Lucene search
+L

88679 matches found

GithubExploit
GithubExploit
added yesterday12 views

Exploit for CVE-2026-18315

CVE-2026-18315-PoC Proof-of-concep...

9.8CVSS5.3AI score0.00443EPSS
SaveExploits1
Cvelist
Cvelist
added yesterday9 views

CVE-2026-28164 WordPress Easy Elementor Addons plugin <= 2.3.7 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in HashThemes Easy Elementor Addons allows Cross Site Request Forgery. This issue affects Easy Elementor Addons: from n/a through 2.3.7...

9.6CVSS
SaveExploits0References1
CVE
CVE
added yesterday13 views

CVE-2026-28163

The New User Approve WordPress plugin (versions ≤ 3.2.8) has a broken access control vulnerability discovered by Austin Ginder. Unauthenticated remote attackers can exploit incorrectly configured access control security levels, achieving low integrity impact (CVSS 5.3 MEDIUM). No patch version or...

5.3CVSS5.3AI score
SaveExploits0References1
Patchstack
Patchstack
added yesterday7 views

WordPress Easy Elementor Addons plugin <= 2.3.7 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Asim Alshaya in WordPress Plugin Easy Elementor Addons versions = 2.3.7...

9.6CVSS5.3AI score
SaveExploits0Affected Software1
Patchstack
Patchstack
added yesterday7 views

WordPress New User Approve plugin <= 3.2.8 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Austin Ginder in WordPress Plugin New User Approve versions = 3.2.8...

5.3CVSS5.2AI score
SaveExploits0Affected Software1
CVE
CVE
added yesterday14 views

CVE-2026-74011

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in revmakx InfiniteWP Client allows Blind SQL Injection. This issue affects InfiniteWP Client: from n/a through 1.13.9...

7.6CVSS5.8AI score
SaveExploits0References1
Patchstack
Patchstack
added yesterday5 views

WordPress InfiniteWP Client plugin <= 1.13.9 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin InfiniteWP Client versions = 1.13.9...

7.6CVSS5.9AI score
SaveExploits0Affected Software1
NVD
NVD
added yesterday3 views

CVE-2026-68564

Unauthenticated Cross Site Scripting XSS in NotificationX Pro = 3.1.4 versions...

7.1CVSS
SaveExploits0References1
NVD
NVD
added yesterday3 views

CVE-2026-73402

Subscriber Cross Site Scripting XSS in WP BASE Booking = 6.3.2 versions...

6.5CVSS
SaveExploits0References1
NVD
NVD
added yesterday4 views

CVE-2026-68566

Unauthenticated SQL Injection in BookingPress Appointment Booking Pro = 6.0.2 versions...

9.3CVSS
SaveExploits0References1
NVD
NVD
added yesterday3 views

CVE-2026-66615

Unauthenticated Cross Site Scripting XSS in Podlove Podcast Publisher = 4.5.4 versions...

7.1CVSS
SaveExploits0References1
NVD
NVD
added yesterday4 views

CVE-2026-66616

Unauthenticated Cross Site Scripting XSS in Form Maker by 10Web = 1.15.46 versions...

7.1CVSS
SaveExploits0References1
NVD
NVD
added yesterday4 views

CVE-2026-66677

Subscriber Broken Authentication in Leyka = 3.32.3 versions...

7.6CVSS
SaveExploits0References1
NVD
NVD
added yesterday4 views

CVE-2026-66606

Unauthenticated Cross Site Scripting XSS in SmartSMTP = 1.2.0 versions...

7.1CVSS
SaveExploits0References1
NVD
NVD
added yesterday4 views

CVE-2026-66601

Subscriber Cross Site Scripting XSS in Media LIbrary Assistant = 3.39 versions...

6.5CVSS
SaveExploits0References1
NVD
NVD
added yesterday3 views

CVE-2026-66597

Unauthenticated Cross Site Scripting XSS in wpDataTables = 6.5.1.4 versions...

7.1CVSS
SaveExploits0References1
NVD
NVD
added yesterday4 views

CVE-2026-66593

Unauthenticated SQL Injection in Security & Malware scan by CleanTalk = 2.184 versions...

9.3CVSS
SaveExploits0References1
EUVD
EUVD
added yesterday3 views

EUVD-2026-63318

Subscriber Arbitrary File Upload in Warehouse Cargo = 2.6.9 versions...

9.9CVSS5.2AI score
SaveExploits0References1
CVE
CVE
added yesterday11 views

CVE-2026-74014

A Subscriber (low-privileged WordPress user) in the IT Residence theme

9.9CVSS5.3AI score
SaveExploits0References1
Cvelist
Cvelist
added yesterday10 views

CVE-2026-74013 WordPress eShipper Commerce plugin <= 2.16.13 - SQL Injection vulnerability

Subscriber SQL Injection in eShipper Commerce = 2.16.13 versions...

8.5CVSS
SaveExploits0References1
Rows per page
Query Builder