https://poc.intelseclab.com/tags/ajax/Latest proof-of-concept entries.Hugoen-usMon, 06 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-06_cve-2025-12057-waveplayer-webshell-upload/Mon, 06 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-06_cve-2025-12057-waveplayer-webshell-upload/Critical severity (CVSS 9.8) — web · CVE-2025-12057. Status: Weaponized. Affects: WavePlayer (WordPress plugin). Tags: wordpress, waveplayer, arbitrary-file-upload, unauthenticated, rce, webshell, ajax, nonce, php, python.webCriticalwordpresswaveplayerarbitrary-file-uploadunauthenticatedrcewebshellajaxnoncephppythonhttps://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-1937-yaymail-woocommerce-privesc/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-1937-yaymail-woocommerce-privesc/High severity (CVSS 7.2) — web · CVE-2026-1937. Status: Weaponized. Affects: YayMail – WooCommerce Email Customizer plugin for WordPress. Tags: wordpress, woocommerce, plugin, missing-authorization, privilege-escalation, mass-exploitation, ajax.webHighwordpresswoocommercepluginmissing-authorizationprivilege-escalationmass-exploitationajaxhttps://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-5415-wp-captcha-pro-auth-bypass/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-5415-wp-captcha-pro-auth-bypass/High severity (CVSS 8.8) — web · CVE-2026-5415. Status: PoC. Affects: WP Captcha PRO (WordPress plugin, Advanced Google reCAPTCHA). Tags: wordpress, wp-captcha-pro, auth-bypass, privilege-escalation, nonce, ajax, account-takeover, plugin.webHighwordpresswp-captcha-proauth-bypassprivilege-escalationnonceajaxaccount-takeoverpluginhttps://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-12416-wp-password-reset-bypass/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-12416-wp-password-reset-bypass/Critical severity (CVSS 9.8) — web · CVE-2026-12416, CVE-2026-12417. Status: Weaponized. Affects: SignUp & SignIn WordPress plugin (CVE-2026-12417); Invoice Generator WordPress plugin (CVE-2026-12416). Tags: wordpress, wp-plugin, account-takeover, password-reset, auth-bypass, ajax, mass-exploitation.webCriticalwordpresswp-pluginaccount-takeoverpassword-resetauth-bypassajaxmass-exploitationhttps://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-1555-webstack-wp-file-upload-rce/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-1555-webstack-wp-file-upload-rce/Critical severity (CVSS 9.8) — web · CVE-2026-1555. Status: Weaponized. Affects: WebStack theme for WordPress. Tags: wordpress, webstack-theme, arbitrary-file-upload, unauthenticated-rce, webshell, ajax, cwe-434.webCriticalwordpresswebstack-themearbitrary-file-uploadunauthenticated-rcewebshellajaxcwe-434https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-1492-user-registration-membership-privesc/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-1492-user-registration-membership-privesc/Critical severity (CVSS 9.8) — web · CVE-2026-1492. Status: Weaponized. Affects: User Registration & Membership WordPress plugin (Custom Registration Form Builder, Login Form, User Profile, Content Restriction & Membership). Tags: wordpress, privilege-escalation, unauthenticated, ajax, membership-plugin, admin-takeover, cwe-269.webCriticalwordpressprivilege-escalationunauthenticatedajaxmembership-pluginadmin-takeovercwe-269https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-11912-simple-file-list-path-traversal/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-11912-simple-file-list-path-traversal/High severity (CVSS 7.5) — web · CVE-2026-11912. Status: PoC. Affects: Simple File List WordPress plugin. Tags: wordpress, plugin, path-traversal, missing-authorization, unauthenticated, file-deletion, ajax, nonce.webHighwordpresspluginpath-traversalmissing-authorizationunauthenticatedfile-deletionajaxnoncehttps://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-9067-schema-structured-data-file-upload/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-9067-schema-structured-data-file-upload/High severity (CVSS 8.1) — web · CVE-2026-9067. Status: PoC. Affects: Schema & Structured Data for WP & AMP (WordPress plugin, schema-and-structured-data-for-wp). Tags: wordpress, unrestricted-file-upload, cwe-434, ajax, unauthenticated, content-hosting.webHighwordpressunrestricted-file-uploadcwe-434ajaxunauthenticatedcontent-hostinghttps://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-0926-prodigy-commerce-lfi/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-0926-prodigy-commerce-lfi/High severity — web · CVE-2026-0926. Status: PoC. Affects: Prodigy Commerce (WordPress plugin). Tags: