CVE-2018-5291: Improper Limitation of a Pathname to a Restricted Directory

The GD Rating System plugin 2.3 for WordPress has Directory Traversal in the wp-admin/admin.php panel parameter for the gd-rating-system-tools page...

PT-2018-16874

Name of the Vulnerable Software and Affected Versions GD Rating System plugin version 2.3 Description The issue concerns a security problem where an attacker can execute malicious scripts on a website. This is achieved through the wp-admin/admin.php panel, specifically by manipulating the paramet...

PT-2018-16867

Name of the Vulnerable Software and Affected Versions GD Rating System plugin version 2.3 Description The issue concerns a Cross-Site Scripting XSS problem. It is related to the wp-admin/admin.php panel parameter for the gd-rating-system-about page. Recommendations For GD Rating System plugin...

PT-2018-16869

Name of the Vulnerable Software and Affected Versions GD Rating System plugin version 2.3 Description The issue concerns a problem with the GD Rating System plugin for WordPress, where there is a potential for XSS via the wp-admin/admin.php panel parameter for the gd-rating-system-transfer page...

PT-2018-16872

Name of the Vulnerable Software and Affected Versions GD Rating System plugin version 2.3 Description The issue concerns a Directory Traversal problem in the wp-admin/admin.php panel, specifically with the gd-rating-system-tools page. This affects the WordPress plugin's functionality...

PT-2018-16868

Name of the Vulnerable Software and Affected Versions GD Rating System plugin version 2.3 Description The issue concerns a Directory Traversal problem in the wp-admin/admin.php panel, specifically affecting the gd-rating-system-about page. This is related to a parameter in the admin panel...

CVE-2018-5288: Improper Neutralization of Input During Web Page Generation

The GD Rating System plugin 2.3 for WordPress has XSS via the wp-admin/admin.php panel parameter for the gd-rating-system-transfer page...

PT-2018-16873

Name of the Vulnerable Software and Affected Versions GD Rating System plugin version 2.3 Description The issue allows for XSS via the wp-admin/admin.php panel parameter for the gd-rating-system-information page. Recommendations For GD Rating System plugin version 2.3, consider disabling access t...

CVE-2018-5287: Improper Limitation of a Pathname to a Restricted Directory

The GD Rating System plugin 2.3 for WordPress has Directory Traversal in the wp-admin/admin.php panel parameter for the gd-rating-system-about page...

CVE-2018-5293: Improper Neutralization of Input During Web Page Generation

The GD Rating System plugin 2.3 for WordPress has XSS via the wp-admin/admin.php panel parameter for the gd-rating-system-tools page...

CVE-2018-5289: Improper Limitation of a Pathname to a Restricted Directory

The GD Rating System plugin 2.3 for WordPress has Directory Traversal in the wp-admin/admin.php panel parameter for the gd-rating-system-information page...

CVE-2018-5292: Improper Neutralization of Input During Web Page Generation

The GD Rating System plugin 2.3 for WordPress has XSS via the wp-admin/admin.php panel parameter for the gd-rating-system-information page...

PT-2017-14997

Name of the Vulnerable Software and Affected Versions Clockwork Free and Paid SMS Notifications versions 2.0.3 Two-Factor Authentication - Clockwork SMS version 1.0.2 Booking Calendar - Clockwork SMS version 1.0.5 Contact Form 7 - Clockwork SMS version 2.3.0 Fast Secure Contact Form - Clockwork S...

CVE-2017-17780: Improper Neutralization of Input During Web Page Generation

The Clockwork SMS clockwork-test-message.php component has XSS via a crafted "to" parameter in a clockwork-test-message request to wp-admin/admin.php. This component code is found in the following WordPress plugins: Clockwork Free and Paid SMS Notifications 2.0.3, Two-Factor Authentication -...

PT-2017-14240

Name of the Vulnerable Software and Affected Versions PopCash.Net Code Integration Tool plugin version prior to 1.1 Description The issue allows for XSS via the tab parameter to "wp-admin/admin.php". Recommendations For versions prior to 1.1, update to version 1.1 or later to resolve the issue...

CVE-2017-15810: Improper Neutralization of Input During Web Page Generation

The PopCash.Net Code Integration Tool plugin before 1.1 for WordPress has XSS via the tab parameter to wp-admin/admin.php...

Cross site scripting

Cross-site scripting XSS vulnerability in Best Gallery Albums Plugin before 3.0.70for WordPress allows remote attackers to inject arbitrary web script or HTML via the orderid parameter in the galleryalbumsorting page to wp-admin/admin.php...

CVE-2014-8758: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Best Gallery Albums Plugin before 3.0.70for WordPress allows remote attackers to inject arbitrary web script or HTML via the orderid parameter in the galleryalbumsorting page to wp-admin/admin.php...

PT-2017-6269

Name of the Vulnerable Software and Affected Versions Best Gallery Albums Plugin versions prior to 3.0.70 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the order id parameter in the "gallery album sorting" page to...

Sql injection

SQL Injection exists in /includes/event-management/index.php in the event-espresso-free aka Event Espresso Lite plugin v3.1.37.12.L for WordPress via the recurrenceid parameter to /wp-admin/admin.php...