Every new exploit,
on the radar.

Exploit For SOPlanning 1.52.01 (Simple Online Planning Tool) - Remote Code Execution (RCE) (Authenticated)

Popup – MailChimp, GetResponse and ActiveCampaign Intergrations <= 3.2.6 - Unauthenticated SQL Injection

A tool to exploit the CVE-2024-56512 vulnerability in Apache NiFi, which allows unauthorized access to sensitive data through improperly secured APIs.

ALL In One Custom Login Page <= 7.1.1 - Missing Authorization to Authenticated (Subscriber+)Privilege Escalation

PoC of CVE-2025-22352

PoC of CVE-2024-56289

PoC of CVE-2024-56278

Vayu Blocks – Gutenberg Blocks for WordPress & WooCommerce <= 1.1.1 - Missing Authorization to Unauthenticated Arbitrary Plugin Installation/Activation

This is POC for CVE-2024-2667 (InstaWP Connect – 1-click WP Staging & Migration <= 0.1.0.22 - Unauthenticated Arbitrary File Upload)

Powershell Script to build token for CVE-2019-1619

Critical Site Intel <= 1.0 - Unauthenticated SQL Injection

eTemplates <= 0.2.1 - Unauthenticated SQL Injection

Nabz Image Gallery <= v1.00 - Unauthenticated SQL Injection

Share Buttons – Social Media <= 1.0.2 - Unauthenticated SQL Injection

Navayan CSV Export <= 1.0.9 - Unauthenticated SQL Injection

Sogrid <= 1.5.6 - Unauthenticated Local File Inclusion

CVE-2017-8056 XML-RPC Exploit DoS

CVE-2025-22912

SimplCommerce is affected by a Broken Access Control vulnerability in the review system, allowing unauthorized users to post reviews for products they have not…

SimplCommerce is affected by a race condition vulnerability in the checkout logic, allowing multiple users to purchase more products than are in stock via simu…