CVE-2025-2594

CVE-2025-2594 User Registration & Membership = 4.1.2 - Authentication Bypass Disclaimer! The information presented in this CVE Common Vulnerabilities and Exposures writeup is for educational and informational purposes only. The details provided are based on publicly available resources, research,...

CVE-2025-2563

CVE-2025-2563 User Registration & Membership = 4.1.1 - Unauthenticated Privilege Escalation Disclaimer! The information presented in this CVE Common Vulnerabilities and Exposures writeup is for educational and informational purposes only. The details provided are based on publicly available...

codoforum

CVE-2020-5842 Stored XSS Schwachstelle in Codoforum 4.8.3 Gelistet in: Exploit-db, Cve Mitre und The daily swig Während ich nach einer kostenlosen Forensoftware für unsere Community suchte, stieß ich auf Codoforum. Nach der Installation haben wir Vyshnav Vizz ein paar einfache XSS-Payloads...

CVE-2021-22911

CVE-2021-22911 Se hai già registrato un utente, questo reimposta solo la password dell'amministratore, e non entrambe. Ciò rende l'exploit molto più veloce. python3 exploit.py -u test -a [email protected] -t http://chat.rocket.thm -i 10.10.4.24 -p 80...

WordPress User Registration & Membership plugin < 5.2.6 - Unauthenticated Account Creation While Registration Disabled vulnerability

Unauthenticated Account Creation While Registration Disabled vulnerability discovered by Nguyễn Đức Hòa in WordPress Plugin User Registration versions 5.2.6...

CVE-2026-11961

CVE-2026-11961 CVE-2026-11961 के लिए मास एक्सप्लॉइट टूल जो WordPress User Registration & Membership प्लगइन को प्रभावित करता है। विशेषताएँ प्लगइन संस्करण का पता लगाना एकल लक्ष्य single target समर्थन बैच लक्ष्य प्रोसेसिंग मल्टी-थ्रेड समर्थन रैंडम या कस्टम क्रेडेंशियल HTTP/HTTPS प्रॉक्सी समर्थन...

WordPress User Registration & Membership <= 5.1.2 - Unauthenticated Privilege Escalation

User Registration & Membership WordPress plugin = 5.1.2 contains an improper privilege management vulnerability caused by accepting user-supplied roles without server-side allowlist enforcement, letting unauthenticated attackers create administrator accounts id: CVE-2026-1492 info: name: WordPres...

Zitadel - User Registration Bypass

The open-source identity infrastructure software Zitadel allows administrators to disable the user self-registration. Due to a missing security check in versions prior to 2.64.0, 2.63.5, 2.62.7, 2.61.4, 2.60.4, 2.59.5, and 2.58.7, disabling the "User Registration allowed" option only hid the...

Simple User Registration <= 6.3 - Unauthenticated Privilege Escalation

The Simple User Registration plugin ≤ 6.3 is vulnerable to privilege escalation. It lacks proper restrictions on user meta values during registration. Unauthenticated attackers can exploit this to register as administrators. id: CVE-2025-4334 info: name: Simple User Registration = 6.3 -...

User Registration & Membership WordPress plugin - Open Redirect

User Registration & Membership WordPress plugin = 5.1.4 contains an open redirect caused by insufficient validation of 'redirecttoonlogout' parameter, letting attackers redirect users to malicious external URLs after logout, exploit requires crafted URL. id: CVE-2026-6203 info: name: User...

CVE-2025-2563

CVE-2025-2563 — User Registration & Membership | Escalonamento de Administrador em Cadeia Completa root@kitploit: ██╗ ██╗███████╗███████╗██████╗ ██████╗ ███████╗ ██████╗ ██║ ██║██╔════╝██╔════╝██╔══██╗ ██╔══██╗██╔════╝██╔════╝ ██║ ██║███████╗█████╗ ██████╔╝ ██████╔╝█████╗ ██║ ███╗ ██║...

WP-CVE-2025-6934

WP-CVE-2025-6934 | Opal Estate Pro = 1.7.5 - अप्रमाणित विशेषाधिकार वृद्धि यह एक Python स्क्रिप्ट है जो WordPress के लिए Opal Estate Pro = 1.7.5 प्लगइन में CVE-2025-6934 भेद्यता का शोषण करती है। यह उपकरण अप्रमाणित हमलावरों को नए उपयोगकर्ता पंजीकृत करने और बिना प्राधिकरण के अपने विशेषाधिकारों को...

CVE-2024-49328-exploit

CVE-2024-49328-exploit 🌟 Descrizione: Questo script sfrutta una vulnerabilità di escalation dei privilegi nel plugin WP REST API FNS per WordPress. La vulnerabilità interessa tutte le versioni fino alla 1.0.0 inclusa, consentendo a utenti non autenticati di ottenere privilegi di amministratore. ⚙️...

CVE-2026-36227

CVE-2026-36227: Easy Chat Server 3.1 UserName Path Traversal PoC Questo repository contiene una proof of concept benigna per CVE-2026-36227, un problema di path traversal nella gestione della registrazione utente di Easy Chat Server 3.1. Questo repository è destinato esclusivamente a ricerca di...

CVE-2026-1492

CVE-2026-1492 User Registration & Membership = 5.1.2 - Escalation dei Privilegi Non Autenticata tramite la Registrazione alla Membership 🔴 Panoramica della Vulnerabilità CVE-2026-1492 — Escalation dei Privilegi Non Autenticata tramite la Registrazione alla Membership Descrizione: Il plugin User...

CVE-2025-4334

CVE-2025-4334 - Simple User Registration --form Argumente: -u / --url → Basis-WordPress-URL z.B. https://target.com/wordpress/ --form → Vollständige URL des Registrierungsformulars z.B. https://target.com/wpr/default-registration/ Beispiel: root@kitploit: python3 CVE-2025-4334.py -u...

CVE-2025-13342

CVE-2025-13342 PoC O plugin Frontend Admin da DynamiApps para WordPress é vulnerável à modificação não autorizada de opções arbitrárias do WordPress em todas as versões até, e incluindo, 3.28.20. Isso permite que atacantes registrem usuários e definam a função padrão como administrador. A...

drupal8-REST-RCE

drupal8-REST-RCE CVE-2019-6340 drupal8-REST-RCE /node/1 , CVE-2018-7600 drupal8 RCE /user/register Comando Unix/Linux - esecuzione di codice remoto comando "id" Uso root@kitploit: python drupal8-REST-RCE.py user defined port python drupal8-REST-RCE.py default : 80/tcp aggiornato! Script modificat...

audit-xss-cve-2020-7934

CVE 2020-7934 So führen Sie den CVE aus Anforderungen 1. docker Hinweise Es ist möglich, das Angriffsskript online zu stellen mit dem JS-Code http://yourjavascript.com/ Unser JS-Skript online für den Angriff html Befehle für die Konfiguration 1. Gehen Sie zum Hauptordner dieses Projekts 2. führen...

CVE-2021-33831

Introduzione L'applicazione viene utilizzata per tracciare le persone secondo le leggi tedesche sulle infezioni per poter tracciare le catene di infezione da Covid-19. È stato creato da un progetto studentesco chiamato iCampus ed è utilizzato non solo presso l'università di Wildau ma anche a...