CVE-2025-14156

CVE-2025-14156 Fox LMS – Plugin WordPress LMS 1.0.4.7 - 1.0.5.1 - Escalation di privilegi non autenticata tramite 'createOrder' ⚠️ CVE-2025-14156 – Exploit di escalation di privilegi non autenticata per Fox LMS WordPress 🛡️ Panoramica della vulnerabilità Fox LMS – Plugin WordPress LMS v1.0.4.7 a...

CVE-2025-39596

CVE-2025-39596 Quentn WP -e options Erforderliche Argumente: -u, --url Ziel-URL der WordPress-Site z. B. http://127.0.0.1/wordpress -e, --email E-Mail-Adresse für das neue Administratorkonto Optionale Argumente: -f, --fname Vorname Standard: Pwn -l, --lname Nachname Standard: Admin -r, --role...

CVE-2025-12674

CVE-2025-12674 KiotViet Sync = 1.8.5 - Caricamento Arbitrario di File Non Autenticato 🐚 KiotViet Sync = 1.8.5 - Caricamento Arbitrario di File Non Autenticato 📝 Descrizione Il plugin KiotViet Sync per WordPress versioni fino a 1.8.5 incluse è vulnerabile al caricamento arbitrario di file, a causa...

CVE-2024-34568

Exploit-Titel: LetterPress = 1.2.1 - Cookie-Diebstahl-Schwachstelle Exploit-Autor: SANU P.L CVE: CVE-2024-34568 CVSS: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L Referenzen: https://nvd.nist.gov/vuln/detail/CVE-2024-34568...

CVE-2026-13001

CVE-2026-13001 — Podlove Podcast Publisher Caricamento File Non Autenticato RCE Discrepanza tra isimage e extractfileextension → Caricamento Polyglot PHP Panoramica CVE-2026-13001 è una vulnerabilità critica CVSS 9.8 di caricamento arbitrario di file non autenticato nel plugin WordPress Podlove...

wp2shell-compromise-scanner-plugin

wp2shell के लिए कॉम्प्रोमाइज़ स्कैनर केवल-पठन एक स्वतंत्र, केवल-पठन WordPress प्लगइन जो आपके डेटाबेस और प्लगइन निर्देशिका को इस बात के संकेतों के लिए स्कैन करता है कि wp2shell कोर श्रृंखला CVE-2026-63030 + CVE-2026-60137 का शोषण किया गया था — भले ही यह हफ्तों पहले हुआ हो या हमलावर ने सफाई कर दी ह...

CVE-2026-78003

The Mailgun for WordPress plugin for WordPress is vulnerable to Server-Side Request Forgery SSRF via path traversal in versions up to and including 2.2.0. This is due to insufficient input validation in the addlist function, which accepts user-controlled array keys from $POST'addresses', passes...

wp2shell-lab

mini-wp-rest Una reimplementazione compatta e senza dipendenze di una piccola parte dell'API REST di WordPress — sufficiente per servire una raccolta pubblica di post ed eseguire più sotto-richieste in un'unica chiamata. Utile per insegnare come il routing di WordPress, WPQuery e $wpdb si combina...

CVE-2026-78003 Mailgun for WordPress <= 2.2.0 - Unauthenticated Server-Side Request Forgery (SSRF) via 'addresses' Array Keys

The Mailgun for WordPress plugin for WordPress is vulnerable to Server-Side Request Forgery SSRF via path traversal in versions up to and including 2.2.0. This is due to insufficient input validation in the addlist function, which accepts user-controlled array keys from $POST'addresses', passes...

EUVD-2026-64242

The Mailgun for WordPress plugin for WordPress is vulnerable to Server-Side Request Forgery SSRF via path traversal in versions up to and including 2.2.0. This is due to insufficient input validation in the addlist function, which accepts user-controlled array keys from $POST'addresses', passes...

CVE-2026-78003

The Mailgun for WordPress plugin (versions up to and including 2.2.0 ) is vulnerable to Server-Side Request Forgery (SSRF) via path traversal. The root cause is insufficient input validation in the add_list() function, which accepts user-controlled array keys from $_POST['addresses'] and passes t...

CVE-2026-77002

The SmilePass Selfie Login WordPress plugin through 1.0.2 does not perform any server-side verification of the identity it is asked to authenticate, allowing unauthenticated users to log in as any registered account, including administrators...

CVE-2026-77000

The WP Social Media Login WordPress plugin through 1.0.6 does not verify that a social login was actually completed with the identity provider before authenticating a visitor, allowing unauthenticated attackers to log in as any existing user, including administrators, by supplying that user's ema...

CVE-2026-77001

The Social Login & Sharing buttons with Analytics By SoClever WordPress plugin through 1.2.0 does not perform any authentication, authorisation or nonce checks in one of its publicly accessible login handlers, allowing unauthenticated attackers to obtain a valid session as any existing user,...

CVE-2026-19222

The Forminator Forms WordPress plugin before 1.57.0.7 does not consistently enforce the role restriction it applies to registration forms, allowing users who are permitted to build forms to configure one that assigns the administrator role to any visitor who registers through it...

CVE-2026-76789

The Slider Hero with Video Background, Animation WordPress plugin before 9.1.3 does not have authorisation and nonce checks on two of its request handlers, and does not escape a stored setting before outputting it, allowing unauthenticated users to store malicious JavaScript which will be execute...

CVE-2026-76793

The Firebase Authentication WordPress plugin before 1.7.1 does not require the email address in an authentication token to be verified before matching it to a WordPress account and issuing a session, allowing unauthenticated attackers to log in as any user, including administrators...

CVE-2026-18052

The ManageWP Worker WordPress plugin before 4.9.37 does not bind the account being logged in to the signature which authorises the login, nor prevent an already used login link from being replayed, allowing attackers who obtain such a link to gain a session as any user on the site, including an...

CVE-2026-16612

The FiboSearch WordPress plugin before 1.34.1 does not consistently exclude password-protected products from its unauthenticated AJAX endpoints, allowing unauthenticated users to disclose and enumerate password-protected products and their metadata without entering the product password. Two...

CVE-2026-16738

The Conekta Payment Gateway WordPress plugin before 6.2.2 does not verify the authenticity of incoming payment gateway webhook notifications, nor bind the confirmed payment to the targeted order or verify its amount, allowing unauthenticated attackers to mark arbitrary orders as paid without...