
CVE-2025-6440
Exploit for CVE-2025-6440: unauthenticated arbitrary file upload in WooCommerce Designer Pro WordPress plugin, enabling RCE via malicious PHP upload.

Exploit for CVE-2025-6440: unauthenticated arbitrary file upload in WooCommerce Designer Pro WordPress plugin, enabling RCE via malicious PHP upload.

PoC exploit for PHPSpreadsheet's phar:// deserialization vulnerability, bypassing prohibitWrappers to achieve remote code execution on vulnerable PHP…

PanaceaSoft [all products] 0day exploit

A Path traversal vulnerability in the file upload functionality in tinyfilemanager.php in Tiny File Manager Project's Tiny File Manager <= 2.4.6…


MDJM Event Management <= 1.7.8.3 - Authenticated (Administrator+) Arbitrary File Upload via 'mdjm_email_upload_file' Parameter






My Geo Posts Free <= 1.2 - Unauthenticated PHP Object Injection

Blind SQL Injection to RCE in a PHP open source application

Dolibarr 11.0.3 - Persistent Cross-Site Scripting

CVE-2020-12640: Local PHP File Inclusion via "Plugin Value" in Roundcube Webmail

iCagenda extension for Joomla allows the upload of arbitrary files in the file attachment feature, ultimately resulting in PHP code upload and…

SQL Injection in computer-laboratory-management-system-using-php-and-mysql - LMS - PHP v1.0

CVE-2025-61246: SQL Injection vulnerability PoC in Online Shopping System PHP