Daily Writeups
@Daily_Writeups
4.06K subscribers
4 photos
137K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.06K subscribers
Daily Writeups
⤷ Title: CVE-2026–10091: Stored XSS in Email JavaScript Cloak WordPress Plugin
════════════════════════
𐀪 Author: CyberPodcast
════════════════════════
ⴵ Time: Sat, 04 Jul 2026 13:01:01 GMT
════════════════════════
⌗ Tags: #wordpress_security #xs #wordpress_security_plugin #security_plugin #cve
Medium
CVE-2026–10091: Stored XSS in Email JavaScript Cloak WordPress Plugin
When a simple shortcode becomes a persistent script injection vector
37 views
Daily Writeups
⤷ Title: CVE-2026–10092: Unauthenticated Stored XSS in Cincopa Video and Media Plug-in
════════════════════════
𐀪 Author: CyberPodcast
════════════════════════
ⴵ Time: Sun, 05 Jul 2026 13:01:01 GMT
════════════════════════
⌗ Tags: #security_plugin #wordpress_security_plugin #wordpress_security #cve #xs
Medium
CVE-2026–10092: Unauthenticated Stored XSS in Cincopa Video and Media Plug-in
When WordPress comments become a persistent shortcode execution surface
38 views
Daily Writeups
⤷ Title: WordPress Sites at Risk: Outdated PHP, Plugins, and Default Configs
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 08 Jul 2026 03:53:24 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #censys #End_of_Life Software #MR.GREEN Hack #Outdated PHP #wordpress security #xmlrpc.php #Yoast SEO
Daily CyberSecurity
WordPress Sites at Risk: Outdated PHP, Plugins, and Default Configs
Hundreds of WordPress sites remain easy targets year after year. The cause is rarely a rare zero-day vulnerability. Instead, it is outdated PHP versions, forgotten plugins, and default configurati…
14 views
Daily Writeups
⤷ Title: Breaking Into Internal: Enumeration, Exploitation & Privilege Escalation
════════════════════════
𐀪 Author: Mohamed Sameh
════════════════════════
ⴵ Time: Sat, 18 Jul 2026 05:11:22 GMT
════════════════════════
⌗ Tags: #wordpress_security #penetration_testing #cybersecurity #tryhackme #privilege_escalation
Medium
Breaking Into Internal: Enumeration, Exploitation & Privilege Escalation
Challenge URL : https://tryhackme.com/room/internal
42 views
Daily Writeups
⤷ Title: wp2shell: WordPress Core RCE Exploited in the Wild as Public PoC Code Circulates
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 01:49:52 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_60137 #CVE_2026_63030 #Pre_Auth RCE #REST API batch #webshell #WordPress Core RCE #wordpress security #wp2shell exploit
Daily CyberSecurity
wp2shell: WordPress Core RCE Exploited in the Wild as Public PoC Code Circulates
Attackers are already dropping webshells on WordPress sites through a flaw in WordPress Core itself. The bug chain, named wp2shell, delivers an unauthenticated WordPress Core RCE. No plugin, no th…
31 views
Daily Writeups
⤷ Title: Understanding the WordPress wp2shell Attack
════════════════════════
𐀪 Author: Hitakshi Parmar
════════════════════════
ⴵ Time: Wed, 22 Jul 2026 08:03:33 GMT
════════════════════════
⌗ Tags: #wordpress_security #vulnerability_management #cybersecurity #threat_analysis #ethical_hacking
Medium
Understanding the WordPress wp2shell Attack
Cybersecurity is constantly evolving, and attackers are always looking for new ways to exploit software vulnerabilities. One recent example…
33 views
Daily Writeups
⤷ Title: CVE Weekly Roundup: July 27 – August 2, 2026
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 03 Aug 2026 01:57:54 +0000
════════════════════════
⌗ Tags: #Weekly Recap #Apache Traffic Server #CISA KEV #Cisco FMC #CVE Roundup #Fortinet #VeloCloud #Weekly Report #wordpress security
Daily CyberSecurity
CVE Weekly Roundup: July 27 – August 2, 2026
The CVE WATCHTOWER logged 2,077 new vulnerabilities between July 27 and August 2, 2026. This CVE weekly roundup breaks down the numbers, flags what is under active attack, and highlights the entri…
