Proof;

https://www.cve.org/CVERecord?id=CVE-2026-8502

- post_password (plaintext)
- post_content (full courses)
- post_title (hidden courses)
- post_status (draft/private)
- post_author (user IDs)


Fofa : body="/wp-content/plugins/learnpress/" && body="learnpress" - (50,000 - 50K) Records.

Shodan : http.html:"/wp-content/plugins/learnpress/assets/css/learnpress.css"

Censys : services.http.response.body: "/wp-content/plugins/learnpress/assets/css/learnpress.css"


Enjoy;

This is a special Cpanel Vuln discovered by our team, it still works and is the best.

It takes the site email and is very specially used for bigbounty work,etc

Auto Scan/Mass > Expl0it

Just enter your cpanel list and it will do its job.

Enjoy;

Proof of cpanel email vulnerability:

https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/newsletters-lite/newsletters-413-unauthenticated-sql-injection-via-wpmlsubscriber-id-parameter


Shodan :
http.html:/wp-content/plugins/newsletters-lite/
http.html:wp-mailinglist

Fofa :
body="/wp-content/plugins/newsletters-lite/"
body="wp-mailinglist"
body="Newsletters" && header="WordPress"
body="newsletters-lite" && body="subscriber_id"

Enjoy;

WebshellExecutor - v2.0.0.0

Advanced Software To Scan Webshells With The Best Features. For SEO Webshells/SEO Companies.

Important: We have made some great updates and now includes the best type of backdoors to get webshell as soon as possible and we have added many other ideas that are useful for users and now faster and we have done a lot of work in it.

Please contact us for any suggestions or questions, thank you @uncodeboss .

This content is shared strictly for authorized testing, educational,
and research purposes only. It is not intended for malicious use. All techniques, tools,
or information provided are meant to demonstrate security concepts and to raise awareness in a controlled and legal environment.
Please do not remove or flag this content, as it is shared responsibly for learning and academic purposes.

https://nvd.nist.gov/vuln/detail/CVE-2026-10520


Fofa :
body="Ivanti Standalone Sentry System Manager" && port="8443"
body="sentry" && body="System Manager" && port="8443"
header="Sentry" && port="8443"
title="Sentry" && port="8443"

ZoomEye :
port:8443 +"Ivanti Standalone Sentry"
port:8443 +"/mics/"

Enjoy;

If you have any suggestions or questions, or to getting VIP Access/Premium Group.

Connect/Contact with: @uncodeboss

https://nvd.nist.gov/vuln/detail/CVE-2026-3018


Fofa : body="/wp-content/plugins/newsletters-lite/"

Shodan : http.html/wp-content/plugins/newsletters-lite/

PublicWWW : "/wp-content/plugins/newsletters-lite/"

Enjoy;

This is a special Cpanel Vuln discovered by our team, it still works and is the best.

It takes the site email and is very specially used for bigbounty work,etc

Auto Scan/Mass > Expl0it

Just enter your cpanel list and it will do its job.

Enjoy;

Proof of cpanel email vulnerability:

https://www.tenable.com/cve/CVE-2026-9109


Fofa :
app="WordPress" && body="gptAjaxSecret" && body="gptranslate"
body="gptranslate/v1/request" && body="gptAjaxSecret"
body="var gptranslate" && body="gptranslateSettings" && title="WordPress"

Shodan :
http.html:"gptAjaxSecret" http.html:"gptranslate"
http.html:"gptranslate/v1/request"