Sql injection

SQL injection vulnerability in models/Cart66Ajax.php in the Cart66 Lite plugin before 1.5.4 for WordPress allows remote authenticated users to execute arbitrary SQL commands via the q parameter in a promotionProductSearch action to wp-admin/admin-ajax.php...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the Lightbox Photo Gallery plugin 1.0 for WordPress allow remote attackers to hijack the authentication of administrators for requests that 1 change plugin settings via unspecified vectors or conduct cross-site scripting XSS attacks via...

CVE-2014-9441

Multiple cross-site request forgery CSRF vulnerabilities in the Lightbox Photo Gallery plugin 1.0 for WordPress allow remote attackers to hijack the authentication of administrators for requests that 1 change plugin settings via unspecified vectors or conduct cross-site scripting XSS attacks via...

CVE-2014-9441

The CVE-2014-9441 entry concerns the WordPress Lightbox Photo Gallery 1.0 plugin, which is vulnerable to multiple CSRF (and associated XSS) flaws. According to the sources, remote attackers can hijack administrator authentication to perform actions such as changing plugin settings via unspecified...

CVE-2014-9442

SQL injection vulnerability in models/Cart66Ajax.php in the Cart66 Lite plugin before 1.5.4 for WordPress allows remote authenticated users to execute arbitrary SQL commands via the q parameter in a promotionProductSearch action to wp-admin/admin-ajax.php...

PT-2015-4204

Name of the Vulnerable Software and Affected Versions Lightbox Photo Gallery plugin version 1.0 for WordPress Description The issue allows remote attackers to hijack the authentication of administrators for requests, potentially leading to changes in plugin settings or cross-site scripting XSS...

PT-2015-4205

Name of the Vulnerable Software and Affected Versions Cart66 Lite plugin versions prior to 1.5.4 Description The issue allows remote authenticated users to execute arbitrary SQL commands. This is achieved by exploiting the q parameter in a promotionProductSearch action to the...

PT-2015-4224

Name of the Vulnerable Software and Affected Versions Cart66 Lite plugin versions prior to 1.5.4 Description The issue allows remote authenticated users to read arbitrary files due to a directory traversal vulnerability. This is achieved by using a .. dot dot in the member download action to the...

CVE-2014-9441: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in the Lightbox Photo Gallery plugin 1.0 for WordPress allow remote attackers to hijack the authentication of administrators for requests that 1 change plugin settings via unspecified vectors or conduct cross-site scripting XSS attacks via...

CVE-2014-9305

SQL injection vulnerability in the shortcodeProductsTable function in models/Cart66Ajax.php in the Cart66 Lite plugin before 1.5.2 for WordPress allows remote authenticated users to execute arbitrary SQL commands via the id parameter in a shortcodeproductstable action to wp-admin/admin-ajax.php...

CVE-2014-9305: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the shortcodeProductsTable function in models/Cart66Ajax.php in the Cart66 Lite plugin before 1.5.2 for WordPress allows remote authenticated users to execute arbitrary SQL commands via the id parameter in a shortcodeproductstable action to wp-admin/admin-ajax.php...

PT-2014-8930

Name of the Vulnerable Software and Affected Versions Cart66 Lite plugin versions prior to 1.5.2 Description The issue allows remote authenticated users to execute arbitrary SQL commands. This is achieved via the id parameter in a shortcode products table action to the "/wp-admin/admin-ajax.php"...

WordPress Shareaholic Plugin <= 7.6.0 - XSS

This vulnerability is in admin.php. It allows authenticated users to inject arbitrary web script or HTML via the "locationid" parameter that is in a shareaholicaddlocation action to wp-admin/admin-ajax.php. Solution Update the plugin...

CVE-2014-9175

SQL injection vulnerability in wpdatatables.php in the wpDataTables plugin 1.5.3 and earlier for WordPress allows remote attackers to execute arbitrary SQL commands via the tableid parameter in a getwdtable action to wp-admin/admin-ajax.php...

CVE-2014-9175: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in wpdatatables.php in the wpDataTables plugin 1.5.3 and earlier for WordPress allows remote attackers to execute arbitrary SQL commands via the tableid parameter in a getwdtable action to wp-admin/admin-ajax.php...

PT-2014-8866

Name of the Vulnerable Software and Affected Versions wpDataTables plugin version 1.5.3 and earlier Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the table id parameter in a get wdtable action to the "/wp-admin/admin-ajax.php" API endpoint...

CVE-2014-8801

Directory traversal vulnerability in services/getfile.php in the Paid Memberships Pro plugin before 1.7.15 for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the QUERYSTRING in a getfile action to wp-admin/admin-ajax.php...

PT-2014-8737

Name of the Vulnerable Software and Affected Versions Paid Memberships Pro plugin versions prior to 1.7.15 Description The issue allows remote attackers to read arbitrary files via a .. dot dot in the QUERY STRING in a getfile action to "wp-admin/admin-ajax.php". This is a directory traversal...

Sql injection

Multiple SQL injection vulnerabilities in the Apptha WordPress Video Gallery contus-video-gallery plugin 2.5, possibly as distributed before 2014-07-23, for WordPress allow 1 remote attackers to execute arbitrary SQL commands via the vid parameter in a myextract action to wp-admin/admin-ajax.php ...

All-in-One WP Migration 2.0.2 Remote Code Execution Vulnerability

Exploit for php platform in category web applications In Ai1wmImportController::import admin priveleges ARE NOT checked. Function is imported as action: addaction‘wpajaximport’, ‘Ai1wmImportController::import’ in class-ai1wm-main-controller.php It’s possible to use it through...