1dayexploit

WordPress - 14 analyses

Core and plugin vulnerabilities in the most widely deployed CMS on the web.

Published work on this topic
2026-09-25 CVE-2026-19949 CVE-2026-19949 Exploit: AIOWM Pre-Auth SQLi PoC
2026-09-24 CVE-2026-87902 CVE-2026-87902 Exploit: WordPress Path Traversal RCE PoC
2026-09-15 CVE-2026-78159 CVE-2026-78159 Exploit: Events Calendar RCE PoC
2026-09-15 CVE-2026-78006 CVE-2026-78006 Exploit: Events Calendar RCE PoC
2026-09-08 CVE-2026-83627 CVE-2026-83627 Exploit: Hummingbird RCE via Log PoC
2026-09-07 CVE-2026-76581 CVE-2026-76581: WPMU DEV Hub SSO Bypass PoC
2026-08-20 CVE-2026-18366 CVE-2026-18366: Events Manager - Privilege Escalation PoC
2026-08-17 CVE-2026-19598 CVE-2026-19598: Pods Auth Bypass - Privilege Escalation PoC
2026-08-17 CVE-2026-28185 CVE-2026-28185: Login with Google Auth Bypass PoC
2026-08-13 CVE-2026-18391 CVE-2026-18391: WooCommerce Subscriptions - RCE PoC
2026-08-10 CVE-2026-13001 CVE-2026-13001: Podlove Podcast Publisher RCE PoC
2026-08-08 CVE-2026-14364 CVE-2026-14364: TrueBooker Auth Bypass PoC
2026-08-07 CVE-2026-64638 CVE-2026-64638: WordPress XSS2Shell Pre-Auth RCE PoC
2026-07-24 CVE-2026-63030 CVE-2026-63030: WordPress wp2shell Pre-Auth RCE PoC

Other topics

remote code execution38authentication bypass19php13authorization bypass9java9path traversal9sql injection8privilege escalation7code injection6denial of service6heap overflow6insecure deserialization5information disclosure5qemu5apache tomcat4go4node.js4python4cross-site scripting4buffer overflow3gitea3gitlab3javascript3