CVE-2026-80099

CVE-2026-80099 PoC Bypass de autenticación no autenticado y exploit de RCE dirigido a plugins de WordPress de Newfold que incluyen wp-module-data. Descripción general Esta herramienta explota un fallo de validación de token Bearer en el módulo wp-module-data de Newfold. Cuando un sitio de WordPre...

wp2shell-poc

wp2shell-poc Searchlight Cyber 的 wp2shell 安全公告涉及一种无需身份验证的 WordPress REST 批量路由混淆 SQL 注入，本仓库是与之对应的独立概念验证。 本仓库并非 Searchlight Cyber 的官方检测工具。check 用于确认 SQLi 路径，read 演示数据库读取，shell 则打开一个由插件支撑的命令 Shell——既可使用提供的管理员凭据，也可先利用 SQLi-to-admin 桥接。 受影响版本 Searchlight Cyber 的公告列出了以下 wp2shell RCE 受影响版本范围：...

CVE-2026-63030

CVE-2026-63030 WordPress REST API batch 路由混淆 + SQL 注入 导致 未授权创建管理员 → 远程代码执行 的完整利用链 PoC。 仅供授权安全测试、漏洞复现与研究使用。禁止用于未授权目标。 漏洞概述 项目| 说明 ---|--- CVE| CVE-2026-63030 组件| WordPress Core REST API /batch/v1 影响版本| WordPress 6.9.0 – 6.9.4 、7.0.0 – 7.0.1 （以官方公告为准） 攻击前提| 目标开启 REST API batch；站点至少有一篇已发布的文章或页面 权限要求...

wp2shell-lab

mini-wp-rest 一个紧凑、无依赖的 WordPress REST API 小片段重新实现——仅够服务一个公开文章集合，并在一次往返中执行多个子请求。适合用于教学 WordPress 路由、WPQuery 和 $wpdb 如何协同工作，而无需引入整个核心。 端点 方法| 路由| 用途 ---|---|--- GET| /wp-json/wp/v2/posts| 列出文章。支持 authorexclude、perpage。 POST| /wp-json/batch/v1| 在一次请求中运行多个子请求。 这两个路由都是公开的（无需认证），与核心文章列表的默认设置一致。 目录结构...

CVE-2026-63030-CVE-2026-60137-wp2shell-poc

wp2shell — WordPress REST API 时间盲SQL注入 → RCE 概念验证 描述 pocwptot.py 是一个概念验证（PoC），用于利用 WordPress REST API 批量端点上的时间盲SQL注入漏洞，并通过链式升级实现远程代码执行（RCE）。 被测试的漏洞： CVE-2026-63030 CVE-2026-60137 重要警告 仅将此工具用于您拥有或拥有明确书面许可进行测试的系统。滥用可能导致非法和破坏性后果。 作者：GhostGTR666 github.com/gagaltotal PoC 版本：1.0.0 要求 Python 3.8+（推荐）...

EUVD-2025-210644

The Passster WordPress plugin before 4.3.7 does not restrict low-privilege users holding the editposts capability from reading globally password-protected content through the WordPress core REST API when global protection is enabled, allowing any Contributor or higher to read the content of...

CVE-2026-12126

CVE-2026-12126 affects the WCFM Marketplace plugin for WordPress (versions

CVE-2026-4275

The Divi Torque Lite – Divi Theme, Divi Builder & Extra Theme plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.2.3. This is due to the use of 'returntrue' as the permissioncallback for the /installplugin and /activateplugin REST API endpoint...

CVE-2026-4275

The Divi Torque Lite – Divi Theme, Divi Builder & Extra Theme plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.2.3. This is due to the use of 'returntrue' as the permissioncallback for the /installplugin and /activateplugin REST API endpoint...

CVE-2026-8198 Activity Logs, User Activity Tracking, Multisite Activity Log from Logtivity <= 3.3.6 - Unauthenticated Information Disclosure via REST API

The Activity Logs, User Activity Tracking, Multisite Activity Log from Logtivity plugin for WordPress is vulnerable to Authentication Bypass to Information Disclosure in versions up to, and including, 3.3.6. This is due to a logic flaw in the verifyAuthorization method where requests without an...

CVE-2026-6127 Elementor Website Builder <= 4.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via REST API

The Elementor Website Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the elementordata meta field in versions up to, and including, 4.0.4. This is due to insufficient input sanitization when processing form-encoded REST API requests. The plugin registers the...

PT-2026-33404

The Kubio plugin for WordPress is vulnerable to Arbitrary File Upload in versions up to and including 2.7.2. This is due to insufficient capability checks in the kubio rest pre insert import assets function, which is hooked to the rest pre insert post type filter for posts, pages, templates, and...

CVE-2026-2375 App Builder – Create Native Android & iOS Apps On The Flight <= 5.5.10 - Unauthenticated Privilege Escalation via 'role' Parameter

The App Builder – Create Native Android & iOS Apps On The Flight plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 5.5.10. This is due to the verifyrole function in AuthTrails.php explicitly whitelisting the wcfmvendor role alongside subscriber and...

WordPress plugin KiviCare 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

CVE-2025-14977

The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 4.2.4 via the /wp-json/dokan/v1/settings REST API endpoint due to missing validation on a...

CVE-2025-14072

The Ninja Forms WordPress plugin before 3.13.3 allows unauthenticated attackers to generate valid access tokens via the REST API which can then be used to read form submissions...

EUVD-2025-203498

The Dokan Pro plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the /dokan/v1/wholesale/register REST API endpoint in all versions up to, and including, 4.1.3. This makes it possible for unauthenticated attackers to enumerate users and retrieve...

CVE-2025-5305 Password Reset with Code < 0.0.17 - Insecure Password Reset Code Creation

The Password Reset with Code for WordPress REST API WordPress plugin before 0.0.17 does not use cryptographically sound algorithms to generate OTP codes, potentially leading to account takeovers...

Linux Distros Unpatched Vulnerability : CVE-2019-20043

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In in wp-includes/rest-api/endpoints/class-wp-rest-posts-controller.php in WordPress 3.7 to 5.3.0, authenticated users who do not have the rights to publish a...

WordPress REST API | Custom API Generator For Cross Platform And Import Export In WP plugin <= 2.0.3 - Missing Authorization to Unauthenticated Privilege Escalation via process_handler Function vulnerability

Missing Authorization to Unauthenticated Privilege Escalation via processhandler Function vulnerability discovered by kr0d in WordPress Plugin REST API | Custom API Generator For Cross Platform And Import Export In WP versions = 2.0.3...