MyExploitZzz

Automated nightly pipeline that turns newly disclosed WordPress plugin CVEs (CVSS 6.0–10.0, no admin/privileged authentication required) into reproducible reports, local-only PoCs, and non-destructive Nuclei detection templates.

Every CVE is diffed from the vulnerable vs. patched plugin source pulled directly from wordpress.org/plugins.svn.wordpress.org. No exploitation is ever performed against a real/production target — all PoCs are demonstrated against a local, isolated WordPress instance.

CVE Table (global index, sorted by date processed, newest first)

Date	CVE ID	Plugin	CVSS	Type	Status	Report
2026-07-17	CVE-2026-3576	Planyo Online Reservation System	7.2	SSRF	Pushed	Link

Repository structure

MyExploitZzz/
├── README.md                     # this file — global index, sorted by date
└── CVEs/
    └── <plugin-slug>/
        ├── README.md              # per-plugin CVE index
        └── <CVE-ID>/
            ├── report.md
            ├── PoC.md
            └── template.yaml

Scope

• WordPress plugins only.
• CVSS 6.0–10.0.
• Excludes vulnerabilities that require admin/privileged authenticated access to trigger.
• Every PoC is local-only; no scanning or testing against real/third-party WordPress sites.