CVE-2026-23550-PoC

CVE-2026-23550-PoC CVE-2026-23550 - Modular DS WordPress Plugin Unauthentifizierter Admin-Zugriff Proof-of-Concept PoC , das CVE-2026-23550 demonstriert – kritische Übernahme von Admin-Konten ohne Authentifizierung im Modular DS WordPress-Plugin Versionen ≤2.5.1. Wird aktiv in freier Wildbahn...

CVE_2026_2576_PoC

CVE-2026-2576 — Business Directory Plugin SQLi PoC Unauthentifizierte zeitbasierte Blind-SQL-Injection Business Directory Plugin für WordPress ≤ 6.4.21 Inhaltsverzeichnis Überblick über die Schwachstelle Technische Analyse Lab-Anforderungen Lab-Einrichtung Ausführen des PoC Erwartete Ausgabe...

CVE-2022-3590-WordPress-Vulnerability-Scanner

CVE-2022-3590 Scanner di vulnerabilità WordPress Questo script Python è progettato per verificare se un sito web WordPress è vulnerabile alla vulnerabilità CVE-2022-3590. La vulnerabilità sfrutta una Server-Side Request Forgery SSRF cieca non autenticata nella funzionalità pingback di WordPress...

CVE-2026-11961

CVE-2026-11961 CVE-2026-11961 के लिए मास एक्सप्लॉइट टूल जो WordPress User Registration & Membership प्लगइन को प्रभावित करता है। विशेषताएँ प्लगइन संस्करण का पता लगाना एकल लक्ष्य single target समर्थन बैच लक्ष्य प्रोसेसिंग मल्टी-थ्रेड समर्थन रैंडम या कस्टम क्रेडेंशियल HTTP/HTTPS प्रॉक्सी समर्थन...

CVE-2024-0757-Exploit

CVE-2024-0757 Exploit Descrizione Il plugin Insert or Embed Articulate Content into WordPress per WordPress è vulnerabile al caricamento arbitrario di file tramite caricamenti non sicuri di file in un archivio zip in tutte le versioni fino alla 4.3000000023 inclusa. Ciò consente ad attaccanti non...

CVE-2026-64638

XSS2Shell Alert PoC CVE-2026-64638 Proof of Concept für Pre-Auth Reflected XSS in WordPress Ein HTML-Proof-of-Concept in einer einzigen Datei für das Parser-Differenzial-XSS CVE-2026-64638 XSS2Shell im WordPress-Core. Es demonstriert die Ausführung von nicht authentifiziertem JavaScript im...

CVE-2026-64638-PoC-Exploit

🌀 CVE‑2026‑64638 – WordPress XSS2Shell Security Suite ⚠️ NUR FÜR ETHISCHEN GEBRAUCH – AUTORISIERTE SICHERHEITSTESTS Dieses Repository stellt Werkzeuge ausschließlich für autorisierte Sicherheitsexperten, Blue Teams und Penetrationstester bereit. Unbefugter Zugriff auf Computersysteme ist nach CFAA...

CVE-2026-3844

root@kitploit: ╔════════════════════════════════════════════════════════════╗ ║ CVE-2026-3844 ║ ║ Breeze Cache = 2.4.4 Arbitrary File Upload ║ ║ Unauthenticated RCE | Authorized Lab Use Only ║ ╚════════════════════════════════════════════════════════════╝ Übersicht Bei CVE-2026-3844 handelt es si...

CVE-2024-1813-POC

CVE-2024-1813 - Simple Job Board ≤ 2.11.0 WordPress - Неаутентифицированная инъекция PHP-объектов 🎥 Демо Proof-of-Concept Полный цикл: гость сохраняет сериализованный PHP-объект через публичную форму приложения, администратор открывает список кандидатов, и цепочка гаджетов создаёт веб-шелл...

CVE-2025-7384

CVE-2025-7384 — Injection d'objets PHP vers RCE Plugin : Database for Contact Form 7 contact-form-entries ≤ 1.4.3 CVSS : 9.8 Critique CWE : CWE-502 — Désérialisation de données non fiables Exigence d'authentification : Aucune non authentifié Impact : Exécution de code à distance Table des matière...

CVE-2026-64638

🛡️ CVE-2026-64638 - XSS2Shell Reflektiertes XSS vor der Authentifizierung in WordPress mit potenzieller Eskalation zu PHP-Codeausführung 📌 Überblick CVE-2026-64638 ist eine Reflected-XSS-Schwachstelle Cross-Site-Scripting vor der Authentifizierung mit hohem Schweregrad, die den...

WSS

WSS: Сканер безопасности WordPress Поддержка Python : 3.13.x Поддержка ОС : Kali Linux latest Ubuntu latest Windows 10, 11 WSS:В режиме разработки!!! Google Dorks ВНИМАНИЕ! Любое вредоносное действие с вашей стороны будет на вашей ответственности! root@kitploit: index of" inurl:wp-content/...

CVE-2024-11613-wp-file-upload

CVE-2024-11613-wp-file-upload Exploit di Chirag Artani https://3rag.com per CVE-2024-11613 nel plugin WordPress File Upload Ecco le informazioni - Il plugin WordPress File Upload per WordPress è vulnerabile a Remote Code Execution, Arbitrary File Read e Arbitrary File Deletion in tutte le version...

CVE-2026-63030-POC

CVE-2026-63030: WordPress Pre-Auth RCE Explained 📖 पहले पूरा तकनीकी विश्लेषण पढ़ें: CVE-2026-63030: WordPress Pre-Auth RCE Explained इस रिपॉजिटरी में उस लेख में संदर्भित प्रूफ-ऑफ-कॉन्सेप्ट एक्सप्लॉइट शामिल है। भेद्यता, सीमाओं और पुनरुत्पादन प्रक्रिया को समझने के लिए ब्लॉग से शुरू करें। Quick Fact...

wp-def

wp-def वर्डप्रेस डिफ़ॉल्ट उपयोगकर्ता + पासवर्ड Python 2.7 कॉफ़ी खरीदें : Bitcoin $: 14nXhmRiQx5joCXFTdR8ydm3T8et7MFDXC उपयोग कैसे करें? Python 2.7 स्थापित करें यहाँ डाउनलोड करें python file.py...

CVE-2026-6227

CVE-2026-6227: Inclusione Locale di File in BackWPup Riepilogo Advisory Le versioni di BackWPup fino alla 5.6.6 inclusa sono affette da una vulnerabilità di Inclusione Locale di File LFI autenticata tramite il parametro blockname dell'endpoint REST /wp-json/backwpup/v1/getblock. Il difetto è stat...

wpbf

wpbf! wpbf is a bruteforce tool to remotely test password strength, username enumeration and plugin detection on a WordPress site. Description ^^^^^^^^^^^ The script will try to login into the WordPress dashboard through the login form using a mixture of enumerated usernames, a wordlist and...

wpbf

wpbf! O wpbf é uma ferramenta de brute force para testar remotamente a força de senhas, a enumeração de nomes de usuário e a detecção de plugins em um site WordPress. Descrição ^^^^^^^^^^^ O script tentará fazer login no painel do WordPress através do formulário de login usando uma combinação de...

Wp_Adning_Advertising_Shell_Upload

WpAdningAdvertisingShellUpload python 2.7...

Poc-CVE-2025-9519

Easy Timer v4.2.1 - Prerequisiti Docker Engine installato Docker Compose installato Fare riferimento alla documentazione ufficiale di Docker per l'installazione: Installazione Docker Engine 1. Avvia WordPress con Docker Dalla directory del tuo progetto: root@kitploit: sudo docker-compose up -d...