JOIN TELEGRAM CHANNEL
WordPress Exploits
DATABASE
Litespeed Cache WordPress Plugin 6.3.0.1 – Privilege Escalation
CVE-2024-28000 php VIEW
WordPress User Registration & Membership Plugin 4.1.2 – Authentication Bypass
CVE-2025-2594 multiple VIEW
WordPress Frontend Login and Registration Blocks Plugin 1.0.7 – Privilege Escalation
CVE-2025-3605 multiple VIEW
WordPress Depicter Plugin 3.6.1 – SQL Injection
CVE-2025-2011 multiple VIEW
WordPress Core 6.2 – Directory Traversal
CVE-2023-2745 php VIEW
LearnPress WordPress LMS Plugin 4.2.7 – SQL Injection
CVE-2024-8522 php VIEW
WordPress User Registration & Membership Plugin 4.1.1 – Unauthenticated Privilege Escalation
multiple VIEW
WordPress Theme XStore 9.3.8 – SQLi
CVE-2024-33559 php VIEW
WordPress Plugin Background Image Cropper v1.2 – Remote Code Execution
php VIEW
WordPress Plugin Playlist for Youtube 1.32 – Stored Cross-Site Scripting (XSS)
php VIEW
WordPress Plugin WP Video Playlist 1.1.1 – Stored Cross-Site Scripting (XSS)
php VIEW
WordPress Theme Travelscape v1.0.3 – Arbitrary File Upload
php VIEW
WordPress Plugin Alemha Watermarker 1.3.1 – Stored Cross-Site Scripting (XSS)
php VIEW
WordPress Plugin – Membership For WooCommerce < v2.1.7 - Arbitrary File Upload to Shell (Unauthenticated)
CVE-2022-4395 php VIEW
WordPress File Upload Plugin < 4.23.3 - Stored XSS
php VIEW
WordPress Plugin Duplicator < 1.5.7.1 - Unauthenticated Sensitive Data Exposure to Account Takeover
php VIEW
Neontext WordPress Plugin – Stored XSS
php VIEW
WordPress Plugin Admin Bar & Dashboard Access Control Version: 1.2.8 – _Dashboard Redirect_ field Stored Cross-Site Scripting (XSS)
php VIEW
WordPress Plugin Canto < 3.0.5 - Remote File Inclusion (RFI) and Remote Code Execution (RCE)
php VIEW
WordPress Seotheme – Remote Code Execution Unauthenticated
php VIEW
WordPress Augmented-Reality – Remote Code Execution Unauthenticated
php VIEW
Media Library Assistant WordPress Plugin – RCE and LFI
CVE-2023-4634 php VIEW
WordPress Plugin Masterstudy LMS – 3.0.17 – Unauthenticated Instructor Account Creation
CVE-2023-4278 php VIEW
WordPress Sonaar Music Plugin 4.7 – Stored XSS
php VIEW
WordPress Plugin Elementor 3.5.5 – Iframe Injection
CVE-2022-4953 php VIEW
WordPress Plugin EventON Calendar 4.4 – Unauthenticated Event Access
CVE-2023-2796 php VIEW
WordPress Plugin EventON Calendar 4.4 – Unauthenticated Post Access via IDOR
CVE-2023-3219 php VIEW
WordPress Plugin Forminator 1.24.6 – Unauthenticated Remote Command Execution
php VIEW
WordPress Plugin Ninja Forms 3.6.25 – Reflected XSS
CVE-2023-37979 php VIEW
WordPress adivaha Travel Plugin 2.3 – Reflected XSS
php VIEW
WordPress adivaha Travel Plugin 2.3 – SQL Injection
php VIEW
WordPress Plugin AN_Gradebook 5.0.1 – SQLi
CVE-2023-2636 php VIEW
WordPress Theme Medic v1.0.0 – Weak Password Recovery Mechanism for Forgotten Password
CVE-2020-11027 php VIEW
WordPress Theme Workreap 2.2.2 – Unauthenticated Upload Leading to Remote Code Execution
CVE-2021-24499 php VIEW
WordPress Plugin Backup Migration 1.2.8 – Unauthenticated Database Backup
php VIEW
Paid Memberships Pro v2.9.8 (WordPress Plugin) – Unauthenticated SQL Injection
CVE-2023-23488 php VIEW
NEX-Forms WordPress plugin < 7.9.7 - Authenticated SQLi
CVE-2022-3142 php VIEW
Translatepress Multilinugal WordPress plugin < 2.3.3 - Authenticated SQL Injection
CVE-2022-3141 php VIEW