EUVD-2026-70034

The Timetics WordPress plugin through 1.0.61 does not enforce per-object ownership when updating appointments through its REST API, allowing users with its custom staff role to modify, disable, or take over appointments belonging to other staff members...

CVE-2026-10821

Yoast SEO Premium WordPress plugin before 27.6.1 fails to sanitize control characters from redirect origins before writing them to the site's Apache .htaccess file when file-based redirect mode is enabled. Because the redirect-creation endpoint is accessible to users with Author-level access, an ...

CVE-2026-14326 Timetics <= 1.0.61 - Staff+ Cross-Staff Appointment Modification via IDOR

The Timetics WordPress plugin through 1.0.61 does not enforce per-object ownership when updating appointments through its REST API, allowing users with its custom staff role to modify, disable, or take over appointments belonging to other staff members...

CVE-2026-14326 Timetics <= 1.0.61 - Staff+ Cross-Staff Appointment Modification via IDOR

The Timetics WordPress plugin through 1.0.61 does not enforce per-object ownership when updating appointments through its REST API, allowing users with its custom staff role to modify, disable, or take over appointments belonging to other staff members...

CVE-2026-10821 Yoast SEO Premium < 27.6.1 - Author+ Arbitrary .htaccess Directive Injection to RCE

The Yoast SEO Premium WordPress plugin before 27.6.1 does not sanitize control characters from redirect origins before writing them to the site's Apache configuration file when the file-based redirect mode is enabled, and the redirect-creation endpoint is reachable by users with only Author-level...

CVE-2025-15692 Icegram Express < 5.8.6 - Admin+ Stored XSS

The Icegram Express WordPress plugin before 5.8.6 does not properly escape a list description setting before outputting it within an HTML attribute, which could allow users with the Administrator role and above to perform Stored Cross-Site Scripting attacks...

CVE-2025-15692

CVE-2025-15692 affects the Icegram Express WordPress plugin prior to version 5.8.6 . The root cause is improper escaping of a list description setting before it is output within an HTML attribute , enabling Stored Cross-Site Scripting (XSS) attacks. Exploitation requires an authenticated user wit...

CVE-2025-15692 Icegram Express < 5.8.6 - Admin+ Stored XSS

The Icegram Express WordPress plugin before 5.8.6 does not properly escape a list description setting before outputting it within an HTML attribute, which could allow users with the Administrator role and above to perform Stored Cross-Site Scripting attacks...

EUVD-2025-210828

The Icegram Express WordPress plugin before 5.8.6 does not properly escape a list description setting before outputting it within an HTML attribute, which could allow users with the Administrator role and above to perform Stored Cross-Site Scripting attacks...

CVE-2023-4800

ID de CVE: CVE-2023-4800 Tipo de Vulnerabilidad: Exposición de datos sensibles Descripción: El plugin DoLogin Security para WordPress es vulnerable al acceso no autorizado de datos debido a una verificación de capacidad faltante en el widget del panel de administración en versiones hasta la 3.7...

wpstorecart-exploit

Simple PoC of wpstorecart 2.5.30 以前のプラグインのエクスプロイト CVE-2012-3576 を bash で記述したもの。...

CVE-2025-57926

Sink：根据 WordPress Core 的机制，XSS 在文章内容中是被阻止的，但使用此插件后，内容会被编码并在渲染时解码，从而无意中造成了 XSS 漏洞。 PoC：base64 编码的载荷 为 PHNjcmlwdD5hbGVydCgxKTwvc2NyaXB0Pg==...

CVE-2023-0156

ID de CVE : CVE-2023-0156 Tipo de vulnerabilidad : Recorrido de directorios Descripción : El complemento All-In-One Security AIOS para WordPress es vulnerable a un recorrido de directorios en versiones hasta, e incluyendo, la 5.1.4. Esto permite a atacantes autenticados con permisos de nivel...

CVE-2023-6063

CVE-2023-6063 PoC Referencia Vulnerabilidad de inyección SQL no autenticada solucionada en WP Fastest Cache 1.2.2 | WPScan Configuración del plugin Habilitar "WP Fastest Cache". PoC El parámetro de cookie "wordpressloggedin" es vulnerable. root@kitploit: $ python sqlmap.py --dbms=mysql -u...

CVE-2019-9978-Social-Warfare-WordPress-RCE

🚀 CVE-2019-9978 – Social Warfare WordPress插件远程代码执行漏洞 ⚠️ 免责声明： 本仓库仅用于教育和授权的安全测试 。请仅在你拥有或已获得明确书面授权的系统上使用。未经授权的访问是违法的。 📋 概述...

CVE-2024-10586-Poc

漏洞信息 描述 WordPress的Debug Tool插件在所有版本直至2.2中存在一个漏洞，由于dbtpullimage函数缺少权限检查以及文件类型验证缺失，导致未经身份验证的攻击者可以创建任意文件（如.php文件），进而实现远程代码执行。 CVE ID CVE-2024-10586 脚本使用方法 先决条件 系统中已安装Python 3.x。 安装所需依赖： pip install requests 运行方式 1. 从GitHub克隆仓库： root@kitploit: git clone https://github.com/Nxploited/CVE-2024-10586-Poc...

CVE-2024-9932-POC

CVE-2024-9932-POC 描述： Wux Blog Editor WordPress 插件存在任意文件上传漏洞，原因是 wuxbtinsertImageNew 函数对文件类型验证不足。受影响版本包括 3.0.0 及更早版本。该漏洞允许未经身份验证的攻击者向服务器上传任意文件，可能导致远程代码执行 RCE。 漏洞详情 该漏洞源于 wuxbtinsertImageNew 函数对文件类型验证不当，攻击者可在无需身份验证的情况下向服务器上传恶意文件。 攻击场景： root@kitploit: 攻击者识别使用该易受影响插件的网站。 利用文件上传功能上传恶意 PHP 后门文件。...

kirki-wordpress-account-security-assessment

CVE-2026-8206 - Kirki WordPress 插件未授权账户接管 顾问式网络安全报告 针对 Kirki WordPress 账户安全风险的专业漏洞评估报告，包含技术影响、修复及缓解策略。 📍 报告快照 字段| 详情 ---|--- 报告类型| 漏洞评估报告 参与背景| 安全研究 主要关注点| WordPress / 内部服务 受众| 安全团队、工程团队、招聘经理 输出风格| 执行摘要、技术分析、业务影响、修复路线图 发布状态| 已脱敏，用于公开作品集审查 !IMPORTANT 本报告已特意脱敏，以便公开发布到...

CVE-2026-82223

Unauthenticated Broken Access Control in WP Event SOlution = 4.1.22 versions...

CVE-2026-19632-POC

CVE-2026-19632 — TranslatePress 未认证账户接管 通过密码重置链接泄露实现未认证账户接管 💙 支持本项目 如果您欣赏我的工作，欢迎通过 USDT（TRC20） 支持本项目：TQBA72kakjCZLnJt8fJYcD7dyQCEpzNtVN 🎥 视频演示 完整的视频讲解和脚本演示可在此处查看： ▶️ 在 YouTube 上观看视频 ⚠️ 概述 CVE-2026-19632 是一个影响 TranslatePress – Multilingual WordPress 插件的严重未认证账户接管漏洞。 root@kitploit: 🚀 使用方法 创建一个...