773 PoCs | 119 CISA KEV

tag

Mass-Scanning

WooCommerce Wholesale Lead Capture — Unauthenticated Privilege Escalation & File Upload RCE (CVE-2026-27542 / CVE-2026-27540)

CVE-2026-27542 (bundled with CVE-2026-27540) web Unverified

CVE-2026-27542webCRITICAL 9.8Unverified2026-07-05midi-Synth WordPress Plugin Arbitrary File Upload (CVE-2026-1306)

CVE-2026-1306 web Unverified

CVE-2026-1306webCRITICAL 9.8Unverified2026-07-05