CVE-2026-78289 WordPress CozyStay theme <= 1.10.0 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in CozyStay = 1.10.0 versions...

CVE-2026-78289

CVE-2026-78289 is an unauthenticated Cross-Site Scripting (XSS) vulnerability in the CozyStay WordPress theme, affecting versions 1.10.0 and earlier . The vulnerability was discovered by G0053 and carries a CVSS 3.1 base score of 7.1 (HIGH) with a changed scope, requiring user interaction. The at...

WordPress Create Block Theme plugin < 2.10.0 - Admin+ PHP Code Injection via Pattern Save (Multisite) vulnerability

Admin+ PHP Code Injection via Pattern Save Multisite vulnerability discovered by Pavan Saxena Rootkid in WordPress Plugin Create Block Theme versions 2.10.0...

CVE-2026-22241

CVE-2026-22241 : Open eClass Execução Remota de Código RCE Este exploit usa a CVE-2026-22241 para automatizar o login, a criação de ZIP, o processo de upload e fornecer uma webshell diretamente no servidor, removendo-a automaticamente assim que o exploit é concluído. Descrição Uma vulnerabilidade...

CVE-2026-29053

Este é um retrabalho do Repo de rootxran para esta mesma CVE - https://github.com/rootxran/CVE-2026-29053 Durante testes contra ambientes específicos do Ghost CMS, o payload do tema original acionou um Erro Fatal do Handlebars. O CMS falhou ao ativar o tema malicioso porque ele referenciava um...

ShunyaNet-Sentinel

ShunyaNet Sentinel ATUALIZADO: 03/02/2026 O ShunyaNet Sentinel é um programa leve, com tema cyberpunk, que ingere feeds RSS ex.: notícias de última hora, redes sociais, os envia para um LLM para análise e entrega alertas e relatórios resumidos diretamente na GUI e no Slack em intervalos regulares...

CVE-2025-39459

CVE-2025-39459 Real Estate 7 = 3.5.2 – Nicht authentifizierte Privilegienausweitung 🧨 CVE-2025-39459 – Real Estate 7 = 3.5.2 Nicht authentifizierte Privilegienausweitung 📌 Überblick Dieses Repository enthält ein Python-Proof-of-Concept-Tool für CVE-2025-39459 , das das Real Estate 7 WordPress-The...

CVE-2021-24499

CVE-2021-24499 | Workreap - Freelance Marketplace and Directory WordPress Theme 2.2.2 - Caricamento File Arbitrario WordPress Theme Workreap 2.2.2 - Caricamento File Non Autenticato che Porta a Esecuzione di Codice Remota Un potente e accurato strumento di sfruttamento di massa per la vulnerabili...

CVE-2023-41425

https://sploitus.com/exploit?id=3A833277-4844-5F02-AFEF-5EA6BA8AC1AC Wonder CMS RCE | | Beschreibung: XSS zu RCE, Wonder CMS 3.2.0 evil/evil.php EOF root@kitploit: zip -r evil.zip evil/ JS-Payload, das das neue Theme installiert root@kitploit: cat xssrce.js var xhr=new XMLHttpRequest;...

CVE-2025-44998

CVE-2025-44998 Riepilogo Una vulnerabilità di cross-site scripting XSS memorizzato nel componente /tinyfilemanager.php di TinyFileManager v2.4.7 consente agli attaccanti di eseguire JavaScript o HTML arbitrario iniettando un payload appositamente creato nel parametro js-theme-3. PoC Per verificar...

CVE-2021-24499

CVE-2021-24499 استغلال واسع النطاق لثغرة CVE-2021-24499: رفع ملفات دون مصادقة يؤدي إلى تنفيذ تعليمات برمجية عن بُعد في قالب Workreap. لم تكن إجراءات AJAX workreapawardtempfileuploader وworkreaptempfileuploader تُجري أي فحوصات nonce، ولم تكن تتحقق بأي طريقة أخرى من أن الطلب صادر عن مستخدم صالح...

CVE-2025-4606

CVE-2025-4606 概述 该工具用于测试WordPress上使用 Sala – Startup & SaaS WordPress 主题 的 CVE-2025-4606 漏洞。 此漏洞允许通过账户接管（Account Takeover）实现权限提升，因为该主题在更新密码等敏感数据之前未正确验证用户身份。 因此，未经身份验证的攻击者可以更改其他用户（包括管理员）的密码，从而可能导致完全接管网站。 开发者： Ohang 感谢： @C4p333 目的： 安全研究与教育用途 安装 Termux Pydroid 3 1. 克隆或下载 root@kitploit: git clone...

CVE-2026-32639

Winter CMS is a content management system built on the Laravel PHP framework. In versions up to and including 1.2.12, the CMS section's Theme Editor AJAX handlers did not enforce per-template-type permission checks, allowing a backend user with any single CMS permission to act on template types...

CVE-2026-32639 Winter: Broken access control in `Cms\Controllers\Index` allows cross-template actions and unauthorized asset uploads

Winter CMS is a content management system built on the Laravel PHP framework. In versions up to and including 1.2.12, the CMS section's Theme Editor AJAX handlers did not enforce per-template-type permission checks, allowing a backend user with any single CMS permission to act on template types...

CVE-2026-32639

Winter CMS (a content management system built on Laravel) contained a broken access control flaw in its CMS Theme Editor AJAX handlers (Cms\Controllers\Index). The controller used OR-logic across five permissions to gate section access, but individual handlers like onSave(), onDelete(), and onDel...

CVE-2026-32639 Winter: Broken access control in `Cms\Controllers\Index` allows cross-template actions and unauthorized asset uploads

Winter CMS is a content management system built on the Laravel PHP framework. In versions up to and including 1.2.12, the CMS section's Theme Editor AJAX handlers did not enforce per-template-type permission checks, allowing a backend user with any single CMS permission to act on template types...

WordPress Avada Theme <= 7.16 - Unauthenticated Remote Code Execution via Arbitrary File Write vulnerability

Unauthenticated Remote Code Execution via Arbitrary File Write vulnerability discovered by WordFence in WordPress Theme Avada versions = 7.16...

EUVD-2026-66334

The Betheme theme for WordPress is vulnerable to Stored Cross-Site Scripting via the theme's 'iconbox2' shortcode in all versions up to, and including, 28.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers,...

CVE-2026-6178 Betheme <= 28.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'icon_box_2' Shortcode

The Betheme theme for WordPress is vulnerable to Stored Cross-Site Scripting via the theme's 'iconbox2' shortcode in all versions up to, and including, 28.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers,...

CVE-2026-6178

The Betheme WordPress theme (all versions up to and including 28.4 ) is vulnerable to stored cross-site scripting via the 'icon_box_2' shortcode. The root cause is insufficient input sanitization and output escaping on user-supplied attributes, allowing any authenticated user with contributor-lev...