Daily Writeups
@Daily_Writeups
3.53K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.53K subscribers
Daily Writeups
⤷ Title: How an Unpatched N-Day Let Any Anonymous Visitor Rewrite WooCommerce Prices in ND Booking
════════════════════════
𐀪 Author: Shikhali Jamalzade
════════════════════════
ⴵ Time: Sun, 26 Jul 2026 12:56:50 GMT
════════════════════════
⌗ Tags: #cybersecurity #technology #bug_bounty_writeup #bug_bounty #wordpress
Medium
How an Unpatched N-Day Let Any Anonymous Visitor Rewrite WooCommerce Prices in ND Booking
Author: Shikhali Jamalzade GitHub: alisalive LinkedIn: camalzads Type: Independent Security Research | WordPress Plugin CVE Research
18 views
Daily Writeups
⤷ Title: Unauthenticated Disclosure of A/B Test Data in Convert Pro — How Two Forgotten AJAX Endpoints…
════════════════════════
𐀪 Author: Shikhali Jamalzade
════════════════════════
ⴵ Time: Sun, 26 Jul 2026 15:54:17 GMT
════════════════════════
⌗ Tags: #cybersecurity #technology #bug_bounty_writeup #wordpress #bug_bounty
Medium
Unauthenticated Disclosure of A/B Test Data in Convert Pro — How Two Forgotten AJAX Endpoints Leaked Every Split-Test on a Site
Author: Shikhali Jamalzade GitHub: alisalive LinkedIn: camalzads
30 views
Daily Writeups
⤷ Title: Unauthenticated Disclosure of A/B Test Data in Convert Pro — How Two Forgotten AJAX Endpoints…
════════════════════════
𐀪 Author: Shikhali Jamalzade
════════════════════════
ⴵ Time: Mon, 27 Jul 2026 09:38:59 GMT
════════════════════════
⌗ Tags: #cybersecurity #technology #bug_bounty_writeup #wordpress #bug_bounty
Medium
Unauthenticated Disclosure of A/B Test Data in Convert Pro — How Two Forgotten AJAX Endpoints Leaked Every Split-Test on a Site
Author: Shikhali Jamalzade GitHub: alisalive LinkedIn: camalzads
17 views
Daily Writeups
⤷ Title: From Source Code to Exploit: Understanding CVE-2026–3576
════════════════════════
𐀪 Author: Balachandar Gowrisankar
════════════════════════
ⴵ Time: Tue, 28 Jul 2026 04:55:57 GMT
════════════════════════
⌗ Tags: #penetration_testing #wordpress #ssrf #cybersecurity #vulnerability_research
Medium
From Source Code to Exploit: Understanding CVE-2026–3576
In this article, I’ll be diving deep into the technical details of a recently disclosed vulnerability in Wordpress’s Planyo Online…
19 views
Daily Writeups
⤷ Title: How an Unpatched N-Day Let Any Anonymous Visitor Rewrite WooCommerce Prices in ND Booking
════════════════════════
𐀪 Author: Shikhali Jamalzade
════════════════════════
ⴵ Time: Tue, 28 Jul 2026 07:42:03 GMT
════════════════════════
⌗ Tags: #cybersecurity #technology #bug_bounty_writeup #bug_bounty #wordpress
Medium
How an Unpatched N-Day Let Any Anonymous Visitor Rewrite WooCommerce Prices in ND Booking
Author: Shikhali Jamalzade GitHub: alisalive LinkedIn: camalzads Type: Independent Security Research | WordPress Plugin CVE Research
10 views
Daily Writeups
⤷ Title: CVE-2026-45293: Arbitrary Code Execution in WordPress Coding Standards, a Tool With 49M+ Installs
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 29 Jul 2026 01:02:18 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Arbitrary Code Execution #CI/CD security #CVE_2026_45293 #PHP_CodeSniffer #PHPCS #Static Analysis #Supply Chain Security #WordPress Coding Standards #WordPressCS
Daily CyberSecurity
CVE-2026-45293: Arbitrary Code Execution in WordPress Coding Standards, a Tool With 49M+ Installs
TL;DR A flaw in WordPress Coding Standards lets malicious PHP run code on the machine that lints it. Tracked as CVE-2026-45293, the bug carries a CVSS score of 8.6. The advisory calls it “an…
21 views
Daily Writeups
⤷ Title: Exploited in the Wild: CVE-2026-18072 (CVSS 9.8) Grants Full Administrative Control to 20,000 WordPress Sites
