CVE-2024-5522-PoC

CVE-2024-5522-PoC : HTML5 Video Player 2.5.27 - Unauthenticated SQLi The plugin does not sanitize and escape a parameter from a REST route before using it in a SQL statement, allowing unauthenticated users to perform SQL injection attacks setup script: 1. git clone...

wp-cve-2026-63030-check

wp2shell-check Non-intrusive exposure checker for the WordPress "wp2shell" pre-authentication RCE chain CVE-2026-63030 + CVE-2026-60137. ⚠️ Authorized use only. Run this only against WordPress instances you own or have explicit permission to test. It is a triage aid, not an exploit. Scanning...

WordPress Ad Inserter – Ad Manager & AdSense Ads plugin <= 2.8.18 - Authenticated (Subscriber+) Sensitive Information Disclosure in 'ai-debug-processing-fe' & 'ai-debug-meta' URL Parameters vulnerability

Authenticated Subscriber+ Sensitive Information Disclosure in 'ai-debug-processing-fe' & 'ai-debug-meta' URL Parameters vulnerability discovered by Michal Kanas Thor in WordPress Plugin Ad Inserter versions = 2.8.18...

CVE-2026-108479

Cross-Site Request Forgery CSRF vulnerability in Patreon Patreon WordPress patreon-connect allows Cross Site Request Forgery.This issue affects Patreon WordPress: from n/a through 1.9.17...

CVE-2026-108481

Cross-Site Request Forgery CSRF vulnerability in Patreon Patreon WordPress patreon-connect allows Cross Site Request Forgery.This issue affects Patreon WordPress: from n/a through 1.10.0...

WordPress WP-Members plugin <= 3.5.7 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Intrudify in WordPress Plugin WP-Members versions = 3.5.7...

CVE-2026-63030

CVE-2026-63030 WordPress REST API batch route confusion + SQL injection leading to unauthorized admin creation → Remote Code Execution RCE complete exploit chain PoC. For authorized security testing, vulnerability reproduction, and research only. Do not use against unauthorized targets...

WordPress Events Manager plugin <= 7.4.7 - Race Condition vulnerability

Race Condition vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Events Manager versions = 7.4.8...

WordPress Skydropx plugin <= 2.1.4 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Nixxies in WordPress Plugin Skydropx versions = 2.1.4...

WordPress SimplyRETS Real Estate IDX plugin <= 3.2.9 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Peter Tang in WordPress Plugin SimplyRETS Real Estate IDX versions = 3.2.9...

WordPress MDTF plugin <= 1.3.9 - Arbitrary Code Execution vulnerability

Arbitrary Code Execution vulnerability discovered by Peter Tang in WordPress Plugin MDTF versions = 1.3.9...

WordPress Salevo plugin <= 1.3.0 - Content Injection vulnerability

Content Injection vulnerability discovered by cazy in WordPress Plugin Salevo versions = 1.3.0...

CVE-2026-108479 WordPress Patreon WordPress plugin <= 1.9.17 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Patreon Patreon WordPress patreon-connect allows Cross Site Request Forgery.This issue affects Patreon WordPress: from n/a through 1.9.17...

EUVD-2026-97730

Cross-Site Request Forgery CSRF vulnerability in Patreon Patreon WordPress patreon-connect allows Cross Site Request Forgery.This issue affects Patreon WordPress: from n/a through 1.9.17...

CVE-2026-108479

The Patreon WordPress plugin (specifically the patreon-connect component) is vulnerable to a Cross-Site Request Forgery (CSRF) vulnerability in versions 1.9.17 and below . This flaw allows an attacker to perform unauthorized actions on behalf of a user. The CVSS 3.1 score is 8.1 (High) , indicati...

WordPress Patreon WordPress plugin <= 1.9.17 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Asim Alshaya in WordPress Plugin Patreon WordPress versions = 1.9.17...

EUVD-2026-97729

Cross-Site Request Forgery CSRF vulnerability in Patreon Patreon WordPress patreon-connect allows Cross Site Request Forgery.This issue affects Patreon WordPress: from n/a through 1.10.0...

CVE-2026-108481 WordPress Patreon WordPress plugin <= 1.10.0 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Patreon Patreon WordPress patreon-connect allows Cross Site Request Forgery.This issue affects Patreon WordPress: from n/a through 1.10.0...

CVE-2026-108481

The Patreon WordPress plugin (patreon-connect) versions

WordPress Patreon WordPress plugin <= 1.10.0 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by mamgad in WordPress Plugin Patreon WordPress versions = 1.10.0...