wp2shell

wp2shell Exploit WordPress REST API route confusion CVE-2026-63030 + SQL injection CVE-2026-60137 in the batch endpoint to achieve Remote Code Execution. Vulnerabilities Route Confusion CVE-2026-63030 The WordPress REST API batch endpoint /batch/v1 does not properly isolate request routing. By...

CVE-2024-43998

CVE-2024-43998 Description CVE-2024-43998 : Missing Authorization vulnerability in the Blogpoet theme allows access to functionality not properly constrained by ACLs. This issue affects Blogpoet versions from n/a through 1.0.3. Usage usage: CVE-2024-43998.py -h -u URL -p PLUGIN CVE-2024-43998...

CVE-2021-29447

WordPress 5.6-5.7 - Authenticated Author+ XXE CVE-2021-29447 Using Step1. Run WordPress $ make up-wp Step2. Run Attacker web server $ make up-mal Step3. Generate malicious WAV file Without wavefile npm Recommend $ echo -en 'RIFF\xb8\x00\x00\x00WAVEiXML\x7b\x00\x00\x00%remote;%init;%trick; \x00'...

CVE-2024-54239

CVE-2024-54239 Eyewear prescription form = 4.0.18 - Missing Authorization to Unauthenticated Arbitrary Options Update Description The Eyewear prescription form plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability...

LetterPress-1.2.1-Open-Redirection-Via-Html-Injection-Vulnerability

Exploit Title: LetterPress CLICK THIS" in HTML Campaign Message input field and click on Save Campaign. 2. View the campaign and click on "CLICK THIS" hyperlink it will redirect to the 3rdparty site. Ex:evil.com...

CVE-2025-12585

MxChat Basic = 2.5.1 - MxChat – AI Chatbot for WordPress = 2.5.1 - Unauthenticated Information Exposure The MxChat Basic plugin does not verify session ownership in the mxchatfetchconversationhistory AJAX endpoint, allowing unauthenticated users to access other users' conversation history and IP...

wordpress-hacking

WordPress Hacking Some useful resources for hacking WordPress and it's plugins and themes. Bug Bounty If you're passionate about finding and reporting WordPress vulnerabilities, consider joining these bug bounty programs: Wordfence and Patchstack. Signing up through my Wordfence link gives me a...

wp2shell-Hestia-Scanner

🛡️ wp2shell-Hestia-Scanner 🇬🇧 English | 🇬🇷 Ελληνικά Read-only WordPress security scanner for HestiaCP servers. Detects wp2shell compromise indicators across all hosted sites — with per-client email reports, core file diff, SHA256 webshell detection, risk scoring, and optional AI evaluation. ⚠️ Safe...

CVE-2026-3844-Lab

CVE-2026-3844 — Breeze Cache Unauthenticated Arbitrary File Upload to RCE Lab Local-only Docker lab for reproducing and comparing CVE-2026-3844 behavior in the WordPress Breeze Cache plugin. This repository demonstrates the vulnerable behavior in Breeze Cache 2.4.4 and compares it with the patche...

CVE-2025-12189

Bread & Butter: Gate content + Capture leads + Collect first-party data + Nurture with Ai agents CSRF Attack function exploit const form = document.createElement'form'; form.action = 'http://TARGETSITE.COM/wp-admin/admin-ajax.php'; form.method = 'POST'; form.enctype = 'multipart/form-data';...

CVE-2022-47447

CVE-2022-47447 POC CSRF - CVE-2022-47447 ⚠️ For educational purposes and authorized environments only. Functional PoC for vulnerability CVE-2022-47447, which affects a vulnerable WordPress plugin, allowing a Cross-Site Request Forgery CSRF attack against authenticated users. VULNERABLE URL:...

CVE-2025-10377

Proof of Concept CVE-2025-10377 Cross-Site Request Forgery CSRF in Plugin System Dashboard Funtion sdtogglelogs Vulnerability Type: Cross-Site Request Forgery CSRF Affected Function: sdtogglelogs CVSS v3.1: 4.3 Medium Vector: AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N Note: Score reflects unauthorized...

0-click-RCE-Exploit-for-CVE-2024-51793

CVE-2024-51793 / 0-Click RCE Exploit Author: Joshua Provoste https://x.com/JoshuaProvoste/status/1858668072279626138 This repository contains a proof-of-concept exploit for CVE-2024-51793, an unauthenticated arbitrary file upload vulnerability in a vulnerable WordPress plugin, leading to remote...

CVE-2026-8732

⚔️ CVE-2026-8732 WP Maps Pro ≤ 6.1.0 — Unauthenticated Privilege Escalation 8-Fase Automasi Eksploitasi | Multiprocessing + Asyncio | Admin Creation Terverifikasi 🎯 Tentang Kerentanan Plugin WordPress WP Maps Pro versi ≤ 6.1.0 memiliki kerentanan eskalasi hak istimewa tanpa autentikasi. Penyerang...

rcno-reviews

Recencio Book Reviews A WordPress plugin for managing and displaying book reviews. Custom post type, 7 taxonomies, 13 shortcodes, 7 widgets, 6 templates, 5 extensions. All data stored in standard WordPress post meta — no custom tables. Background Recencio Book Reviews was created by Kemory Grubb...

CVE-2026-8732

CVE-2026-8732 — WP Maps Pro ≤ 6.1.0 ♡ Unauthenticated Privilege Escalation via Administrator Account Creation ♡ === shadow ♡ & friska === 📋 Vulnerability Info Field| Details ---|--- CVE ID| CVE-2026-8732 CVSS Score| 9.8 Critical CVSS Vector| CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Type|...

wordpress-CVE-2024-27956

This repository does not have a README...

CVE-2025-4796

CVE-2025-4796 eventin and update the speaker email to an email they control. then the attacker can use wordpress password reset to take over the admin account. requirements: python 3.8 or higher requests install requests: pip install requests usage run the script and enter required values when...

CVE-2026-9833

CVE-2026-9833 CVE ID: CVE-2026-9833 Vulnerability Type: Cross-Site Scripting XSS – Reflected XSS CWE: CWE-79 – Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' Severity: High CISA ADP CVSS v3.1: 7.1 Overview CVE-2026-9833 affects the Tag Groups – Advanced Way to...

CVE-2025-14440

CVE-2025-14440 JAY Login & Register = 2.4.01 - Authentication Bypass via Cookie 🚨 JAY Login & Register = 2.4.01 - Authentication Bypass via Cookie 📝 Description The JAY Login & Register plugin for WordPress is vulnerable to authentication bypass in versions up to and including 2.4.01. This flaw...