386 matches found
WordPress HC Custom WP-Admin URL <=1.4 - Admin Login URL Disclosure
The HC Custom WP-Admin URL WordPress plugin through 1.4 leaks the secret login URL when sending a specific crafted request id: CVE-2022-1595 info: name: WordPress HC Custom WP-Admin URL =1.5 to mitigate the vulnerability. reference: -...
exploit_cve-2021-29447
exploitcve-2021-29447 仅用于教育目的。 此漏洞利用工具旨在方便地从运行 WordPress 5.6.2 和 PHP8 的服务器上获取任何文件。（参见 https://wpscan.com/vulnerability/cbbe6c17-b24e-4be4-8937-c78472a138b5） 你只需要拥有基础的 wp-admin 访问权限以及上传媒体文件的能力。 该漏洞利用会生成一个 .wav 文件载荷，通过 wp-admin 上传。 然后它会利用漏洞利用的后端服务器，让你在控制台上即时获取文件。 完美适用场景：HackTheBox 的机器 - metatwo...
WordPress: Author → stored XSS in wp-admin: unescaped sub-size filename from attachment metadata breaks out of the `src` attribute in `get_media_item()`
A vulnerability was discovered in the WordPress media upload and finalize endpoints. An author could upload a crafted image with a malicious filename, which was then stored verbatim by the endpoint and rendered without proper escaping in the WordPress admin media library. This could allow the...
Exploit for CVE-2025-8489
100-days-challenge-day-21--WP scan WP Scan helped identify co...
CVE-2025-64249
Missing Authorization vulnerability in WP-EXPERTS.IN Protect WP Admin protect-wp-admin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Protect WP Admin: from n/a through = 4.1...
CVE-2025-64249 WordPress Protect WP Admin plugin <= 4.1 - Broken Access Control vulnerability
Missing Authorization vulnerability in WP-EXPERTS.IN Protect WP Admin protect-wp-admin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Protect WP Admin: from n/a through = 4.1...
CVE-2025-64249 WordPress Protect WP Admin plugin <= 4.1 - Broken Access Control vulnerability
Missing Authorization vulnerability in WP-EXPERTS.IN Protect WP Admin protect-wp-admin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Protect WP Admin: from n/a through = 4.1...
CVE-2025-64249
CVE-2025-64249 is a Missing Authorization vulnerability in Protect WP Admin. Wordfence reports it as an unauthenticated privilege escalation / unauthorized access issue affecting Protect WP Admin up to version 4.1; patch status in the report is Patched. No exploitation details are provided in the...
WordPress plugin Protect WP Admin 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...
PT-2025-51397
Name of the Vulnerable Software and Affected Versions Protect WP Admin versions through 4.1 Description An authorization issue exists in Protect WP Admin, allowing exploitation of incorrectly configured access control security levels. Recommendations Update Protect WP Admin to a version newer tha...
WordPress Protect WP Admin plugin <= 4.1 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Legion Hunter in WordPress Plugin Protect WP Admin versions = 4.1...
CVE-2025-58595
Authentication Bypass by Spoofing vulnerability in Saad Iqbal All In One Login change-wp-admin-login allows Identity Spoofing.This issue affects All In One Login: from n/a through = 2.0.8...
CVE-2025-58595
Authentication Bypass by Spoofing vulnerability in Saad Iqbal All In One Login change-wp-admin-login allows Identity Spoofing.This issue affects All In One Login: from n/a through = 2.0.8...
CVE-2025-58595 WordPress All In One Login plugin <= 2.0.8 - Bypass Vulnerability vulnerability
Authentication Bypass by Spoofing vulnerability in Saad Iqbal All In One Login change-wp-admin-login allows Identity Spoofing.This issue affects All In One Login: from n/a through = 2.0.8...
PT-2025-45243
Authentication Bypass by Spoofing vulnerability in Saad Iqbal All In One Login change-wp-admin-login allows Identity Spoofing.This issue affects All In One Login: from n/a through = 2.0.8...
EUVD-2008-0207
Malware in sbrugna...
EUVD-2015-9241
Malware in sbrugna...
EUVD-2019-19265
Malware in sbrugna...