CVE-2018-5656: Cross-Site Request Forgery (CSRF)

An issue was discovered in the weblizar-pinterest-feeds plugin 1.1.1 for WordPress. CSRF exists via wp-admin/admin-ajax.php...

PT-2018-17052

Name of the Vulnerable Software and Affected Versions weblizar-pinterest-feeds plugin version 1.1.1 Description A security issue was found in the weblizar-pinterest-feeds plugin for WordPress. This issue allows for cross-site scripting XSS attacks through the "weblizar pffree settings save...

PT-2018-17053

Name of the Vulnerable Software and Affected Versions weblizar-pinterest-feeds plugin version 1.1.1 Description A security issue was found in the weblizar-pinterest-feeds plugin for WordPress. The problem is related to cross-site scripting XSS that can occur through the PFFREE Access Token...

WordPress Booking Calendar 7.0 / 7.1 SQL Injection / Local File Inclusion Vulnerabilities

WordPress Booking Calendar plugin versions 7.1, 7.0, and below suffer from remote SQL injection and local file inclusion vulnerabilities. Advisory Title: WordPress Booking Calendar Plugin Multiple Vulnerabilities Advisory URL: http://www.defensecode.com/advisories.php Software: WordPress Booking...

PT-2017-14856

Name of the Vulnerable Software and Affected Versions SeaCMS version 6.56 Description The issue allows remote authenticated administrators to execute arbitrary PHP code. This is achieved by crafting a token field to the admin/admin ping.php endpoint, which interacts with data/admin/ping.php...

PT-2017-14337

Name of the Vulnerable Software and Affected Versions Dynamic News Magazine & Blog CMS version 1.0 Description The issue allows SQL Injection via the id parameter to the "admin/admin process.php" endpoint for form editing. Recommendations For Dynamic News Magazine & Blog CMS version 1.0, avoid...

PT-2017-14336

Name of the Vulnerable Software and Affected Versions Responsive Newspaper Magazine & Blog CMS version 1.0 Description The issue allows SQL Injection via the id parameter to "admin/admin process.php" for form editing. Recommendations For Responsive Newspaper Magazine & Blog CMS version 1.0, avoid...

PT-2017-14338

Name of the Vulnerable Software and Affected Versions MyMagazine Magazine & Blog CMS version 1.0 Description The issue allows SQL Injection via the id parameter to "admin/admin process.php" for form editing. Recommendations For MyMagazine Magazine & Blog CMS version 1.0, avoid using the id...

PT-2017-14283

Name of the Vulnerable Software and Affected Versions ultimate-form-builder-lite plugin versions prior to 1.3.7 Description The issue concerns SQL Injection, which can lead to PHP Object Injection. This occurs via the API endpoint "/wp-admin/admin-ajax.php". Recommendations For versions prior to...

CVE-2017-15919: Improper Neutralization of Special Elements used in an SQL Command

The ultimate-form-builder-lite plugin before 1.3.7 for WordPress has SQL Injection, with resultant PHP Object Injection, via wp-admin/admin-ajax.php...

CVE-2017-15811: Improper Neutralization of Input During Web Page Generation

The Pootle Button plugin before 1.2.0 for WordPress has XSS via the assetsurl parameter in assets/dialog.php, exploitable via wp-admin/admin-ajax.php...

CVE-2014-7240: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Easy Contact Form Solution plugin before 1.7 for WordPress allows remote attackers to inject arbitrary web script or HTML via the value parameter in a masterresponse action to wp-admin/admin-ajax.php...

PT-2017-6001

Name of the Vulnerable Software and Affected Versions: Easy Contact Form Solution plugin versions prior to 1.7 Description: The issue allows remote attackers to inject arbitrary web script or HTML. This is achieved by exploiting the value parameter in a master response action to the...

CVE-2017-9834: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the WatuPRO plugin before 5.5.3.7 for WordPress allows remote attackers to execute arbitrary SQL commands via the watuproquestions parameter in a watuprosubmit action to wp-admin/admin-ajax.php...

CVE-2017-12199: Improper Neutralization of Special Elements used in an SQL Command

The Etoile Ultimate Product Catalog plugin 4.2.11 for WordPress has SQL injection with these wp-admin/admin-ajax.php POST actions: catalogueupdateorder list-item, videoupdateorder video-item, imageupdateorder list-item, taggroupupdateorder listitem, categoryproductsupdateorder...

PT-2017-12397

Name of the Vulnerable Software and Affected Versions Etoile Ultimate Product Catalog plugin version 4.2.11 Description The issue concerns SQL injection in the Etoile Ultimate Product Catalog plugin for WordPress. Specifically, the vulnerability is triggered by various POST actions in the...

spacehost.de XSS vulnerability

Vulnerable URL: https://spacehost.de/blog/wp-admin/admin-ajax.php Details: Description| Value ---|--- Patched:| Yes, at 14.05.2017 Latest check for patch:| 14.05.2017 20:49 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1786851 VIP website status:| No Check...

CVE-2016-10148

The wpajaxupdateplugin function in wp-admin/includes/ajax-actions.php in WordPress before 4.6 makes a getplugindata call before checking the updateplugins capability, which allows remote authenticated users to bypass intended read-access restrictions via the plugin parameter to...

PT-2017-7770

Name of the Vulnerable Software and Affected Versions WordPress versions prior to 4.6 Description The issue allows remote authenticated users to bypass intended read-access restrictions. This is related to the wp ajax update plugin function in wp-admin/includes/ajax-actions.php, which makes a get...

PT-2017-9052

Name of the Vulnerable Software and Affected Versions WordPress version 4.5.3 Description A directory traversal issue exists in the wp ajax update plugin function, allowing remote authenticated users to cause a denial of service or read certain text files by including a .. dot dot in the plugin...