WordPress Login with Phone Number插件反射型跨站脚本漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

Related Vulnerabilities

• PoCXboot /xboot/common/swagger/login 服务器端请求伪造漏洞
• PoCCVE-2026-87902: WordPress Core - PHP Template Path Traversal
• PoCCVE-2026-80099: Newfold WordPress Plugins - Unauthenticated Admin Bypass via Empty HMAC Secret
• PoCCVE-2026-84434: WordPress Gravity Forms Plugin <=3.1.0.4 - Unauthenticated Arbitrary File Upload
• PoCwordpress-click2shell: WordPress Click2Shell Theme Preview Selector Injection
• PoCjohnson-controls-default-login: Johnson Controls Frick Quantum HD Compressors - Default Login
• Flowise /api/v1/loginmethod 未授权访问漏洞（CVE-2026-56270）
• Wordpress Events Calendar插件敏感信息泄露漏洞（CVE-2025-9808）
• WordPress Directory Kit 插件敏感信息泄露漏洞(CVE-2025-13920)
• PoCCVE-2025-14998: Branda WordPress plugin - Privilege Escalation
• PoClitellm-default-login: LiteLLM - Default Login
• PoCCVE-2022-1281: Photo Gallery WordPress v1.6.3 - SQL Injection
• PoCCVE-2026-12394: WordPress MemberGlut < 1.1.5 - Unauthenticated Privilege Escalation