Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

79.057exploits catalogados

36.288CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.460Referência 22.910GitHub PoC 14.997VulnCheck XDB 8843Nuclei 4358Metasploit 3489✓ solo verificadosrecientes populares riesgo

4320 exploits

Nucleimedium

WordPress Supsystic Contact Form <1.7.15 - Cross-Site Scripting

CVE-2021-24276—

Contact Form by Supsystic < 1.7.15 - Reflected Cross-Site scripting (XSS)

43RIESGO

abrir ↗

Nucleihigh

WordPress Contact Form 7 <2.3.4 - Arbitrary Nonce Generation

CVE-2021-24278—

Redirection for Contact Form 7 < 2.3.4 - Unauthenticated Arbitrary Nonce Generation

18RIESGO

abrir ↗

Nucleicritical

WordPress Kaswara Modern VC Addons <=3.0.1 - Arbitrary File Upload

CVE-2021-24284—

Kaswara Modern VC Addons <= 3.0.1 - Unauthenticated Arbitrary File Upload

30RIESGO

abrir ↗

Nucleicritical

WordPress Car Seller - Auto Classifieds Script - SQL Injection

CVE-2021-24285—

Car Seller - Auto Classifieds Script <= 2.1.0 - Unauthenticated SQL Injection

23RIESGO

abrir ↗

Nucleimedium

WordPress Plugin Redirect 404 to Parent 1.3.0 - Cross-Site Scripting

CVE-2021-24286—

Redirect 404 to Parent < 1.3.1 - Reflected Cross-Site Scripting (XSS)

43RIESGO

abrir ↗

Nucleimedium

WordPress Select All Categories and Taxonomies <1.3.2 - Cross-Site Scripting

CVE-2021-24287—

Select All Categories and Taxonomies < 1.3.2 - Reflected Cross-Site Scripting (XSS)

43RIESGO

abrir ↗

Nucleimedium

WordPress AcyMailing <7.5.0 - Open Redirect

CVE-2021-24288—

AcyMailing < 7.5.0 - Unauthenticated Open Redirect

18RIESGO

abrir ↗

Nucleimedium

WordPress Photo Gallery by 10Web <1.5.69 - Cross-Site Scripting

CVE-2021-24291—

Photo Gallery < 1.5.69 - Multiple Reflected Cross-Site Scripting (XSS)

23RIESGO

abrir ↗

Nucleihigh

Spam protection, AntiSpam, FireWall by CleanTalk < 5.153.4 - Unauthenticated Blind SQL Injection

CVE-2021-24295—

Time-based Blind SQL Injection in Spam protection, AntiSpam, FireWall by CleanTalk < 5.153.4

18RIESGO

abrir ↗

Nucleimedium

WordPress Simple Giveaways <2.36.2 - Cross-Site Scripting

CVE-2021-24298—

Simple Giveaways < 2.36.2 - Unauthenticated Reflected Cross-Site Scripting (XSS)

18RIESGO

abrir ↗

Nucleimedium

WordPress WooCommerce <1.13.22 - Cross-Site Scripting

CVE-2021-24300—

PickPlugins Product Slider for WooCommerce < 1.13.22 - Reflected Cross-Site Scripting (XSS)

43RIESGO

abrir ↗

Nucleimedium

WordPress Mediumish Theme <=1.0.47 - Cross-Site Scripting

CVE-2021-24316—

Mediumish <= 1.0.47 - Unauthenticated Reflected Cross-Site Scripting (XSS)

18RIESGO

abrir ↗

Nucleimedium

WordPress Bello Directory & Listing Theme <1.6.0 - Cross-Site Scripting

CVE-2021-24320—

Bello < 1.6.0 - Unauthenticated Reflected XSS & XFS

23RIESGO

abrir ↗

Nucleimedium

WordPress Car Repair Services & Auto Mechanic Theme <4.0 - Cross-Site Scripting

CVE-2021-24335—

Car Repair Services < 4.0 - Unauthenticated Reflected XSS & XFS

18RIESGO

abrir ↗

Nucleihigh

WordPress Statistics <13.0.8 - Blind SQL Injection

CVE-2021-24340—

WP Statistics < 13.0.8 - Unauthenticated SQL Injection

23RIESGO

abrir ↗

Nucleimedium

WordPress JNews Theme <8.0.6 - Cross-Site Scripting

CVE-2021-24342—

JNews < 8.0.6 - Reflected Cross-Site Scripting (XSS)

