Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
85,682cataloged exploits
39,953CVEs with public exploitation
24,696lab-tested
AllReferência 25,887Exploit-DB 24,488GitHub PoC 17,378VulnCheck XDB 9,888Nuclei 4,513Metasploit 3,528✓ verified onlyrecentpopularrisk
4,513 exploits
Nucleicritical
WordPress Super Forms <= 6.3.313 - Arbitrary File Upload
Super Forms <= 6.3.313 - Unauthenticated Arbitrary File Upload via 'data' Parameter (datauristring / value)
63RISK
open ↗Nucleicritical
WordPress User Registration & Membership <= 5.1.2 - Unauthenticated Privilege Escalation
User Registration & Membership <= 5.1.2 - Unauthenticated Privilege Escalation via Membership Registration
68RISK
open ↗Nucleicritical
MountDev AI MCP Connector <= 1.6.1 - Unauthenticated Admin OAuth Token Exposure
MountDev AI MCP Connector for WordPress <= 1.6.1 - Unauthenticated Privilege Escalation via OAuth Authorization Endpoint
63RISK
open ↗Nucleimedium
WP Hotel Booking <= 2.3.2 - Cross-Site Scripting
WP Hotel Booking <= 2.3.2 - Reflected Cross-Site Scripting via 'check_in_date' Parameter
28RISK
open ↗Nucleihigh
WP Responsive Images <= 1.0 - Arbitrary File Read
WP Responsive Images <= 1.0 - Unauthenticated Path Traversal to Arbitrary File Read via src
36RISK
open ↗Nucleicritical
WGDashboard <= 4.3.2 - Authenticated OS Command Injection /etc/passwd Read
WGDashboard Remote Code Execution vulnerability
48RISK
open ↗Nucleicritical
wpForo Forum <= 2.4.14 - SQL Injection
wpForo Forum <= 2.4.14 - Unauthenticated Time-Based SQL Injection
56RISK
open ↗Nucleicritical
User Profile Builder 3.16.4 - Unauthenticated Authentication Bypass
User Profile Builder <= 3.16.4 - Unauthenticated Authentication Bypass via Type Confusion to Administrator Account Takeover via 'username' Parameter
63RISK
open ↗Nucleihigh
Ivanti Endpoint Manager - Authentication Bypass
An authentication bypass in Ivanti Endpoint Manager before version 2024 SU5 allows a remote unauthenticated attacker to
88RISK
open ↗Nucleimedium
Newsletters < 4.16 - Unauthenticated SSRF via SNS Bounce Handler
Newsletters < 4.16 - Unauthenticated Server-Side Request Forgery via SNS Bounce Handler
56RISK
open ↗Nucleimedium
WordPress Link Library < 7.9.4 - Cross-Site Scripting
Link Library < 7.9.4 - Reflected XSS via Thumbs-Rating likelabel
48RISK
open ↗Nucleimedium
WordPress TranslatePress < 3.2.6 - Cross-Site Scripting
TranslatePress <= 3.2.5 - Reflected Cross-Site Scripting
28RISK
open ↗Nucleimedium
Seraphinite Accelerator <= 2.29.18 - Cross-Site Scripting
Seraphinite Accelerator <= 2.29.18 - Reflected Cross-Site Scripting
48RISK
open ↗Nucleihigh
Sonatype Nexus Repository < 3.95.0 - Privilege Escalation via Repository Format Mismatch
Nexus Repository 3 - Authorization Bypass in Repository Creation
36RISK
open ↗Nucleicritical
Advanced Responsive Video Embedder 10.8.7/10.8.8 - Hardcoded Backdoor Authentication Bypass
Advanced Responsive Video Embedder for Rumble, Odysee, YouTube, Vimeo, Kick … 10.8.7 - Unauthenticated Authentication Bypass via Hardcoded Backdoor in '_wplogin' Parameter
43RISK
open ↗Nucleihigh
MindsDB - Remote Code Execution
MindsDB has Path Traversal in /api/files Leading to Remote Code Execution
61RISK
open ↗Nucleicritical
WooCommerce Wholesale Lead Capture <= 2.0.3.1 - Unauthenticated Privilege Escalation
WordPress Woocommerce Wholesale Lead Capture plugin <= 2.0.3.1 - Privilege Escalation vulnerability
63RISK
open ↗Nucleicritical
FOSSBilling 0.5.4-0.7.x - Unauthenticated System API Role Authorization Bypass
FOSSBilling: Improper API Role Validation (system) Enables Unauthenticated Access to Privileged Admin Functions
43RISK
open ↗Nucleimedium
Changedetection.io RSS Single Watch - Cross-Site Scripting
changedetection.io Vulnerable to Reflected XSS in RSS Single Watch Error Response
28RISK
open ↗Nucleihigh
OpenCATS - Command Injection
OpenCATS PHP Code Injection via installer AJAX endpoint
75RISK
open ↗Nucleihigh
Gitea Container Registry - Unauthorized Private Image Access
Gitea Composer package source links use insufficient permission checks
56RISK
open ↗Nucleimedium
Homarr < 1.54.0 - Information Disclosure
Homarr: Unauthenticated Information Disclosure (Integration Metadata Leak)
28RISK
open ↗Nucleihigh
mcp-atlassian < 0.17.0 - Server-Side Request Forgery
MCP Atlassian has SSRF via unvalidated X-Atlassian-Jira-Url / X-Atlassian-Confluence-Url headers
41RISK
open ↗Nucleihigh
Piwigo < 16.3.0 - Unauthenticated Information Disclosure via History API
Piwigo: Unauthenticated Information Disclosure via pwg.history.search API
36RISK
open ↗Nucleihigh
Discourse < 2026.1.2/2026.2.1/2026.3.0-latest.1 - Unauthenticated Private User Action Disclosure
Discourse leaks private topic title and post excerpt via user action API endpoint
36RISK
open ↗Nucleicritical
Nginx UI < 2.3.3 - Information Disclosure
Nginx UI: Unauthenticated Backup Download with Encryption Key Disclosure
68RISK
open ↗Nucleicritical
OpenCTI < 6.9.13 - Authentication Bypass via User Impersonation
OpenCTI privilege escalation and unauthenticated access via default admin account
43RISK
open ↗Nucleicritical
Qwik - Unauthenticated RCE via server$ Deserialization
Qwik affected by unauthenticated RCE via server$ Deserialization
63RISK
open ↗Nucleihigh
NextGEN Gallery <= 4.2.3 - Reflected Cross-Site Scripting
WordPress NextGEN Gallery plugin <= 4.2.3 - Cross Site Scripting (XSS) vulnerability
36RISK
open ↗Nucleimedium
Dify User Enumeration via Observable Response Discrepancy
Dify has a user enumeration issue
28RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.