323106 matches found
CVE-2026-80069
The MasterStudy LMS plugin for WordPress (versions before 3.7.50 ) is vulnerable to a missing authorization flaw. The stm_lms_send_test_email_ajax AJAX action lacks proper capability and nonce validation, allowing any authenticated user, including those with Subscriber roles, to trigger the actio...
EUVD-2026-112859
MasterStudy LMS plugin for WordPress before 3.7.50 contains a missing authorization vulnerability that allows any authenticated user, including Subscribers, to trigger the stmlmssendtestemailajax AJAX action without capability or nonce validation. Attackers can invoke this handler directly or via...
CVE-2026-80069 MasterStudy LMS WordPress Plugin < 3.7.50 Missing Authorization via stm_lms_send_test_email_ajax
MasterStudy LMS plugin for WordPress before 3.7.50 contains a missing authorization vulnerability that allows any authenticated user, including Subscribers, to trigger the stmlmssendtestemailajax AJAX action without capability or nonce validation. Attackers can invoke this handler directly or via...
CVE-2022-1386-FusionBuilder-SSRF
CVE-2022-1386 – Fusion Builder Example: python3 exploitcve20221386.py https://vulnerable.site https://abc123.oast.fun Use Interact.sh or Burp Collaborator to receive the callback. 📋 Sample Output Fetching nonce from target... Sending SSRF payload to https://abc123.oast.fun... + SSRF confirmed:...
CVE-2026-80067
The MasterStudy LMS plugin for WordPress versions before 3.7.50 is vulnerable to a path traversal vulnerability. The issue originates from the stm_lms_import_sample_data AJAX action, where the stm_lms_step parameter lacks sufficient capability checks and nonce verification. This allows authentica...
EUVD-2026-112926
MasterStudy LMS plugin for WordPress before 3.7.50 contains a path traversal vulnerability that allows authenticated Subscriber-level users to import arbitrary WXR XML files by supplying directory traversal sequences in the stmlmsstep parameter passed to the stmlmsimportsampledata AJAX action,...
CVE-2026-80067 MasterStudy LMS WordPress Plugin < 3.7.50 Path Traversal via stm_lms_step Parameter
MasterStudy LMS plugin for WordPress before 3.7.50 contains a path traversal vulnerability that allows authenticated Subscriber-level users to import arbitrary WXR XML files by supplying directory traversal sequences in the stmlmsstep parameter passed to the stmlmsimportsampledata AJAX action,...
WordPress JetEngine plugin <= 3.9.0.1 - SQL Injection vulnerability
SQL Injection vulnerability discovered by nh4tvd in WordPress Plugin JetEngine versions = 3.9.0.1...
CVE-2026-6960
CVE-2026-6960 — BookingPress Pro ≤ 5.6 | Unauthenticated Arbitrary File Upload Research by: Atomic Edge Severity: Critical | CVSS: 9.8 | Auth Required: None ⚠️ v2 — Technical corrections applied based on community feedback. See Changelog for details. Overview A critical unauthenticated arbitrary...
WordPress Brave plugin <= 0.8.8 - Content Injection vulnerability
Content Injection vulnerability discovered by Peter Tang in WordPress Plugin Brave versions = 0.8.8...
CVE-2024-6624
CVE-2024-6624 | JSON API User = 3.9.3 - Unauthenticated Privilege Escalation This is a Python script that exploits the CVE-2024-6624 vulnerability in the JSON API User = 3.9.3 plugin for WordPress. This tool allows unauthenticated attackers to register new users and escalate their privileges to...
WordPress Kali Forms plugin <= 2.4.27 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by nizar yart D3dC0d in WordPress Plugin Kali Forms versions = 2.4.27...
WordPress User Registration plugin <= 5.3.0 - Content Injection vulnerability
Content Injection vulnerability discovered by Filip Kowalski in WordPress Plugin User Registration versions = 5.3.0...
WordPress JetSmartFilters plugin <= 3.8.6.2 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by nh4tvd in WordPress Plugin JetSmartFilters versions = 3.8.6.2...
WP-CVE-2025-6934
WP-CVE-2025-6934 | Opal Estate Pro = 1.7.5 - Unauthenticated Privilege Escalation This is a Python script that exploits the CVE-2025-6934 vulnerability in the Opal Estate Pro = 1.7.5 plugin for WordPress. This tool allows unauthenticated attackers to register new users and escalate their privileg...
CVE-2026-63030
CVE-2026-63030 - WordPress REST API Batch Route Confusion PoC Description Proof-of-concept exploit for CVE-2026-63030, a pre-authentication vulnerability in WordPress versions 6.9.0 through 7.0.1. It chains: REST API batch route confusion validation vs dispatch mismatch SQL injection via...
CVE-2024-4875
CVE-2024-4875 HT Mega – Absolute Addons For Elementor = 2.5.2 - Missing Authorization to Options Update Description: The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to unauthorized modification of data|loss of data due to a missing capability check on the...
CVE-2021-34646
CVE-2021-34646 PoC for CVE-2021-34646 Exploit Title: WordPress Plugin WooCommerce Booster Plugin 5.4.3 - Authentication Bypass Date: 2021-09-16 Exploit Author: Sebastian Kriesten 0xB455 Contact: https://twitter.com/0xB455 Affected Plugin: Booster for WooCommerce Plugin Slug: woocommerce-jetpack...
CVE-2024-6460
CVE-2024-6460 Grow by Tradedoubler 2.0.22 - Unauthenticated LFI Usage usage: CVE-2024-6460.py -h -u URL -U USERNAME -P PASSWORD -c COMPONENT Grow by Tradedoubler 2.0.22 - Unauthenticated LFI options: -h, --help show this help message and exit -u URL, --url URL Target WordPress site URL e.g.,...
CVE-2024-12270
CVE-2024-12270 Beautiful Taxonomy Filters = 5.1 AND string error-based - WHERE, HAVING, ORDER BY or GROUP BY clause UPDATEXML' injectable POST parameter 'selects0term' is vulnerable. Do you want to keep testing the others if any? y/N n Ghauri identified the following injection points with a total...