CVE-2026-93855

The SendPress Newsletters plugin for WordPress is vulnerable to time-based SQL Injection in all versions up to and including 1.26.1.20 . The flaw exists in the 'subscriberid' parameter due to insufficient escaping of user-supplied input and a lack of sufficient preparation in the existing SQL que...

CVE-2026-96741

The DSGVO All in one for WP plugin for WordPress (all versions up to and including 5.0 ) is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is insufficient input sanitization and output escaping in the Comment Content via Output Buffer Regex Corruption . This flaw allows unauthen...

CVE-2026-96669

The Food Store – Online Food Delivery & Pickup plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in versions up to and including 1.5.5 . The root cause is insufficient input sanitization and output escaping related to the 'service_type' Cookie . Unauthenticated attackers can...

EUVD-2026-112584

The Bot for Telegram on WooCommerce plugin for WordPress is vulnerable to Authentication Bypass leading to Account Takeover in all versions up to, and including, 1.3.0. The /wp-json/woo-telegram/v1/main/ REST endpoint is registered with permissioncallback = 'returntrue' and performs no Telegram...

EUVD-2026-112586

The Food Store – Online Food Delivery & Pickup plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'servicetype' Cookie in all versions up to, and including, 1.5.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...

CVE-2026-109516 Bot for Telegram on WooCommerce <= 1.3.0 - Unauthenticated Authentication Bypass to Account Takeover via Fake Telegram Webhook + Brute-Forced Login Token

The Bot for Telegram on WooCommerce plugin for WordPress is vulnerable to Authentication Bypass leading to Account Takeover in all versions up to, and including, 1.3.0. The /wp-json/woo-telegram/v1/main/ REST endpoint is registered with permissioncallback = 'returntrue' and performs no Telegram...

CVE-2026-96669 Food Store <= 1.5.5 - Unauthenticated Stored Cross-Site Scripting via 'service_type' Cookie

The Food Store – Online Food Delivery & Pickup plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'servicetype' Cookie in all versions up to, and including, 1.5.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...

CVE-2026-96741 DSGVO All in one for WP <= 5.0 - Unauthenticated Stored Cross-Site Scripting via Comment Content via Output Buffer Regex Corruption

The DSGVO All in one for WP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content via Output Buffer Regex Corruption in all versions up to, and including, 5.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated...

EUVD-2026-112585

The DSGVO All in one for WP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content via Output Buffer Regex Corruption in all versions up to, and including, 5.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated...

CVE-2026-109516

The Bot for Telegram on WooCommerce plugin for WordPress is vulnerable to an Authentication Bypass leading to Account Takeover in all versions up to and including 1.3.0 . The flaw exists because the /wp-json/woo-telegram/v1/main/ REST endpoint lacks Telegram webhook signature verification and use...

CVE-2022-0441

A vulnerability classified as critical was found in MasterStudy LMS Plugin up to 2.7.5 on WordPress WordPress Plugin. This vulnerability affects an unknown part of the component New Account Handler. The manipulation with an unknown input leads to a privileges management vulnerability. The CWE...

CVE-2021-21389

Usage 1. Build the vulnerable WordPress and BuddyPress environment using Docker. 2. Build and run the mariaDB container. 3. Ensure the two containers run on the same network. ex docker network create wordpressnetwork docker network connect wordpressnetwork wordpressapp docker network connect...

CVE-2025-34085

CVE-2025-34085 — WordPress Simple File List Unauthenticated RCE An automated exploit for CVE-2025-34085 duplicate of CVE-2020-36847, a critical unauthenticated remote code execution vulnerability in the WordPress Simple File List plugin versions ≤ 4.2.2. Note: CVE-2025-34085 was rejected by MITRE...

CVE-2023-6567-poc

CVE-2023-6567-poc Time-based SQLi Description The plugin does not properly sanitise and escape the orderby parameter before using it in a SQL statement, leading to a SQL injection exploitable by unauthenticated users 1. Vulnerable GET request:...

CVE-2026-15253

CVE-2026-15253 Easy Media Replace = 0.2.0 - Authenticated Author+ Stored Cross-Site Scripting Description The Easy Media Replace plugin is vulnerable to a Stored Cross-Site Scripting XSS via the media attachment title. When an Author renames a media file using an XSS payload and an Admin or Edito...

CVE-2024-4439

CVE-2024-4439 CVE-2024-4439 docker and poc Lab Setup After starting the Docker container, some additional configuration is needed. Visit 127.0.0.1:8080, complete the configuration, In the backend – Appearance – Themes, select a theme, customize it, and configure. Go to Design – Templates – Single...

CVE-2025-4094

CVE-2025-4094 – WordPress Digits Plugin This method is useful for vi...

WP2Shell

WP2Shell - WordPress Pre-Auth RCE Exploit CVE-2026-63030 + CVE-2026-60137 Version: 4.0.0 Author: G0D150NE 📌 Overview WP2Shell is a full-chain exploit tool for WordPress pre-authentication remote code execution. It combines two critical vulnerabilities: CVE-2026-63030 - SQL Injection in REST API...

CVE-2024-51665

CVE-2024-51665 Magical Addons For Elementor = 1.2.1 - Authenticated Subscriber+ Server-Side Request Forgery Description: The Magical Addons For Elementor Header Footer Builder, Free Elementor Widgets, Elementor Templates Library plugin for WordPress is vulnerable to Server-Side Request Forgery in...

CVE-2024-54292

CVE-2024-54292 Appsplate = 2.1.3 - Unauthenticated SQL Injection Description The Appsplate plugin for WordPress is vulnerable to SQL Injection in versions up to, and including, 2.1.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL...