WordPress GiveWP plugin <= 4.16.7.1 - Remote Code Execution (RCE) vulnerability
CVSS Skor
10.0
EPSS İhtimal
%2.3
Risk Skoru
0.2
Yayın
1 ay önce
Public Exploits · GitHub ve Metasploit Intelligence
Bu sekme NVD’nin exploit olarak etiketlediği kaynakları, CVE kimliğiyle eşleşen GitHub depolarını ve Rapid7 Metasploit Framework modüllerini tarar. Yalnızca bulunan gerçek kaynak bağlantıları gösterilir.
Nuclei: GiveWP <= 4.16.7.1 - Remote Code Execution
⚡ GHOSTLYR00T - CVE-2026-82222 GiveWP RCE Exploit Framework Unauthenticated RCE on GiveWP <= 4.16.7.1. Mass scanning, auto-detection (form/gateway/amount), multi-threading, JSON/TXT output, interactive shell. CVSS 9.8 Critical. ⚠️ Authorized testing only.
0xCyp1337/CVE-2026-82222-MassExploit
GiveWP <= 4.16.7.1 Unauthenticated PHP Object Injection → RCE
Authorized Docker lab and clean PoC for validating CVE-2026-82222 RCE in GiveWP 4.16.5.1 and the 4.16.7.2 fix.
İlgili Benzer Açıklar
WordPress Advanced Post Manager plugin <= 4.5.5 - PHP Object Injection vulnerability
WordPress The Events Calendar plugin <= 6.17.4 - PHP Object Injection vulnerability
WordPress GiveWP plugin <= 4.16.9 - Broken Authentication vulnerability
WordPress Event Tickets plugin <= 5.29.5 - SQL Injection vulnerability
WordPress GiveWP plugin <= 4.16.8.1 - Payment Bypass vulnerability
WordPress WPComplete plugin <= 2.9.5.6 - Cross Site Scripting (XSS) vulnerability
Bu açığı API ile alın
Etkilenen ürünler, sürüm aralıkları, istismar durumu ve yama bilgisi tek istekte; ücretsiz anahtarla.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.enginteksut.com.tr/api/v1/intel/cves/CVE-2026-82222"