Files
PoC-in-GitHub/2026/CVE-2026-89274.json

101 lines
3.9 KiB
JSON

[
{
"id": 1377585665,
"name": "CVE-2026-89274",
"full_name": "murrez\/CVE-2026-89274",
"owner": {
"login": "murrez",
"id": 50166320,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/50166320?v=4",
"html_url": "https:\/\/github.com\/murrez",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/murrez\/CVE-2026-89274",
"description": "PoC for CVE-2026-89274: unauthenticated arbitrary shortcode execution in WP Recipe Maker ≤10.8.1 via recipe rating comments (JSON-LD). Python check\/exploit\/verify.",
"fork": false,
"created_at": "2026-09-19T20:25:18Z",
"updated_at": "2026-10-20T16:49:44Z",
"pushed_at": "2026-09-19T20:26:22Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 2,
"watchers": 2,
"score": 0,
"subscribers_count": 0
},
{
"id": 1378568586,
"name": "By-Poloss..-.CVE-2026-89274",
"full_name": "Polosss\/By-Poloss..-.CVE-2026-89274",
"owner": {
"login": "Polosss",
"id": 178707366,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/178707366?v=4",
"html_url": "https:\/\/github.com\/Polosss",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Polosss\/By-Poloss..-.CVE-2026-89274",
"description": "Unauthenticated Arbitrary Shortcode Execution",
"fork": false,
"created_at": "2026-09-20T16:50:17Z",
"updated_at": "2026-09-20T16:56:52Z",
"pushed_at": "2026-09-20T16:56:49Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1383802860,
"name": "CVE-2026-89274-wp-recipe-maker-poc",
"full_name": "Hassham1\/CVE-2026-89274-wp-recipe-maker-poc",
"owner": {
"login": "Hassham1",
"id": 31179291,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/31179291?v=4",
"html_url": "https:\/\/github.com\/Hassham1",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Hassham1\/CVE-2026-89274-wp-recipe-maker-poc",
"description": "CVE-2026-89274 — WP Recipe Maker <= 10.8.1 arbitrary shortcode execution via rating-comment reviewBody (CVSS 9.1): Docker validation lab with vulnerable (10.8.1) vs patched (10.8.2) controls, Python PoC proving server-side shortcode execution in recipe JSON-LD, nuclei version screen. Authorized security research only.",
"fork": false,
"created_at": "2026-09-23T16:18:56Z",
"updated_at": "2026-09-23T16:29:11Z",
"pushed_at": "2026-09-23T16:29:07Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]