Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Buy Us a Coffee

Security Intel Hub 83420+

Curated security advisories, vulnerability analyses, and exploit write-ups — auto-cleaned and translated to English. Updated continuously.

254

Sources connected

136

Sources online now

602

New intel in 24h

83,420+

AI-processed intel

Continuous monitoring and AI processing Monitor intel

Explore All intel 🔗 Supply-chain reports 438 Structured malicious-package library

Filter

KEV only

Verified PoC

CVSS 5.3

SQL Injection in Advanced Fields Plugin: POC & Exploit Code

plugins.trac.wordpress.org · 2026-10-28

# Vulnerability Summary ## Vulnerability Overview - **Vulnerability Type**: SQL Injection - **Affected File**: `wp-content/plugins/advanced-fields/fields/field-date-content-style.php` - **Vulnerabilit…

CVSS 5.4

PHP phpinfo() Sensitive Information Disclosure: Mitigation and Detection Guide

plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview This vulnerability involves the `phpinfo()` function potentially leaking sensitive information under specific configurations. When `phpinfo()` is invoked, improper server co…

CVSS 5.4

SQL Injection in WP-PostViews <=1.3.0: Analysis, POC, and Mitigation

plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview This vulnerability involves an SQL injection flaw in the WordPress plugin "WP-PostViews" in version 1.3.0 and earlier. Attackers can craft specific URL requests to exploit t…

CVSS 6.3

WordPress WP-PostViews Pre-1.3.2 SQL Injection Vulnerability with POC and Exploit

plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview This vulnerability affects multiple versions of the WordPress plugin "WP-PostViews" (versions 1.3.1 and earlier) and involves an SQL injection flaw. Attackers can craft spec…

CVSS 5.4

Changestep Plugin CVE-2024-4341 Arbitrary File Upload RCE Vulnerability and POC

plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview - **Vulnerability ID**: CVE-2024-4341 - **Vulnerability Type**: Arbitrary File Upload Vulnerability - **Description**: This vulnerability allows attackers to upload arbitrar…

CVSS 6.3

php-fpm request_terminate_timeout Misconfiguration DoS Vulnerability Analysis and Fix

plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview This vulnerability involves the `request_terminate_timeout` parameter in the `php-fpm.conf` configuration file of `php-fpm`. When this parameter is set to an extremely large…

Premium intel

CVSS 6.3

Spring Framework 5.3.18 Arbitrary File Read Vulnerability Analysis and POC

plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview This vulnerability affects the `org.springframework.web.servlet.resource.ResourceHttpRequestHandler` class in Spring Framework version 5.3.18. Attackers can craft specific H…

CVSS 6.3

WordPress Beyondify Tags 1.3.1 RCE Vulnerability Analysis and POC

plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview This vulnerability exists in version `1.3.1` of the WordPress plugin `Beyondify Tags`, specifically within the file `Modules/ModelLibrary/Links/RedirectManager/RedirectManag…

CVSS 5.3

SQL Injection in PayPal Braintree for WooCommerce Plugin with POC

plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview This screenshot details a vulnerability in the WordPress plugin named "PayPal Braintree for WooCommerce". The vulnerability type is SQL Injection, affecting version 1.7.0 an…

CVSS 6.5

WordPress wp-inventory-manager 2.3.5 SQL Injection Vulnerability Analysis and Exploit

plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview This vulnerability exists in the `wp-inventory-manager/tags/2.3.5/includes/wp-inventory-manager/class.php` file of the WordPress plugin `wp-inventory-manager`. The vulnerabi…

CVSS 5.3

PayPal Brasil para WooCommerce Unauth Plugin Activation Vulnerability Analysis with POC

plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview This vulnerability exists in the `api/class-apipaypal-brasil-ppp-activate.php` file of the `paypal-brasil-para-woocommerce` plugin. An attacker can craft specific requests t…

CVSS 5.3

WordPress paypal-brasil-para-woocommerce Arbitrary File Upload Vulnerability Analysis

plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview The screenshot displays the source code file `api/class-paypal-brasil-local-checkout-activate.php` of a WordPress plugin named `paypal-brasil-para-woocommerce`. This file co…

CVSS 6.5

WP Inventory Manager 2.5.1 Arbitrary File Read Vulnerability Analysis and POC

plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview This vulnerability exists in the file `wp-content/plugins/tags/2.5.1/includes/wpinventory-manager-class.php`, specifically within the `fetcher` method of the `wp_inventory_m…

CVSS 6.5

wp-easy-inventory-manager RCE via Shortcode Injection (v1.2.5.1)

plugins.trac.wordpress.org · 2026-10-28

### 漏洞概述该漏洞存在于 `wp-easy-inventory-manager` 插件的 `wpinventory-shortcodes.php` 文件中，具体在 `wpinventory_product_list` 函数中。攻击者可以通过构造特定的短代码参数，利用 `do_shortcode` 函数执行任意短代码，从而实现远程代码执行（RCE）。 ### 影响范围 - **插件名称**: …

CVSS 6.5

WP Inventory Manager Plugin SQL Injection (CWE-89) POC and Exploit

plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview This vulnerability exists in the `wp-inventory-manager.php` file of the `wp-inventory-manager` plugin, specifically within the `wpim_get_product` function. Attackers can cra…

CVSS 6.5

WP Inventory Managers Pre-Auth Arbitrary File Read Vulnerability with POC

plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview This vulnerability exists in the `wp-inventory-managers` plugin within the file `tag/2.5.0/includes/wp-inventory-managers-class.php`. The vulnerability allows an unauthentic…

CVSS 6.5

WP Inventory Managers 2.5.0 SQL Injection Vulnerability Analysis with POC

plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview This vulnerability exists in version `tag/2.5.0` of the `wp-inventory-managers` plugin, specifically within the file `wp-inventory-managers.php`. The vulnerability type is *…

CVSS 6.1

Apache Tomcat CVE-2024-3837 RCE Vulnerability Analysis and POC

github.com · 2026-10-28

### Vulnerability Overview - **Vulnerability Name**: CVE-2024-3837 - **Vulnerability Type**: Remote Code Execution (RCE) - **Affected Component**: Apache Tomcat - **Vulnerability Description**: This v…

CVSS 6.4

WordPress post-origins v2.0.3 RCE via do_shortcode with POC

plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview This vulnerability exists in version `2.0.3` of the WordPress plugin `post-origins`, specifically within the `PostOrigins\Dashboard.php` file. Attackers can craft specific H…

CVSS 6.4

WordPress Post Types Manager Arbitrary File Upload RCE (v4.0.2) with POC

plugins.trac.wordpress.org · 2026-10-28

### Vulnerability Overview This vulnerability involves an **Arbitrary File Upload** flaw in the WordPress plugin **Post Types Manager** in versions **4.0.2 and below**. Attackers can craft specific re…

All articles are auto-cleaned (markdown extraction + LLM noise removal) and translated to English by our offline pipeline. Source URL is always preserved at the bottom of each article.

Want a specific source covered? Email us — we add new feeds weekly.