CVE-2024-28000

LiteSpeed Cache Privilege Escalation PoC - CVE-2024-28000 🎤 README Translation English فارسی 📸 Screenshot 💎 Introduction This repository contains a Proof of Concept PoC for a critical privilege escalation vulnerability discovered in the LiteSpeed Cache WordPress plugin. The vulnerability,...

Exploit for CVE-2026-85097

CVE-2026-85097 - Bricksforge Word...

WordPress Booktics plugin <= 1.0.28 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by myhappyhoon in WordPress Plugin Booktics versions = 1.0.28...

WordPress Link Whisper – Free SQL Injection Vulnerability

WordPress Link Whisper Free 0.9.7 and earlier versions have a SQL injection vulnerability. This vulnerability stems from improper handling of special elements in SQL commands, which may lead to blind SQL injections...

WordPress PowerPack Addons for Elementor: Cross-site Script Vulnerabilities

WordPress PowerPack Addons for Elementor 3.1.0 and earlier versions contain a cross-site scripting vulnerability. This vulnerability arises from improper input during web page generation, and could lead to storage-based cross-site scripting attacks...

WordPress IMPress for IDX Broker cross-site scripting vulnerability

WordPress IMPress for IDX Broker 3.3.1 and earlier versions have a cross-site scripting vulnerability. This vulnerability arises from improper input validation during web page generation, which may lead to storage-based cross-site scripting attacks...

WordPress Amelia authorization issue vulnerability

WordPress Amelia versions 2.4.10 and earlier have a vulnerability related to authorization. This vulnerability arises due to a lack of authorization, which may lead to the exploitation of incorrectly configured access control levels...

WordPress Pay for Payment for WooCommerce authorization issue vulnerability

WordPress Pay for Payment in WooCommerce 3.0.1 and earlier versions has an authorization issue vulnerability. This vulnerability stems from a lack of authorization checks, which may allow attackers to exploit improperly configured access control levels...

WordPress FluentBoards authorization issue vulnerability

WordPress FluentBoards versions 2.1.0 and earlier have a licensing issue vulnerability. This vulnerability stems from the lack of proper authorization, which may allow attackers to exploit improperly configured access control levels...

WordPress Ad Inserter has a vulnerability related to information leakage

WordPress Ad Inserter 2.8.18 and earlier versions have a vulnerability involving information leakage. This vulnerability stems from the aiwpfooterhook, which exposes sensitive information. It is possible for authenticated attackers with privileges at the subscriber level or higher to extract...

WordPress Disable Users plugin <= 1.0.5 - Disabled Account Authentication Bypass vulnerability

Disabled Account Authentication Bypass vulnerability discovered by Naoki Kawahigashi in WordPress Plugin Disable Users versions = 1.0.5...

WordPress SmugMug Embed plugin <= 3.13 - Unauthenticated Stored XSS vulnerability

Unauthenticated Stored XSS vulnerability discovered by Enrico Marcolini - Claudio Marchesini - Dottor Marc in WordPress Plugin SmugMug Embed versions = 3.13...

WordPress Adwised Web Push Notification plugin <= 2.5.7 - Subscriber+ Stored XSS vulnerability

Subscriber+ Stored XSS vulnerability discovered by Pablo González Pérez, Francisco José Ramírez Vicente and Iñigo Sánchez Enciso in WordPress Plugin Adwised Web Push Notification versions = 2.5.7...

WordPress Web Vitals Tracking plugin <= 5.4.2 - Unauthenticated Stored XSS vulnerability

Unauthenticated Stored XSS vulnerability discovered by Pablo González Pérez, Francisco José Ramírez Vicente and Iñigo Sánchez Enciso in WordPress Plugin Web Vitals Tracking versions = 5.4.2...

WordPress HootBoard plugin <= 3.1.4 - Unauthenticated Stored XSS vulnerability

Unauthenticated Stored XSS vulnerability discovered by Pablo González Pérez, Francisco José Ramírez Vicente, and Iñigo Sánchez Enciso in WordPress Plugin HootBoard versions = 3.1.4...

WordPress Insurify plugin <= 1.0 - Unauthenticated Arbitrary Option Deletion vulnerability

Unauthenticated Arbitrary Option Deletion vulnerability discovered by Naoki Kawahigashi in WordPress Plugin Insurify versions = 1.0...

WordPress Crowdfundly plugin <= 2.2.2 - Crowdfundly Manager+ Privilege Escalation vulnerability

Crowdfundly Manager+ Privilege Escalation vulnerability discovered by Enrico Marcolini - Claudio Marchesini - Dottor Marc in WordPress Plugin Crowdfundly versions = 2.2.2...

WordPress Insurify plugin <= 1.0 - Unauthenticated Arbitrary Option Creation and Overwrite vulnerability

Unauthenticated Arbitrary Option Creation and Overwrite vulnerability discovered by Enrico Marcolini - Claudio Marchesini - Dottor Marc in WordPress Plugin Insurify versions = 1.0...

WordPress AI Content Generator Marketing plugin <= 1.0.0 - Unauthenticated Privilege Escalation vulnerability

Unauthenticated Privilege Escalation vulnerability discovered by Enrico Marcolini - Claudio Marchesini - Dottor Marc in WordPress Plugin AI Content Generator Marketing versions = 1.0.0...

WordPress Freeton WP plugin <= 1.0.0 - Unauthenticated Account Takeover vulnerability

Unauthenticated Account Takeover vulnerability discovered by Naoki Kawahigashi in WordPress Plugin Freeton WP versions = 1.0.0...