Skip to content
#

wordpress-cve

Star

Here are 5 public repositories matching this topic...

InMyMine7 / Mephisto

Star 104

A comprehensive WordPress vulnerability scanner and exploitation framework for authorized penetration testing. This tool automatically detects and exploits multiple WordPress security vulnerabilities (CVEs) to help security professionals identify and patch weaknesses.

wordpress-plugin exploit scanner penetration-testing bugbounty cve-scanning exploiter penetration-testing-tools arbitrary-file-upload cves wordpress-auto-exploiter auto-upload-shell wordpress-cve cve-wordpress hacktoolkit
  • Updated Nov 2, 2026
  • Python

tc4dy / CVE-2026-87902-Toolkit

Star 15

CVE-2026-87902 – WordPress Core LFI→RCE Toolkit (CVSS 9.2) - Red/Blue Team suite for WordPress 4.7–7.1.1. | 2 tools: Full Exploit (LFI, PEAR RCE, admin create, webshell, reverse shell, loot, mass scan, stealth) & SafeChecker (version detect, risk audit, JSON report). Use Ethically & Authorized Enviorement, Stay Legal <3

wordpress proof-of-concept exploit toolkit poc toolkits cve wordpress-site cve-scanning exploit-code blue-team redteam wordpress-vulnerability-scanner wordpress-vulnerability-scanning wordpress-vulnerability wordpress-vulnerable wordpress-cve wordpress-vuln wordpress-vulnerability-scan wordpress-vulnerabilities
  • Updated Oct 12, 2026
  • Python

tc4dy / CVE-2026-119977-Toolkit

Star 6

CVE-2026-119977 – WordPress Core Upgrade-Window RCE (CVSS 8.1) | Red/Blue Team Toolkit. Predictable staging dir takeover, wp-config.php promotion, Bait MySQL proof, WAF origin discovery, rate-limited race oracle, admin shell deploy, version triage. Async, CI-tested. Only ethical & authorized use, stay legal.

wordpress proof-of-concept exploit blueteam redteam wordpress-vulnerability-scanner wordpress-core wordpress-vulnerability wordpress-vulnerable wordpress-cve wordpress-vuln wordpress-vulnerability-scan wordpress-vulnerabilities cve-2026-119977
  • Updated Nov 7, 2026
  • Python

tc4dy / CVE-2026-85097-Toolkit

Star 5

CVE-2026-85097 – Bricksforge WordPress Plugin Unauth File Upload to RCE Toolkit (CVSS 10.0) | Red/Blue Team suite for Bricksforge Pro Forms < 3.1.8.9. 2 tools: Full Exploit (polyglot upload, web shell, mass scan, OPSEC, SQLite/JSON output) + SafeChecker (version detect, non-intrusive audit). Ethical & educational use only.

wordpress wordpress-plugin proof-of-concept exploit toolkit wordpress-vulnerability-scanner wordpress-vulnerability wordpress-vulnerable wordpress-cve wordpress-vuln cve-2026-85097
  • Updated Oct 16, 2026
  • Python

Add this topic to your repo

To associate your repository with the wordpress-cve topic, visit your repo's landing page and select "manage topics."

Learn more