Daily Writeups
@Daily_Writeups
3.57K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.57K subscribers
Daily Writeups
⤷ Title: Understanding the WordPress wp2shell Attack
════════════════════════
𐀪 Author: Hitakshi Parmar
════════════════════════
ⴵ Time: Wed, 22 Jul 2026 08:03:33 GMT
════════════════════════
⌗ Tags: #wordpress_security #vulnerability_management #cybersecurity #threat_analysis #ethical_hacking
Medium
Understanding the WordPress wp2shell Attack
Cybersecurity is constantly evolving, and attackers are always looking for new ways to exploit software vulnerabilities. One recent example…
33 views
Daily Writeups
⤷ Title: 600K Sites at Risk: Ninja Forms Stored XSS Flaw CVE-2026-65048 Hits CVSS 9.3
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 23 Jul 2026 01:00:16 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_65048 #CVE_2026_65049 #CVE_2026_65050 #CVE_2026_65052 #Ninja Forms #Stored XSS #WordPress Plugin
Daily CyberSecurity
600K Sites at Risk: Ninja Forms Stored XSS Flaw CVE-2026-65048 Hits CVSS 9.3
TL;DR Researchers disclosed four flaws in the Ninja Forms WordPress plugin, which runs on more than 600,000 sites. The worst is a Ninja Forms vulnerability tracked as CVE-2026-65048, an unauthenti…
27 views
Daily Writeups
⤷ Title: WP2Shell: The WordPress Core Bug Hackers Are Already Exploiting
════════════════════════
𐀪 Author: Ajekigbe Michael. A
════════════════════════
ⴵ Time: Thu, 23 Jul 2026 07:45:40 GMT
════════════════════════
⌗ Tags: #infosec #web_development #cybersecurity #website_security #wordpress
Medium
WP2Shell: The WordPress Core Bug Hackers Are Already Exploiting
Full WordPress site Takeover with no login needed.
13 views
Daily Writeups
⤷ Title: WP2Shell (CVE-2026–63030): The WordPress Core Bug That Let Anyone Become Admin
════════════════════════
𐀪 Author: Mr. Spider
════════════════════════
ⴵ Time: Thu, 23 Jul 2026 16:49:49 GMT
════════════════════════
⌗ Tags: #wordpress #rce #wp2shell #vulnerability #cve_2026_63030
Medium
WP2Shell (CVE-2026–63030): The WordPress Core Bug That Let Anyone Become Admin
On July 17, 2026, a security researcher named Adam Kues (from Searchlight Cyber’s Assetnote team) publicly disclosed a vulnerability chain…
88 views
Daily Writeups
⤷ Title: wp2shell: Inside the WordPress Exploit Chain That Needs No Login and No Plugin
════════════════════════
𐀪 Author: Prophaze
════════════════════════
ⴵ Time: Fri, 24 Jul 2026 11:22:02 GMT
════════════════════════
⌗ Tags: #wordpress #hacking #vulnerability #cybersecurity #wp2shell
Medium
wp2shell: Inside the WordPress Exploit Chain That Needs No Login and No Plugin
How two “unrelated” bugs in WordPress core combined into a full unauthenticated remote code execution path and what to do about it right…
16 views
Daily Writeups
⤷ Title: The wp2shell Exploit Chain: Understanding the Critical WordPress Core Pre-Auth RCE (CVE-2026–63030…
════════════════════════
𐀪 Author: HaakimSec
════════════════════════
ⴵ Time: Fri, 24 Jul 2026 22:43:03 GMT
════════════════════════
⌗ Tags: #cybersecurity #wordpress #bug_bounty #vulnerability #infosec
Medium
# The wp2shell Exploit Chain: Understanding the Critical WordPress Core Pre-Auth RCE…
The cybersecurity landscape was recently disrupted by the disclosure of wp2shell, a highly critical exploit chain impacting WordPress Core…
33 views
Daily Writeups
⤷ Title: How an Unpatched N-Day Let Any Anonymous Visitor Rewrite WooCommerce Prices in ND Booking
════════════════════════
𐀪 Author: Shikhali Jamalzade
════════════════════════
ⴵ Time: Sun, 26 Jul 2026 12:56:50 GMT
════════════════════════
⌗ Tags: #cybersecurity #technology #bug_bounty_writeup #bug_bounty #wordpress
Medium
How an Unpatched N-Day Let Any Anonymous Visitor Rewrite WooCommerce Prices in ND Booking
Author: Shikhali Jamalzade GitHub: alisalive LinkedIn: camalzads Type: Independent Security Research | WordPress Plugin CVE Research
18 views
Daily Writeups
⤷ Title: Unauthenticated Disclosure of A/B Test Data in Convert Pro — How Two Forgotten AJAX Endpoints…
════════════════════════
𐀪 Author: Shikhali Jamalzade
════════════════════════
ⴵ Time: Sun, 26 Jul 2026 15:54:17 GMT
════════════════════════
⌗ Tags: #cybersecurity #technology #bug_bounty_writeup #wordpress #bug_bounty
Medium
Unauthenticated Disclosure of A/B Test Data in Convert Pro — How Two Forgotten AJAX Endpoints Leaked Every Split-Test on a Site
Author: Shikhali Jamalzade GitHub: alisalive LinkedIn: camalzads
30 views
Daily Writeups
⤷ Title: Unauthenticated Disclosure of A/B Test Data in Convert Pro — How Two Forgotten AJAX Endpoints…
════════════════════════
𐀪 Author: Shikhali Jamalzade
════════════════════════
ⴵ Time: Mon, 27 Jul 2026 09:38:59 GMT
════════════════════════
⌗ Tags: #cybersecurity #technology #bug_bounty_writeup #wordpress #bug_bounty
Medium
Unauthenticated Disclosure of A/B Test Data in Convert Pro — How Two Forgotten AJAX Endpoints Leaked Every Split-Test on a Site
Author: Shikhali Jamalzade GitHub: alisalive LinkedIn: camalzads
17 views
Daily Writeups
⤷ Title: From Source Code to Exploit: Understanding CVE-2026–3576
════════════════════════
𐀪 Author: Balachandar Gowrisankar
════════════════════════
ⴵ Time: Tue, 28 Jul 2026 04:55:57 GMT
════════════════════════
⌗ Tags: #penetration_testing #wordpress #ssrf #cybersecurity #vulnerability_research
Medium
From Source Code to Exploit: Understanding CVE-2026–3576
In this article, I’ll be diving deep into the technical details of a recently disclosed vulnerability in Wordpress’s Planyo Online…
20 views