CVE-2025-2011

CVE-2025-2011 - Depicter Plugin SQL Injection Vulnerability CVE Reference: CVE-2025-2011 This repository contains a proof-of-concept environment for testing the SQL injection vulnerability in Depicter Slider & Popup Builder plugin versions 3.6.2. Prerequisites Docker Docker Compose Python 3.x...

WordPress-Exploit-CVE-2024-1071

WordPress CVE 2024-1071 SQL Exploit This exploit, which runs on WordPress versions 2.1.3 to 2.8.2, allows unauthenticated attackers to add additional SQL queries to existing queries that can be used to pull sensitive information from the database. Dork: body="/wp-content/plugins/ultimate-member" ...

CVE-2026-3300

CVE-2026-3300 - Everest Forms Pro Unauthenticated Stored Cross-Site Scripting Quick Usage root@kitploit: python3 exploit.py -t "C:\Path\To\Target" -o demo.zip --data-file payload.exe Exploitation Notes Severity: CRITICAL CVSS: 9.8 Impact: Confidentiality, Integrity, Availability Published:...

CVE-2023-40600

CVE-2023-40600 EWWW Image Optimizer = 7.2.0 - Unauthenticated Sensitive Information Exposure via Debug Log Description The EWWW Image Optimizer plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 7.2.0 via the debuglog function. This makes it...

essential-addons-for-elementor-xss-poc

🔍 Essential Addons for Elementor XSS Vulnerability Detector 🚨 Critical Information This tool is for security research and patching purposes only. Do not use it to harm sites. If you find vulnerable sites, report them responsibly to site owners so they can update immediately. ⚠️ Vulnerability...

EUVD-2026-76958

The Bookit — Booking & Appointment Calendar WordPress plugin before 2.6.0.1 does not properly restrict the data returned by an availability-check request, allowing unauthenticated users to retrieve other customers' appointment details, including free-text booking comments and contact information...

EUVD-2026-76957

The rtMedia for WordPress, BuddyPress and bbPress WordPress plugin before 4.7.12 does not check ownership before changing the privacy level of an activity and its attached media, relying only on a nonce shared with every logged-in user, allowing users with a subscriber-level account or above to...

CVE-2026-89080

CVE-2026-89080 affects the Really Simple Security WordPress plugin in versions before 9.8.1 . The root cause is an unauthenticated 2FA bypass via email provider state demotion : an unauthenticated request can reset an account's completed email two-factor enrolment, effectively reverting it to an ...

CVE-2026-88995

CVE-2026-88995 affects the Bookit — Booking & Appointment Calendar WordPress plugin in versions prior to 2.6.0.1 . The vulnerability stems from insufficient data restriction in an availability-check request , which allows unauthenticated users to retrieve other customers' appointment details, inc...

CVE-2026-88912

CVE-2026-88912 affects the rtMedia for WordPress, BuddyPress and bbPress plugin versions before 4.7.12 . The vulnerability is classified as an IDOR (Insecure Direct Object Reference): the plugin does not verify ownership before changing the privacy level of an activity and its attached media, rel...

CVE-2026-80072

The User Registration & Membership WordPress plugin prior to 5.2.8 fails to validate the destination of a post-login redirect, resulting in an unauthenticated open redirect via login redirect parameters. An attacker can craft a link that, when a visitor logs in, redirects them to an arbitrary ext...

CVE-2026-86406

CVE-2026-86406 affects the User Registration & Membership WordPress plugin in versions prior to 5.2.8 . The plugin fails to check the user's capability when processing a membership purchase and does not validate the submitted payment method or plan. As a result, any authenticated user (e.g., a su...

CVE-2026-86407

User Registration & Membership WordPress plugin before 5.2.8 fails to verify that a visitor requesting its membership confirmation page actually owns the account referenced in the request or that a registration/purchase has occurred. This allows unauthenticated users to retrieve another user's em...

EUVD-2026-76956

The Simple Membership WordPress plugin before 4.7.8 does not validate that the membership level supplied in a PayPal payment notification matches the level configured for the paid payment button, allowing members to pay for a lower-priced membership while being granted a higher, more privileged...

EUVD-2026-76955

The User Registration & Membership WordPress plugin before 5.2.8 does not verify that the visitor requesting its membership confirmation page owns the account named in the request, nor that any registration or purchase has taken place, allowing unauthenticated users to retrieve another user's ema...

CVE-2026-88764

Simple Membership WordPress plugin before 4.7.8 fails to validate that the membership level supplied in a PayPal Standard payment notification (via the subsc_ref field) matches the level configured for the paid payment button. This mismatch allows a member who pays for a lower-priced tier to be g...

EUVD-2026-76953

The User Registration & Membership WordPress plugin before 5.2.8 does not validate the destination of a post-login redirect before redirecting, allowing unauthenticated attackers to redirect visitors to an arbitrary external URL, which can be abused for phishing...

CVE-2026-77773

The Social Contact Form (FormyChat) WordPress plugin, also known as Contact Form to Chat Apps | Click to Chat to Order , prior to version 2.15.8 lacks any capability, nonce, or session check on its public AJAX action formychat_get_gf_entry . This allows unauthenticated users to read the submitted...

EUVD-2026-76952

The User Registration & Membership WordPress plugin before 5.2.8 does not properly restrict who may author a membership plan or validate the plan a user attaches to their own account, allowing authenticated users with Author-level access and above to assign themselves an arbitrary role and escala...

CVE-2026-80071

CVE-2026-80071 affects the User Registration & Membership WordPress plugin in versions before 5.2.8 . The plugin does not properly restrict who may author a membership plan or validate the plan a user attaches to their own account. This allows any authenticated user with Author-level (or higher) ...