wphardening

WPHardening Fortify the security of any WordPress installation. ❮ NOTE ❯ This tool releases new versions on a regular basis. Make sure to update your dependencies frequently to get the latest version. Check out the changelog or CHANGELOG.md to learn about the new features. Installation Installing...

wp-allowed-hosts

WP Allowed Hosts This plugin has been created after the vulnerability known as CVE-2017-8295 has been disclosed, this plugin will protect you from that attack with no hassle, just add simple line to your wp-config.php . Installation Just download the plugin from here and upload it to your site...

wp-mail-masta-exploit

WordPress Plugin Mail Masta 1.0 - CVE-2016-10956 Exploit This script exploits the CVE-2016-10956 vulnerability in WordPress Plugin Mail Masta 1.0 to extract credentials from wp-config.php. How to Use 1. Clone the repository: git clone https://github.com/Hakchoven/wp-mail-masta-exploit.git 2...

CVE-2024-6460

CVE-2024-6460 Grow by Tradedoubler 2.0.22 - Unauthenticated LFI Usage usage: CVE-2024-6460.py -h -u URL -U USERNAME -P PASSWORD -c COMPONENT Grow by Tradedoubler 2.0.22 - Unauthenticated LFI options: -h, --help show this help message and exit -u URL, --url URL Target WordPress site URL e.g.,...

CVE-2023-6972-Exploit-Arbitrary-File-Deletion

CVE-2023-6972 Proof of Concept PoC Description This repository contains a Proof of Concept PoC exploit for CVE-2023-6972. The vulnerability allows for Unauthenticated Arbitrary File Deletion AFD in Wordpress Backup Migration Plugin Note: A comprehensive technical breakdown, full case study, and...

VulnCheck KEV: CVE-2022-0541

The flo-launch WordPress plugin before 2.4.1 injects code into wp-config.php when creating a cloned site, allowing any attacker to initiate a new site install by setting the flocustomtableprefix cookie to an arbitrary value...

wordpress-true-ranker-cve-2021-39312

WordPress Plugin The True Ranker 2.2.2 - Arbitrary File Read Python proof-of-concept for CVE-2021-39312 , affecting The True Ranker seo-local-rank WordPress plugin versions ≤ 2.2.2. Vulnerability Details CVE: CVE-2021-39312 Type: Arbitrary File Read Affected Plugin: The True Ranker Affected...

CVE-2026-115483

The Everest Forms plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 3.6.3 via the attachentryfiles function. This is due to the function attaching any entry field value whose meta key matches /signature/ to the notification email after only a fileexis...

EUVD-2026-122685

The Everest Forms plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 3.6.3 via the attachentryfiles function. This is due to the function attaching any entry field value whose meta key matches /signature/ to the notification email after only a fileexis...

CVE-2023-47504-POC

CVE-2023-47504 POC Exploit for CVE-2023-47504. According to NIST, this vulnerability should allow unauthenticated users to access functionalities in the Elementor Website Builder Plugin. Based on my research into the vulnerability, and also judging by the URL from Patchstack that describes the...

PT-2026-144586

The Everest Forms plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 3.6.3 via the attach entry files function. This is due to the function attaching any entry field value whose meta key matches /signature / to the notification email after only a file...

CVE-2026-121379 Tournamatch < 4.7.1 - Subscriber+ Arbitrary File Deletion

The Tournamatch WordPress plugin before 4.7.1 does not validate or restrict the path of a previously stored profile or team image before deleting it when a new image is uploaded, allowing users with a role as low as Subscriber to delete arbitrary files on the server, such as wp-config.php, which...

CVE-2026-121379

The Tournamatch WordPress plugin (versions before 4.7.1 ) is vulnerable to an arbitrary file deletion flaw. The plugin fails to validate or restrict the path of a previously stored profile or team image when a new image is uploaded. This allows users with privileges as low as Subscriber to delete...

CVE-2014-125133 NativeChurch WordPress Theme < 1.6.2 Arbitrary File Download via download.php

NativeChurch theme for WordPress before 1.6.2 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files through the file parameter of download.php. Attackers can send GET requests with directory traversal sequences in the file parameter to retrieve...

WordPress Memphis Documents Library path traversal vulnerability

WordPress Memphis Documents Library versions prior to 3.1.6 contain a path traversal vulnerability. This vulnerability stems from path traversal in the mdocs-img-preview parameter. Unauthenticated attackers can send GET requests containing a traversal sequence to mdocsimgpreview in...

Imithemes NativeChurch path traversal vulnerability

Versions prior to 1.6.2 of imithemes NativeChurch contain a path traversal vulnerability. This vulnerability allows unauthenticated attackers to send GET requests containing directory traversal sequences via the file parameter in download.php. As a result, they can download arbitrary files and...

VulnCheck KEV: CVE-2025-10897

The WooCommerce Designer Pro theme for WordPress is vulnerable to arbitrary file read in all versions up to, and including, 1.9.28. This makes it possible for unauthenticated attackers to read arbitrary files on the server, which can expose DB credentials when the wp-config.php file is read...

CVE-2025-1281

CVE-2025-1281 affects the BM Content Builder WordPress plugin in all versions prior to 3.17.1 . The vulnerability stems from insufficient file path validation in the ux_cb_remove_layout_ajax() and ux_cb_tools_export_ajax() functions, allowing an authenticated attacker with Subscriber-level access...

Exploit for Improper Restriction of XML External Entity Reference in Wordpress

PublicExploit-1--Wordpress-CVE-2021-29447 CVE-2021-29447 is a...

PT-2026-89754

The UsersWP plugin for WordPress is vulnerable to Arbitrary File Deletion in versions up to, and including, 1.2.70 via the upload file remove AJAX handler. The plugin stores the value of an account 'file' form field taken directly from $ POST when no real $ FILES upload is provided process accoun...