13 views
Daily Writeups
⤷ Title: BdThemes Supply Chain Attack Poisons Plugin API to Hijack WordPress Admins
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Sun, 09 Aug 2026 00:37:56 +0000
════════════════════════
⌗ Tags: #Malware #BdThemes #supply chain attack #Wordfence #wordpress security #XSS
Daily CyberSecurity
BdThemes Supply Chain Attack Poisons Plugin API to Hijack WordPress Admins
At a Glance Malware family API-driven XSS supply chain implant (Biggopti banner abuse) Threat actor Suspected; linked to the ARVE and OptinMonster campaigns Targets WordPress sites running seven B…
21 views
Daily Writeups
⤷ Title: CVE-2026-15826: User Profile Builder Bug Under Active Attack, Grants Full Admin Takeover (CVSS 9.8)
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Sat, 15 Aug 2026 04:03:55 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Admin Takeover #Authentication Bypass #CVE_2026_15826 #User Profile Builder #WordPress Plugin Vulnerability #wordpress security
Daily CyberSecurity
CVE-2026-15826: User Profile Builder Bug Under Active Attack, Grants Full Admin Takeover (CVSS 9.8)
TL;DR: A critical User Profile Builder vulnerability, carrying a maximum CVSS score of 9.8 and tracked as CVE-2026-15826, now threatens more than 40,000 WordPress sites. It lets unauthenticated at…
21 views
Daily Writeups
⤷ Title: Super Forms Vulnerability Exploited in the Wild: 13,000 Sites Face 9.8 CVSS Remote Code Execution
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 04 Sep 2026 02:01:39 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Arbitrary File Upload #CVE_2026_14894 #exploited in the wild #Remote Code Execution #Super Forms #wordpress security
Daily CyberSecurity
Super Forms Vulnerability Exploited in the Wild: 13,000 Sites Face 9.8 CVSS Remote Code Execution
TL;DR Attackers are exploiting CVE-2026-14894 in the wild. This critical Super Forms vulnerability lets unauthenticated users upload PHP files. That path leads straight to remote code execution an…
10 views
Daily Writeups
⤷ Title: Brevo Supply Chain Attack: How One Stolen Cloudflare Key Exposed 100,000+ Websites
════════════════════════
𐀪 Author: Xpert4Cyber
════════════════════════
ⴵ Time: Sun, 20 Sep 2026 18:57:13 GMT
════════════════════════
⌗ Tags: #malware #supply_chain_attack #wordpress_security #infosec #cybersecurity
Medium
Brevo Supply Chain Attack: How One Stolen Cloudflare Key Exposed 100,000+ Websites
🚨 Brevo Supply Chain Attack: How One Stolen Cloudflare Key Exposed 100,000+ Websites
21 views
Daily Writeups
⤷ Title: Weekly CVE Report: 4,378 New Flaws and 10 Exploited Bugs
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 21 Sep 2026 01:54:55 +0000
════════════════════════
⌗ Tags: #Weekly Recap #CISA KEV #Cisco ISE #Exploited Vulnerabilities #Linux Kernel #threat intelligence #vulnerability management #Weekly CVE Report #wordpress security
Daily CyberSecurity
Weekly CVE Report: 4,378 New Flaws and 10 Exploited Bugs
The week in numbers CVE WATCHTOWER logged 4,378 new vulnerabilities between September 14 and September 20, 2026. This weekly CVE report focuses on the flaws that matter most: the ones with confirm…
39 views
Daily Writeups
⤷ Title: I Simulated a Website Defacement Attack in My Cybersecurity Lab — Here’s What I Learned
════════════════════════
𐀪 Author: Vedant Kumbhar
════════════════════════
ⴵ Time: Mon, 21 Sep 2026 07:12:42 GMT
════════════════════════
⌗ Tags: #wordpress_security #ethical_hacking #penetration_testing #websecurity_testing #cybersecurity
Medium
I Simulated a Website Defacement Attack in My Cybersecurity Lab — Here’s What I Learned
From network reconnaissance and WordPress enumeration to system access and controlled website modification
18 views
Daily Writeups
⤷ Title: Kapibala WordPress Exploitation Attacks Hit Governments
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 22 Sep 2026 02:57:38 +0000
