Exploit for CVE-2026-63030

kitploit · 2026-08-25

Description

Exploit video for CVE-2026-63030 uploaded to YouTube to help those seeking the vulnerability.

Entry point

Parameterauthor__not_in · path

Pathbatch/v1

REST batch routing confusion enabling SQL injection via author__not_in and leading to admin creation.

Affected Wordpress versions

Wordpress< 6.9.5, 7.0.2

All known vulnerabilities by product

CVSS 9.8 for CVE-2026-63030

9.8

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

EPSS Score

97.3%higher than 99.9% of all CVEs

Updated 2026-08-26

CVE Information

Exploit Details

Modified:2026-08-25 04:32

Last Seen:2026-08-26 07:28

Reporter:KitPloit

Tags

CVE-2026-63030exploit videoYouTubetools

Other exploits for CVE-2026-63030

wp2shell-Wordpress-TOWN

2026-09-09 KitPloitKITPLOIT

WordPress-CVE-2026-63030-Analysis

2026-09-09 KitPloitKITPLOIT

2026-09-09 KitPloitKITPLOIT

wordpress-skelersecurity-core-security-CVE-2026-63030

2026-09-09 KitPloitKITPLOIT

Ultimate-wp2shell

2026-09-09 KitPloitKITPLOIT

2026-09-08 KitPloitKITPLOIT

wp2shell-scanner

2026-09-08 KitPloitKITPLOIT

2026-09-08 KitPloitKITPLOIT

Exploit Code

MARKDOWN2 lines

## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-PROCJEVT-CVE-2026-63030
पासवर्ड के लिए पहले वीडियो देखें! स्किप न करें, बनाने वाले और क्रिएटर का सम्मान करें ओह हाँ, यह मेरा नहीं है, यह किसी और का है तो मैंने इसे सिर्फ इसलिए अपलोड किया ताकि इस CVE एक्सप्लॉइट को खोजने वालों को आसानी हो। https://youtu.be/8bgo-kkDK4E?si=amFPytlRJGpvFD-s