WordPress CVEs — PoCs and detection rules¶
21 WordPress vulnerabilities with detection-only proof-of-concept code and Docker labs; 21 ship ready-to-deploy detection and prevention rules (Snort, YARA, Nginx, Apache). For authorized testing and blue-team detection engineering.
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-5932 — GiveWP Injection | Critical (10.0) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-8522 — LearnPress SQLi | Critical (10.0) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-27956 — WP Automatic SQLi | Critical (9.9) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-6386 — WPML Multilingual Plugin SSTI | Critical (9.9) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-10028 — Starter Templates | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-10470 — WPLMS LMS File Read | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-10542 — CleanTalk Anti-Spam RCE | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-1071 — WordPress Ultimate Member SQL Injection | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-10924 — WordPress Really Simple Security Authentication Bypass | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-11972 — Hunk Companion WP RCE | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-12209 — WP Starter Templates | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-25600 — Bricks Builder RCE | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-2876 — WPBakery Page Builder | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-2879 — LayerSlider SQLi | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-43917 — TI WooCommerce SQLi | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-4898 — InstaWP Connect | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-50510 — WP Forms Arbitrary File Upload | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-9234 — GutenKit RCE | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-31210 — WordPress Core RCE | High (8.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-11205 — WPForms Stripe Payment Bypass | High (8.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-6551 — GiveWP Info Leak | Medium (5.3) | Snort, YARA, Nginx, Apache | ✅ |