18RIESGO

abrir ↗

Nucleihigh

WordPress SP Project & Document Manager <4.22 - Authenticated Shell Upload

CVE-2021-24347—

SP Project & Document Manager <2 4.22 - Authenticated Shell Upload

30RIESGO

abrir ↗

Nucleimedium

WordPress The Plus Addons for Elementor <4.1.12 - Cross-Site Scripting

CVE-2021-24351—

The Plus Addons for Elementor < 4.1.12 - Reflected Cross-Site Scripting (XSS)

18RIESGO

abrir ↗

Nucleimedium

Plus Addons for Elementor Page Builder < 4.1.10 - Open Redirect

CVE-2021-24358—

The Plus Addons for Elementor Page Builder < 4.1.10 - Open Redirect

18RIESGO

abrir ↗

Nucleimedium

WordPress Jannah Theme <5.4.4 - Cross-Site Scripting

CVE-2021-24364—

Jannah < 5.4.4 - Reflected Cross-Site Scripting (XSS)

18RIESGO

abrir ↗

Nucleicritical

WordPress Fancy Product Designer <4.6.9 - Arbitrary File Upload

CVE-2021-24370—

Fancy Product Designer < 4.6.9 - Unauthenticated Arbitrary File Upload and RCE

30RIESGO

abrir ↗

Nucleimedium

WordPress Pro Real Estate 7 Theme <3.1.1 - Cross-Site Scripting

CVE-2021-24387—

Real Estate 7 < 3.1.1 - Reflected Cross-Site Scripting (XSS)

18RIESGO

abrir ↗

Nucleimedium

WordPress FoodBakery <2.2 - Cross-Site Scripting

CVE-2021-24389—

FoodBakery < 2.2 - Reflected Cross-Site Scripting (XSS)

18RIESGO

abrir ↗

Nucleimedium

WordPress wpForo Forum < 1.9.7 - Open Redirect

CVE-2021-24406—

wpForo Forum < 1.9.7 - Open Redirect

18RIESGO

abrir ↗

Nucleimedium

WordPress Jannah Theme <5.4.5 - Cross-Site Scripting

CVE-2021-24407—

Jannah < 5.4.5 - Reflected Cross-Site Scripting (XSS)

18RIESGO

abrir ↗

Nucleimedium

Prismatic < 2.8 - Cross-Site Scripting

CVE-2021-24409—

Prismatic < 2.8 - Reflected Cross-Site Scripting (XSS)

18RIESGO

abrir ↗

Nucleimedium

WordPress Titan Framework plugin <= 1.12.1 - Cross-Site Scripting

CVE-2021-24435—

Titan Framework <= 1.12.1 - Reflected Cross-Site Scripting (XSS)

18RIESGO

abrir ↗

Nucleimedium

WordPress W3 Total Cache <2.1.4 - Cross-Site Scripting

CVE-2021-24436—

W3 Total Cache < 2.1.4 - Reflected XSS in Extensions Page (Attribute Context)

18RIESGO

abrir ↗

Nucleicritical

Wordpress Polls Widget < 1.5.3 - SQL Injection

CVE-2021-24442—

Poll, Survey, Questionnaire and Voting system < 1.5.3 - Unauthenticated Blind SQL Injection

30RIESGO

abrir ↗

Nucleimedium

WordPress W3 Total Cache <2.1.5 - Cross-Site Scripting

CVE-2021-24452—

W3 Total Cache < 2.1.5 - Reflected XSS in Extensions Page (JS Context)

18RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.