wordpress, plugin, prodigy-commerce, lfi, local-file-inclusion, unauthenticated, ajax.webHighwordpresspluginprodigy-commercelfilocal-file-inclusionunauthenticatedajaxhttps://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-24417-openstamanager-sqli-search-dos/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-24417-openstamanager-sqli-search-dos/High severity — web · CVE-2026-24417. Status: PoC. Affects: OpenSTAManager (devcode-it/openstamanager). Tags: sql-injection, time-based-blind, openstamanager, php, denial-of-service, ajax, authenticated.webHighsql-injectiontime-based-blindopenstamanagerphpdenial-of-serviceajaxauthenticatedhttps://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-24416-openstamanager-sqli-article-pricing/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-24416-openstamanager-sqli-article-pricing/High severity — web · CVE-2026-24416. Status: PoC. Affects: OpenSTAManager (devcode-it/openstamanager). Tags: sql-injection, time-based-blind, openstamanager, php, ajax, credential-theft, authenticated.webHighsql-injectiontime-based-blindopenstamanagerphpajaxcredential-theftauthenticatedhttps://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-1306-wp-midi-synth-file-upload/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-1306-wp-midi-synth-file-upload/Critical severity (CVSS 9.8) — web · CVE-2026-1306. Status: Weaponized. Affects: midi-Synth WordPress plugin. Tags: wordpress, wp-plugin, file-upload, cwe-434, webshell, ajax, mass-scanning.webCriticalwordpresswp-pluginfile-uploadcwe-434webshellajaxmass-scanninghttps://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-49083-latepoint-privilege-escalation/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-49083-latepoint-privilege-escalation/High severity (CVSS 8.8) — web · CVE-2026-49083. Status: PoC. Affects: LatePoint Calendar Booking plugin for WordPress. Tags: wordpress, latepoint, privilege-escalation, plugin, ajax, python, authenticated.webHighwordpresslatepointprivilege-escalationpluginajaxpythonauthenticatedhttps://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-0920-lakit-elementor-privesc/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-0920-lakit-elementor-privesc/Critical severity (CVSS 9.8) — web · CVE-2026-0920. Status: Weaponized. Affects: LA-Studio Element Kit for Elementor (WordPress plugin, slug lakit). Tags: wordpress, plugin, elementor, privilege-escalation, admin-takeover, unauthenticated, ajax, wp-ajax.webCriticalwordpresspluginelementorprivilege-escalationadmin-takeoverunauthenticatedajaxwp-ajaxhttps://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-49079-jetsearch-sqli/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-49079-jetsearch-sqli/High severity (CVSS 7.5) — web · CVE-2026-49079. Status: PoC. Affects: JetSearch plugin for WordPress. Tags: wordpress, jetsearch, sql-injection, cwe-89, unauthenticated, ajax, union-based, blind-sqli.webHighwordpressjetsearchsql-injectioncwe-89unauthenticatedajaxunion-basedblind-sqlihttps://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-1657-eventprime-wp-file-upload/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-1657-eventprime-wp-file-upload/Medium severity — web · CVE-2026-1657. Status: PoC. Affects: EventPrime (WordPress plugin). Tags: wordpress, eventprime, arbitrary-file-upload, unauthenticated, ajax, media-library, cwe-434.webMediumwordpresseventprimearbitrary-file-uploadunauthenticatedajaxmedia-librarycwe-434https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-9018-easy-elements-elementor-privesc/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-9018-easy-elements-elementor-privesc/High severity (CVSS 8.8) — web · CVE-2026-9018. Status: PoC. Affects: Easy Elements for Elementor – Addons & Website Templates (easy-elements WordPress plugin). Tags: wordpress, elementor, easy-elements, privilege-escalation, cwe-269, unauthenticated, ajax, wp-capabilities.webHighwordpresselementoreasy-elementsprivilege-escalationcwe-269unauthenticatedajaxwp-capabilitieshttps://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-34036-dolibarr-selectobject-lfi/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-34036-dolibarr-selectobject-lfi/Medium severity — web · CVE-2026-34036. Status: PoC. Affects: Dolibarr ERP/CRM. Tags: dolibarr, lfi, local-file-inclusion, authenticated, crm, ajax, php.webMediumdolibarrlfilocal-file-inclusionauthenticatedcrmajaxphphttps://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-1729-adforest-wp-auth-bypass/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-1729-adforest-wp-auth-bypass/Critical severity — web · CVE-2026-1729. Status: PoC. Affects: AdForest theme for WordPress. Tags: wordpress, adforest-theme, authentication-bypass, otp-login, ajax, admin-takeover, unauthenticated.webCriticalwordpressadforest-themeauthentication-bypassotp-loginajaxadmin-takeoverunauthenticated