

This is a demo for CVE-2024-32002 POC

A submodule for exploiting CVE-2024-32002 vulnerability.


Repo for testing CVE-2024-32002

The Burst Statistics – Privacy-Friendly WordPress Analytics (Google Analytics Alternative) plugin for WordPress is vulnerable to Authentication Bypass




Test


RCE hook


hook repo for cve-2024-32002

CVE-2026-60004 — Gitea/Forgejo Diffpatch Git Hook RCE. Bare clone → post-index-change hook injection. CVSS 9.8 | CWE-94 | Gitea < 1.27.1


Gitea versions 1.1.0 → 1.12.5 allow authenticated users with "May create git hooks" permission to inject arbitrary shell commands into post-receive…