Robert Wiggins's repositories
CVE-2023-32243
CVE-2023-32243 - Essential Addons for Elementor 5.4.0-5.7.1 - Unauthenticated Privilege Escalation
CVE-2023-2982
WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) <= 7.6.4 - Authentication Bypass
CVE-2023-32117
Integrate Google Drive <= 1.1.99 - Missing Authorization via REST API Endpoints
CVE-2023-2732
MStore API <= 3.9.2 - Authentication Bypass
CVE-2022-0952
Sitemap by click5 < 1.0.36 - Unauthenticated Arbitrary Options Update
super-secret-finder
Burp Plugin for Secret Matching
CVE-2022-3904
CVE-2022-3904 MonsterInsights < 8.9.1 - Stored Cross-Site Scripting via Google Analytics
CVE-2023-2877
Formidable Forms < 6.3.1 - Subscriber+ Remote Code Execution
what-wordpress
Tool to extract all themes and plugins that are shown on the front page of a wordpress site.
wordpress-php-object-helper
Know a plugin has a php object exploit but need to find which lib to use?
CVE-2023-0630
CVE-2023-0630 - Slimstat Analytics < 4.9.3.3 - Subscriber+ SQL Injection
binary-edge-render-extract
Create a datatable output from a binaryedge render scan
CVE-2021-24356
Simple 301 Redirects by BetterLinks - 2.0.0 – 2.0.3 - Subscriber + Arbitrary Plugin Installation
CVE-2021-24647
CVE-2021-24647 Pie Register < 3.7.1.6 - Unauthenticated Arbitrary Login
CVE-2021-25032
PublishPress Capabilities < 2.3.1 - Unauthenticated Arbitrary Options Update to Blog Compromise
CVE-2021-34621
ProfilePress 3.0 - 3.1.3 - Unauthenticated Privilege Escalation
CVE-2022-0439
CVE-2022-0439 - Email Subscribers & Newsletters < 5.3.2 - Subscriber+ Blind SQL injection
CVE-2022-1203
Content Mask < 1.8.4 - Subscriber+ Arbitrary Options Update
CVE-2022-1442
WordPress Plugin Metform <= 2.1.3 - Improper Access Control Allowing Unauthenticated Sensitive Information Disclosure
CVE-2022-45354
Download Monitor <= 4.7.60 - Sensitive Information Exposure via REST API
CVE-2023-36531
LiquidPoll – Advanced Polls for Creators and Brands <= 3.3.68 - Missing Authorization via activate_addon
e-signature-poc
e-signature < 1.5.6.8 - Unauthenticated Remote Code Execution
import-users-from-csv-with-meta
Import Users From CSV with Meta 1.15 - Unauthorised Authenticated Users Export
learning-management-system
Masteriyo - LMS for WordPress <= 1.6.7 - Sensitive Information Exposure
static-file-checker
Checks Djangos /static/staticfiles.json for exposed creds using nuclei
chart-down
Extracts all the chart lists from ChartMuseum
freemius-exploit
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
superset-default
Superset Default Creds Tester