Tools

abraxas/cve-2026-11387-woocommerce-sms-otp

SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery plugin for WordPress; SMS Alert <3.9.6; Unauthenticated Privilege Escalation…

pysectools/cve-2026-3629

WordPress Privilege Escalation Checker

martinpham/copy-fail-cve-2026-31431-php

Proof-of-concept exploit for CVE-2026-31431 (Copy Fail) in PHP, demonstrating privilege escalation to root on vulnerable systems.

whiteov3rflow/cve-2025-2304-poc

Proof-of-concept exploit for CVE-2025-2304, a mass assignment vulnerability in Camaleon CMS < 2.9.1 allowing authenticated privilege escalation to…

randomrobbiebf/cve-2024-49328

WP REST API FNS <= 1.0.0 - Privilege Escalation

drkim-dev/cve-2026-30862

Proof-of-concept demonstrating stored XSS in Appsmith Table Widget leading to vertical privilege escalation and full admin takeover via XSS-to-CSRF…

johenlastgen-jlg/cve-2025-6325_cve-2025-6327

Python PoC validating CVE-2025-6325 unauthenticated privilege escalation and CVE-2025-6327 arbitrary file upload RCE in King Addons for Elementor <=…

zycoder0day/cve-2026-8732

Automated 8-phase exploit for CVE-2026-8732, an unauthenticated privilege escalation in WP Maps Pro ≤ 6.1.0. Uses multiprocessing and asyncio to scan…

estebanzarate/cve-2025-2304-camaleon-cms-mass-assignment-privilege-escalation-poc

Proof-of-concept exploit for a mass assignment privilege escalation vulnerability in Camaleon CMS < 2.9.1. Authenticated low-privilege users can…

rxerium/cve-2024-32444

An unauthenticated privilege escalation problem tracked as CVE-2024-32444 (CVSS score: 9.8).

sastraadiwiguna-purpleeliteteaming/dissecting-cve-2026-0628-chromium-extension-privilege-escalation

Technical dissection of CVE-2026-0628, a Chromium WebView privilege escalation vulnerability, including root cause analysis, PoC exploit, detection…

m3m0o/portabilis-ieducar-user-type-privilege-escalation

Proof of concept for exploitation of the vulnerability described in CVE-2025-11554, which concerns the possibility of a privilege escalation through…

azureadtrent/cve-2025-2304_poc

CVE-2025-2304 POC - Camaleon CMS Privilege Escalation

cyberleelawat/cve-2025-40602

CVE-2025-40602 is a local privilege escalation vulnerability in the appliance management console (AMC) of SonicWall Secure Mobile Access (SMA) 1000…

ssssuperx/cve-2024-28000

CVE-2024-28000 LiteSpeed Cache Privilege Escalation Scan&Exp

rootharpy/cve-2025-39459-nuclei-template

The Real Estate 7 WordPress theme is vulnerable to Privilege Escalation in all versions up to, and including, 3.5.2. This makes it possible for…

ubaydev/cve-2026-11551-poc

Proof-of-concept exploit for CVE-2026-11551, an unauthenticated privilege escalation vulnerability in the Branda White Label plugin for WordPress,…