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 29 Jul 2026 02:48:16 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #backdoor #CVE_2026_18072 #cybersecurity #wordpress
Daily CyberSecurity
Exploited in the Wild: CVE-2026-18072 (CVSS 9.8) Grants Full Administrative Control to 20,000 WordPress Sites
TL;DR Threat actors injected a critical backdoor into the Advanced Responsive Video Embedder plugin. This flaw tracks as CVE-2026-18072 (CVSS 9.8). Attackers can bypass authentication entirely. Th…
11 views
Daily Writeups
⤷ Title: Host & Network Penetration Testing: Exploitation CTF 1
════════════════════════
𐀪 Author: Gaonkarpranay
════════════════════════
ⴵ Time: Fri, 31 Jul 2026 08:46:16 GMT
════════════════════════
⌗ Tags: #flatcore_hacking #wordpress_hacking #my_ejpt_experience #metasploit #hacking
Medium
Host & Network Penetration Testing: Exploitation CTF 1
Hello folks! Today we’ll be discussing about one more CTF challenge of the module Host and Network Penetration Testing and the sub module…
11 views
Daily Writeups
⤷ Title: Deep-Dive Technical Write-up by Huynh Kien Minh: CVE-2026–13158 — Everest Toolkit Admin+ Arbitrary…
════════════════════════
𐀪 Author: Huynh Kien Minh
════════════════════════
ⴵ Time: Sun, 02 Aug 2026 14:19:34 GMT
════════════════════════
⌗ Tags: #bug_bounty #cybersecurity #wordpress #security
Medium
Deep-Dive Technical Write-up by Huynh Kien Minh: CVE-2026–13158 — Everest Toolkit Admin+ Arbitrary File Upload to Remote Code Execution
By Huynh Kien Minh (MinhHK) — Information Security Researcher & Developer
18 views
Daily Writeups
⤷ Title: CVE Weekly Roundup: July 27 – August 2, 2026
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 03 Aug 2026 01:57:54 +0000
════════════════════════
⌗ Tags: #Weekly Recap #Apache Traffic Server #CISA KEV #Cisco FMC #CVE Roundup #Fortinet #VeloCloud #Weekly Report #wordpress security
Daily CyberSecurity
CVE Weekly Roundup: July 27 – August 2, 2026
The CVE WATCHTOWER logged 2,077 new vulnerabilities between July 27 and August 2, 2026. This CVE weekly roundup breaks down the numbers, flags what is under active attack, and highlights the entri…
11 views
Daily Writeups
⤷ Title: BdThemes Supply Chain Attack Poisons Plugin API to Hijack WordPress Admins
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Sun, 09 Aug 2026 00:37:56 +0000
════════════════════════
⌗ Tags: #Malware #BdThemes #supply chain attack #Wordfence #wordpress security #XSS
Daily CyberSecurity
BdThemes Supply Chain Attack Poisons Plugin API to Hijack WordPress Admins
At a Glance Malware family API-driven XSS supply chain implant (Biggopti banner abuse) Threat actor Suspected; linked to the ARVE and OptinMonster campaigns Targets WordPress sites running seven B…
13 views
Daily Writeups
⤷ Title: The Bug That Almost Wasn’t: How a “Dead End” Led to 500+ Leaked Customer Records
════════════════════════
𐀪 Author: Priyansh
════════════════════════
ⴵ Time: Mon, 10 Aug 2026 09:42:50 GMT
════════════════════════
⌗ Tags: #bug_bounty_writeup #wordpress #bug_bounty_tips #hacking #bug_bounty
Medium
The Bug That Almost Wasn’t: How a “Dead End” Led to 500+ Leaked Customer Records
A story about persistence, reading between the lines, and why you should always check custom post types
13 views
Daily Writeups
⤷ Title: CVE-2026-65640: WordPress 7.0.4 Fixes Remote Code Execution
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 13 Aug 2026 07:34:53 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_65640 #Ghostscript #Imagick #Remote Code Execution #Web Security #wordpress
Daily CyberSecurity
CVE-2026-65640: WordPress 7.0.4 Fixes Remote Code Execution
TL;DR WordPress released version 7.0.4 on August 12, 2026, as a security-only update. It fixes CVE-2026-65640, an authenticated remote code execution flaw rated CVSS 8.8. The bug affects sites tha…
24 views