Tools

schmidalex/nex-forms_sql-injection-cve-2023-2114

Quick Review about the SQL-Injection in the NEX-Forms Plugin for WordPress

webarx-security/wpbullet

A static code analysis for WordPress (and PHP)

ebrasha/abdal-cve-2026-63030

Abdal CVE-2026-63030 is a professional WordPress vulnerability scanner designed to detect exposure to CVE-2026-63030 through version analysis and…

intrinsec/comission

White-box CMS security scanner that audits core, plugin, and theme versions, detects unauthorized modifications, and cross-references known…

stealthcopter/wordpress-hacking

A collection of useful resources for hacking WordPress and it's plugins and themes

sijiahi/wordpress_cve-2019-9787_defense

This is a recurrence of cve-2019-9787 on Wordpress and a hash-based defense.

djayagit/cve-2024-5326-poc

CVE-2024-5326 Post Grid Gutenberg Blocks and WordPress Blog Plugin – PostX <= 4.1.2 - Missing Authorization to Arbitrary Options Update

d0n601/wp-mhn

Integrates your Modern Honeypot Network Server and Wordpress Blog via MHN's REST API and WP's shortcodes

cyb0r9/config-exploiter

Automated tool to dump config.php files from vulnerable Joomla and WordPress websites using known exploit modules (com_joomanager, revslider).

thatonesecguy/wordpress-vulnerability-identification-scripts

Identifies domains which run WordPress and tests against vulnerabilities (CVE-2023-32243) / #VU76395 / etc...

b-abderrahmane/cve-2021-29447-poc

Automates exploitation of CVE-2021-29447 in WordPress media upload to extract files via XXE, generating payloads and running an HTTP server for…

cve-2024/cve-2024-5326-poc

Proof-of-concept exploit for CVE-2024-5326, a missing authorization vulnerability in the PostX WordPress plugin allowing authenticated attackers to…

fimtow/cve-2021-24750

Demonstration of the WP Visitor Statistics plugin exploit

owasp/wpbullet

Static code analysis scanner for WordPress plugins and themes. Detects vulnerabilities like XSS and SQL injection via modular, extensible…

wiseep/cve-2025-5287

Wordpress likes and dislikes add-on - SQL Injection

johnlodan/wp2shell-rce

WordPress CVE-2026-63030 and CVE-2026-60137 security tool for detecting exposure to the WP2Shell pre-authentication RCE chain.

pushkarup/cve-2023-5360

The Royal Elementor Addons and Templates WordPress plugin before 1.3.79 does not properly validate uploaded files, which could allow unauthenticated…