════════════════════════
⌗ Tags: #Cybercriminals #GreyNoise #Kapibala WordPress exploitation #Kapibala WordPress exploitation attacks #Red Heron #wordpress security
Daily CyberSecurity
Kapibala WordPress Exploitation Attacks Hit Governments
At a Glance Attribute Details Actor or Group Suspected Chinese cyber actor (associated with Red Heron) Activity Type Web exploit chains, webshell deployment, database exfiltration Targets or Victi…
27 views
Daily Writeups
⤷ Title: TryHackMe: ColdBox — Walkthrough
════════════════════════
𐀪 Author: Gudrateyvazov
════════════════════════
ⴵ Time: Fri, 25 Sep 2026 14:05:05 GMT
════════════════════════
⌗ Tags: #cybersecurity #tryhackme_walkthrough #ctf #penetration_testing #wordpress_security
Medium
TryHackMe: ColdBox — Walkthrough
Giriş
13 views
Daily Writeups
⤷ Title: Weekly CVE Report: 2,825 New Flaws and 9 Exploited Bugs (Sept 21-27, 2026)
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 28 Sep 2026 01:30:07 +0000
════════════════════════
⌗ Tags: #Weekly Recap #Check Point #CISA KEV #Citrix NetScaler #Exploited Vulnerabilities #F5 BIG_IP #threat intelligence #Weekly CVE Report #wordpress security
Daily CyberSecurity
Weekly CVE Report: 2,825 New Flaws and 9 Exploited Bugs (Sept 21-27, 2026)
CVE WATCHTOWER logged 2,825 new vulnerabilities between September 21 and September 27, 2026. Of those, 218 scored CVSS 9.0 or higher. This weekly CVE report focuses on the flaws attackers already …
14 views
Daily Writeups
⤷ Title: How a hidden flaw let attackers take over WordPress admin
accounts with a single link & what I…
════════════════════════
𐀪 Author: 0xasmaa
════════════════════════
ⴵ Time: Sat, 10 Oct 2026 09:40:21 GMT
════════════════════════
⌗ Tags: #website_security #wordpress_security #wordpress #elementor #infosec
Medium
How a hidden flaw let attackers take over WordPress admin accounts with a single link & what I found when I tested it.
You own a website. You built it carefully set a strong password, installed a security plugin. You think you’re safe. Then you open an email…
35 views
Daily Writeups
⤷ Title: How a hidden flaw let attackers take over WordPress admin
accounts with a single link & what I…
════════════════════════
𐀪 Author: 0xasmaa
════════════════════════
ⴵ Time: Sat, 10 Oct 2026 09:40:21 GMT
════════════════════════
⌗ Tags: #website_security #wordpress_security #wordpress #elementor #infosec
Medium
How a hidden flaw let attackers take over WordPress admin accounts with a single link & what I found when I tested it.
You own a website. You built it carefully set a strong password, installed a security plugin. You think you’re safe. Then you open an email…
14 views
Daily Writeups
⤷ Title: How I Rooted VulnHub’s “EVM: 1” — A Full Attack Walkthrough
════════════════════════
𐀪 Author: Harshavardhan Marri
════════════════════════
ⴵ Time: Mon, 12 Oct 2026 14:11:20 GMT
════════════════════════
⌗ Tags: #ethical_hacking #cybersecurity #penetration_testing #wordpress_security #ctf
Medium
How I Rooted VulnHub’s “EVM: 1” — A Full Attack Walkthrough
Recon to root: a step-by-step breakdown of a CTF penetration test, written up for anyone learning offensive security.
23 views
Daily Writeups
⤷ Title: Critical Ghostscript Vulnerability CVE-2026-39919 Turns Uploaded PDFs Into Remote Code Execution
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 12 Oct 2026 20:19:09 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_39919 #Ghostscript #Heap Buffer Overflow #ImageMagick #Linux Security #Remote Code Execution #Wordfence #wordpress security
Daily CyberSecurity
Critical Ghostscript Vulnerability CVE-2026-39919 Turns Uploaded PDFs Into Remote Code Execution
TL;DR Artifex released Ghostscript 10.08.0 on September 8, 2026, fixing a critical heap buffer overflow rated CVSS 9.8. Wordfence found the Ghostscript vulnerability and turned a crafted PDF into …
26 views