Files
PoC-in-GitHub/2026/CVE-2026-119977.json
T

246 lines
8.6 KiB
JSON
Raw Blame History

This file contains ambiguous Unicode characters
This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
[
{
"id": 428221259,
"name": "Bash_WP-CLI_Update",
"full_name": "paulmann\/Bash_WP-CLI_Update",
"owner": {
"login": "paulmann",
"id": 2838788,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/2838788?v=4",
"html_url": "https:\/\/github.com\/paulmann",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/paulmann\/Bash_WP-CLI_Update",
"description": "Bash + WP-CLI maintenance for fleets of WordPress sites: core, plugin and theme updates, backups with a restore path, JSON reports, CVE-2026-119977 assessment and hardening.",
"fork": false,
"created_at": "2021-11-15T10:38:16Z",
"updated_at": "2026-11-06T17:44:13Z",
"pushed_at": "2026-11-06T17:50:12Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"automation",
"backup",
"bash",
"cli",
"database-optimization",
"devops",
"linux",
"restore",
"shell-script",
"sysadmin",
"updates",
"wordpress",
"wordpress-admin",
"wordpress-cli",
"wordpress-maintenance",
"wordpress-plugin",
"wordpress-theme",
"wordpress-updater",
"wordpress-updates",
"wp-cli"
],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 1
},
{
"id": 1445148242,
"name": "wordpress-core-scanner",
"full_name": "foxcornlab\/wordpress-core-scanner",
"owner": {
"login": "foxcornlab",
"id": 43523802,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/43523802?v=4",
"html_url": "https:\/\/github.com\/foxcornlab",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/foxcornlab\/wordpress-core-scanner",
"description": "Detection-only local triage scanner for CVE-2026-119977 (CISA KEV 2026-11-03) in WordPress Core: grades versions 4.7-7.1.3 against per-branch fixes (7.1.4 and backports) and flags wp-content\/upgrade exposure. No payloads, no remote probing.",
"fork": false,
"created_at": "2026-11-04T04:15:42Z",
"updated_at": "2026-11-04T04:16:24Z",
"pushed_at": "2026-11-04T04:16:19Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"cisa-kev",
"cve-2026-119977",
"detection",
"python",
"security-audit",
"triage",
"vulnerability-scanner",
"wordpress",
"wordpress-security"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1445474512,
"name": "CVE-2026-119977",
"full_name": "lysophavin18\/CVE-2026-119977",
"owner": {
"login": "lysophavin18",
"id": 116633924,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/116633924?v=4",
"html_url": "https:\/\/github.com\/lysophavin18",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/lysophavin18\/CVE-2026-119977",
"description": null,
"fork": false,
"created_at": "2026-11-04T10:12:28Z",
"updated_at": "2026-11-06T19:47:10Z",
"pushed_at": "2026-11-04T10:21:43Z",
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 2,
"watchers": 4,
"score": 0,
"subscribers_count": 0
},
{
"id": 1446032639,
"name": "CVE-2026-119977-WordPress-Upgrade-RCE-Bypasses-7.1.4",
"full_name": "Worthes\/CVE-2026-119977-WordPress-Upgrade-RCE-Bypasses-7.1.4",
"owner": {
"login": "Worthes",
"id": 260481209,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/260481209?v=4",
"html_url": "https:\/\/github.com\/Worthes",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Worthes\/CVE-2026-119977-WordPress-Upgrade-RCE-Bypasses-7.1.4",
"description": null,
"fork": false,
"created_at": "2026-11-04T18:16:40Z",
"updated_at": "2026-11-06T18:27:18Z",
"pushed_at": "2026-11-04T19:39:00Z",
"stargazers_count": 6,
"watchers_count": 6,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 6,
"score": 0,
"subscribers_count": 0
},
{
"id": 1447255179,
"name": "CVE-2026-119977-Toolkit",
"full_name": "tc4dy\/CVE-2026-119977-Toolkit",
"owner": {
"login": "tc4dy",
"id": 140116264,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/140116264?v=4",
"html_url": "https:\/\/github.com\/tc4dy",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/tc4dy\/CVE-2026-119977-Toolkit",
"description": "CVE-2026-119977 – WordPress Core Upgrade-Window RCE (CVSS 8.1) | Red\/Blue Team Toolkit. Predictable staging dir takeover, wp-config.php promotion, Bait MySQL proof, WAF origin discovery, rate-limited race oracle, admin shell deploy, version triage. Async, CI-tested. Only ethical & authorized use, stay legal.",
"fork": false,
"created_at": "2026-11-05T16:40:50Z",
"updated_at": "2026-11-07T10:09:42Z",
"pushed_at": "2026-11-05T17:01:25Z",
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"blueteam",
"cve-2026-119977",
"exploit",
"proof-of-concept",
"redteam",
"wordpress",
"wordpress-core",
"wordpress-cve",
"wordpress-vuln",
"wordpress-vulnerabilities",
"wordpress-vulnerability",
"wordpress-vulnerability-scan",
"wordpress-vulnerability-scanner",
"wordpress-vulnerable"
],
"visibility": "public",
"forks": 1,
"watchers": 4,
"score": 0,
"subscribers_count": 0
},
{
"id": 1449064884,
"name": "CVE-2026-119977",
"full_name": "riabinov\/CVE-2026-119977",
"owner": {
"login": "riabinov",
"id": 47110522,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/47110522?v=4",
"html_url": "https:\/\/github.com\/riabinov",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/riabinov\/CVE-2026-119977",
"description": null,
"fork": false,
"created_at": "2026-11-07T05:40:08Z",
"updated_at": "2026-11-07T05:41:20Z",
"pushed_at": "2026-11-04T10:21:43Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]