PoC Archive PoC Archive

tag

Mass-Scanner

Critical
RestroPress WordPress Plugin Unauthenticated Information Exposure Leading to JWT Forgery / Account Takeover (CVE-2025-9209)
CVE-2025-9209· RestroPress – Online Food Ordering System (WordPress plugin) unpatched
Critical
Langflow Pre-Auth RCE Mass Scanner (CVE-2026-27966)
CVE-2026-27966 (GHSA-3645-fxcv-hqr4)· Langflow (langflow-ai) unpatched
Critical
AI Engine WordPress Plugin Unauthenticated MCP Token Disclosure to Admin Account Creation (CVE-2025-11749)
CVE-2025-11749· AI Engine plugin for WordPress (mwai) unpatched
High
WordPress HT Mega (Absolute Addons for Elementor) Unauthenticated PII Disclosure (CVE-2026-4106)
CVE-2026-4106· HT Mega – Absolute Addons for Elementor (WordPress plugin) unpatched