストールされていること、およびsubscriber+権限を持つ有効なユーザー名とパスワード 使用方法 root@kitploit: usage: CVE-2023-0630.py -h -w URL -u USERNAME -p PASSWORD options: -h, --help show this help message and exit -w URL, --url URL URL of...

CVE-2020-36730

CVE-2020-36730 CMP - Coming Soon & Maintenance 3.8.2 - AJAX 호출에 대한 부적절한 접근 제어 Subscriber+ 설명: 플러그인의 일부 AJAX 호출은 권한 및 CSRF 토큰을 제대로 확인하지 않아, 임의 게시물 읽기, 구독자 목록 내보내기, 플러그인 비활성화와 같은 문제가 발생할 수 있습니다. root@kitploit: reference: -...

CVE-2024-1247-PoC

CVE-2024-1247-PoC Post Saint = 1.3.1 WordPress 플러그인 임의 파일 업로드 설명 Post Saint WordPress 플러그인1.3.1 이하 버전은 누락된 권한 확인 및 파일 형식 검증으로 인해 임의 파일 업로드에 취약합니다. 최소 구독자 수준의 접근 권한을 가진 인증된 공격자는 이 취약점을 악용하여 임의 파일을 업로드할 수 있으며, 잠재적으로 원격 코드 실행으로 이어질 수 있습니다. 기능 취약한 플러그인 버전을 탐지합니다. 제공된 자격 증명을 사용하여 WordPress에 로그인합니다. 취약...

CVE-2026-87959

The WPBot WordPress plugin before 8.7.6 does not perform a capability check on the AJAX action that saves its Claude AI provider settings, allowing users with subscriber-level access to overwrite those settings, including the API key used for the WPBot WordPress plugin before 8.7.6's outgoing AI...

CVE-2026-87828

The Seraphinite Accelerator WordPress plugin before 2.29.24 does not perform a capability check on one of its state-update AJAX actions, allowing authenticated users such as subscribers to write a malformed value that causes an uncaught error on every subsequent admin page load, making the entire...

EUVD-2026-80212

The WPBot WordPress plugin before 8.7.6 does not perform a capability check on the AJAX action that saves its Claude AI provider settings, allowing users with subscriber-level access to overwrite those settings, including the API key used for the WPBot WordPress plugin before 8.7.6's outgoing AI...

CVE-2026-87959

The WPBot WordPress plugin (versions 8.7.2–8.7.5 ) contains a missing capability check on the AJAX action that saves its Claude AI provider settings . This allows users with subscriber-level access to overwrite those settings, including the API key used for the plugin's outgoing AI requests, as d...

WordPress WPBot plugin 8.7.2-8.7.5 - Subscriber+ Claude AI Settings Update vulnerability

Subscriber+ Claude AI Settings Update vulnerability discovered by Sergey Mkrtchyan b1acksparrow in WordPress Plugin ChatBot versions 8.7.2-8.7.5...

CVE-2026-87828

Seraphinite Accelerator is a WordPress plugin that, in versions before 2.29.24 , fails to perform a capability check on its seraph_accel_State Update AJAX action. An authenticated user with at least Subscriber level can write a malformed value through this action, triggering an uncaught error on ...

EUVD-2026-80195

The FluentBoards WordPress plugin before 2.0.15 does not properly verify authorization when returning the list of boards a user belongs to, allowing any authenticated user, including a Subscriber with no board access, to disclose the private board memberships of arbitrary users by referencing the...

CVE-2026-85572

Tutor LMS WordPress plugin versions 4.0.0 through 4.0.7 fail to verify that a user has access to a course before returning its lesson discussion content . This allows any authenticated user—even a subscriber role—to read comments from courses they are not enrolled in, including comments awaiting ...

CVE-2026-85572 Tutor LMS 4.0.0 - < 4.0.8 - Subscriber+ Cross-Course Lesson Comment Disclosure

The Tutor LMS WordPress plugin before 4.0.8 does not check that a user has access to a course before returning its lesson discussion content, allowing any authenticated user, such as a subscriber, to read comments from courses they are not enrolled in, including comments awaiting moderation...

CVE-2026-85349 FluentBoards < 2.0.15 - Subscriber+ Private Board Membership Disclosure via IDOR

The FluentBoards WordPress plugin before 2.0.15 does not properly verify authorization when returning the list of boards a user belongs to, allowing any authenticated user, including a Subscriber with no board access, to disclose the private board memberships of arbitrary users by referencing the...

WordPress Tutor LMS plugin 4.0.0-4.0.7 - Subscriber+ Cross-Course Lesson Comment Disclosure vulnerability

Subscriber+ Cross-Course Lesson Comment Disclosure vulnerability discovered by Shirshak in WordPress Plugin Tutor LMS versions 4.0.0-4.0.7...