5836 matches found
CVE-2023-38146
PoC per l'exploit ThemeBleed CVE-2023-38146 Temi di Windows 11 Fortemente ispirato da https://github.com/gabe-k/themebleed che funziona solo su Windows motivo per cui ho deciso di scrivere questo. Ho usato codice modificato da impacket smbserver.py...
CVE-2023-38146-Poc
ThemeBleed CVE-2023-38146 एक्सप्लॉइट Windows 11 थीम्स का PoC यह https://github.com/gabe-k/themebleed से काफी प्रेरित है, जो केवल विंडोज़ पर चलता है यही कारण है कि मैंने इसे लिखने का निर्णय लिया। impacket smbserver.py https://github.com/fortra/impacket/blob/master/impacket/smbserver.py से संशोधित...
nuclei-wordfence-cve
Nuclei + Wordfence = ♥ 77,636 Template Nuclei per la scansione della sicurezza di WordPress 🥳 Porta la sicurezza di WordPress a un livello superiore! Questo progetto contiene un vero tesoro di nuovi Nuclei template per WordPress. Scansiona alla ricerca di punti deboli nel core, nei plugin e nei...
wpbullet
wpBullet Un'analisi statica del codice per plugin/temi WordPress e PHP Installazione Basta clonare il repository, installare i requisiti ed eseguire lo script $ git clone https://github.com/webarx-security/wpbullet wpbullet $ cd wpbullet $ pip install -r requirements.txt $ python wpbullet.py...
wpscvn
wpscvn is a tool for pentesters, website owner to test if their websites had some vulnerable plugins or themes The author does not hold any responsibility for the bad use of this tool, remember that attacking targets without prior consent is illegal and punished by law. requires : Python 3 usage ...
wpBullet
wpBullet Un'analisi statica del codice per plugin e temi WordPress e PHP Installazione...
CVE-2022-0316_wordpress_multiple_themes_exploit
Temi multipli di Wordpress - Caricamento arbitrario di file non autenticato CVE-2022-0316 Caricamento arbitrario di file non autenticato in diversi temi di ChimpStudio e PixFill. Per altri exploit ed esclusivi contattami su Telegram @KtN1990. Temi Coinvolti westand footysquare aidreform statfort...
WordPress Catch Breadcrumb <1.5.4 - Cross-Site Scripting
WordPress Catch Breadcrumb plugin before 1.5.4 contains a reflected cross-site scripting vulnerability via the s parameter a search query. Also affected are 16 themes if the plugin is enabled: Alchemist and Alchemist PRO, Izabel and Izabel PRO, Chique and Chique PRO, Clean Enterprise and Clean...
Themes Coder Ecommerce <= 1.3.4 - SQL Injection
The Themes Coder Ecommerce WordPress plugin through 1.3.4 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection. id: CVE-2024-13726 info: name: Themes Coder Ecommerce = 1.3.4 - SQL...
WordPress Bello Directory & Listing Theme <1.6.0 - Cross-Site Scripting
WordPress Bello Directory & Listing theme before 1.6.0 contains a reflected cross-site scripting vulnerability. It does not properly sanitize and escape the listinglistview, btbblistingfieldmylat, btbblistingfieldmylng, btbblistingfielddistancevalue, btbblistingfieldmylatdefault,...
Wordpress Multiple Themes - Reflected Cross-Site Scripting
All of the above Aapna WordPress theme through 1.3, Anand WordPress theme through 1.2, Anfaust WordPress theme through 1.1, Arendelle WordPress theme before 1.1.13, Atlast Business WordPress theme through 1.5.8.5, Bazaar Lite WordPress theme before 1.8.6, Brain Power WordPress theme through 1.2,...
All Thrive Themes and Plugins - Unauthenticated Option Update
The Thrive Optimize WordPress plugin before 1.4.13.3, Thrive Comments WordPress plugin before 1.4.15.3, Thrive Headline Optimizer WordPress plugin before 1.3.7.3, Thrive Leads WordPress plugin before 2.3.9.4, Thrive Ultimatum WordPress plugin before 2.3.9.4, Thrive Quiz Builder WordPress plugin...
WordPress Epsilon Framework Themes <=2.4.8 - Remote Code Execution
WordPress themes including Shapely = 1.2.7, NewsMag = 2.4.1, Activello = 1.4.0, Illdy = 2.1.4, Allegiant = 1.2.2, Newspaper X = 1.3.1, Pixova Lite = 2.0.5, Brilliance = 1.2.7, MedZone Lite = 1.2.4, Regina Lite = 2.0.4, Transcend = 1.1.8, Affluent = 1.1.0, Bonkers = 1.0.4, Antreas = 1.0.2, Sparkli...
Multiple Thrive Themes < 2.0.0 - Arbitrary File Upload
Thrive “Legacy” Rise by Thrive Themes WordPress theme before 2.0.0, Luxe by Thrive Themes WordPress theme before 2.0.0, Minus by Thrive Themes WordPress theme before 2.0.0, Ignition by Thrive Themes WordPress theme before 2.0.0, FocusBlog by Thrive Themes WordPress theme before 2.0.0, Squared by...
CVE
CVE-Tabelle CVE-Nummer| Typ| Unternehmen/Produkt| Beschreibung| Artikel-Link| Repository-Link ---|---|---|---|---|--- CVE-2026-9680| SQLi| Alibaba RDS MCP Servers| TBA| TBA| TBA CVE-2026-50335| LPE| Windows Juli 2026| TBA| TBA| TBA GHSA-73cv-556c-w3g6| SQLi| Apache Pinot MCP 3.1.0| Fehlende...
wordpress-hacking
Hacking di WordPress Alcune risorse utili per l'hacking di WordPress e dei suoi plugin e temi. Bug Bounty Se ti appassiona trovare e segnalare vulnerabilità di WordPress, valuta di unirti a questi programmi di bug bounty: Wordfence e Patchstack. Iscrivendoti tramite il mio link Wordfence, ricevo ...
Wordfence Intelligence Weekly WordPress Vulnerability Report (August 10, 2026 to August 16, 2026)
Last week, there were 260 vulnerabilities disclosed in 200 WordPress Plugins and 5 WordPress Themes that have been added to the Wordfence Intelligence Vulnerability Database, and there were 142 Vulnerability Researchers that contributed to WordPress Security last week. Review those vulnerabilitie...
GHSA-RRWH-6JRQ-WP5V
creationtimestamp| type| source ---|---|--- 2026-08-20 17:51:42+00:00| seen| https://bsky.app/profile/thestandup.bsky.social/post/3mtjsq4tke52x...
