Contributor — PoC Archivehttps://poc.intelseclab.com/tags/contributor/Latest proof-of-concept entries.Hugoen-usSun, 05 Jul 2026 00:00:00 +0000Spectra Gutenberg Blocks Authenticated Remote Code Execution — CVE-2026-7465https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-7465-poc/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-7465-poc/Critical severity (CVSS 8.8) — web · CVE-2026-7465. Status: PoC. Affects: Spectra (Gutenberg blocks plugin for WordPress, uagb/ block namespace). Tags: wordpress, spectra, gutenberg, rce, arbitrary-function-call, uagb, contributor.webCriticalwordpressspectragutenbergrcearbitrary-function-calluagbcontributorElementsKit Elementor Addons Authenticated Stored XSS via REST API (CVE-2026-2600)https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-2600-elementskit-stored-xss/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-2600-elementskit-stored-xss/Medium severity (CVSS 6.4) — web · CVE-2026-2600. Status: Weaponized. Affects: ElementsKit Elementor Addons (WordPress plugin). Tags: wordpress, elementor, stored-xss, rest-api, privilege-escalation, contributor, plugin, cwe-79.webMediumwordpresselementorstored-xssrest-apiprivilege-escalationcontributorplugincwe-79