WordPress < 7.0.2 - Facilitated SQL Injection via author__not_in in WP_Query
CVSS Skor
5.9
EPSS İhtimal
%5.3
Risk Skoru
0.6
Yayın
2 ay önce
Public Exploits · GitHub ve Metasploit Intelligence
Bu sekme NVD’nin exploit olarak etiketlediği kaynakları, CVE kimliğiyle eşleşen GitHub depolarını ve Rapid7 Metasploit Framework modüllerini tarar. Yalnızca bulunan gerçek kaynak bağlantıları gösterilir.
0xCyp1337/CVE-2026-63030-CVE-2026-60137-WP2SHELL
CVE-2026-63030 & CVE-2026-60137 RCE chain proof-of-concept
Unauthenticated SQL injection PoC and vulnerable lab environment for WP2Shell (CVE-2026-63030 + CVE-2026-60137) — a WordPress REST API batch route confusion chained into a WP_Query SQL injection. Includes Docker Compose lab setup and a Python exploitation script. For authorized security research only.
Unauthenticated SQL injection PoC and vulnerable lab environment for WP2Shell (CVE-2026-63030 + CVE-2026-60137) — a WordPress REST API batch route confusion chained into a WP_Query SQL injection. Includes Docker Compose lab setup and a Python exploitation script. For authorized security research only.
CVE-2026-63030 + CVE-2026-60137 WordPress Core pre-auth RCE mass exploit
ivanesk315/CVE-2026-60137-and-CVE-2026-63030
wp2shell — WordPress Core Pre-Auth RCE Chain poc for CVE-2026-63030 and CVE-2026-60137
wp2shell (CVE-2026-63030 & CVE-2026-60137) - full RCE chain
TranDongA3/POC-CVE-2026-63030-CVE-2026-60137-
İlgili Benzer Açıklar
Vulnerability in WordPress
WordPress < 7.0.2 - REST API batch-route confusion and SQL injection issue leading to Remote Code Execution
Unrestricted file upload in WordPress
Cross-site scripting in WordPress
WordPress < 6.3.2 is vulnerable to Broken Access Control
WordPress File Manager Plugin Remote Code Execution Vulnerability
Bu açığı API ile alın
Etkilenen ürünler, sürüm aralıkları, istismar durumu ve yama bilgisi tek istekte; ücretsiz anahtarla.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-60137"