salsaole.ca XSS vulnerability

Open Bug Bounty ID: OBB-83516 Description| Value ---|--- Affected Website:| salsaole.ca Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

quantdev.ssri.psu.edu XSS vulnerability

Vulnerable URL: http://quantdev.ssri.psu.edu/wp-admin/admin-ajax.php?action=revsliderajaxactionaction= Derp Details: Description| Value ---|--- Patched:| Yes, at 12.04.2016 Latest check for patch:| 12.04.2016 16:21 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

jezeph.co.uk XSS vulnerability

Vulnerable URL: http://www.jezeph.co.uk/wp-admin/admin-ajax.php?action=revsliderajaxactionaction= Derp Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 14:02 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

charterglobal.com XSS vulnerability

Vulnerable URL: http://charterglobal.com/wp-admin/admin-ajax.php?action=revsliderajaxactionaction= I R DERP Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 14:02 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

bluefinch.nl XSS vulnerability

Vulnerable URL: http://bluefinch.nl/wp-admin/admin-ajax.php?action=revsliderajaxactionaction= I R DERP Details: Description| Value ---|--- Patched:| Yes, at 30.01.2016 Latest check for patch:| 30.01.2016 22:07 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

visitsouthbend.com XSS vulnerability

Vulnerable URL: http://visitsouthbend.com/wp-admin/admin-ajax.php?action=revsliderajaxactionaction= I R DERP Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 14:02 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank...

lumishow.com.br XSS vulnerability

Vulnerable URL: http://www.lumishow.com.br/wp-admin/admin-ajax.php?action=revsliderajaxactionaction= I R DERP Details: Description| Value ---|--- Patched:| Yes, at 16.09.2015 Latest check for patch:| 16.09.2015 01:30 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Ran...

h1club.com XSS vulnerability

Vulnerable URL: http://www.h1club.com/wp-admin/admin-ajax.php?action=revsliderajaxactionaction= derp Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3260171 Google Pagerank| 3 VIP...

voetzorgnoord.nl XSS vulnerability

Open Bug Bounty ID: OBB-79870 Description| Value ---|--- Affected Website:| voetzorgnoord.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

gorenveincenter.com XSS vulnerability

Vulnerable URL: http://gorenveincenter.com/wp-admin/admin-ajax.php?action=revsliderajaxactionaction= derp Details: Description| Value ---|--- Patched:| Yes, at 22.09.2015 Latest check for patch:| 22.09.2015 01:25 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

colin.se XSS vulnerability

Vulnerable URL: http://colin.se/wp-admin/admin-ajax.php?action=revsliderajaxactionaction= derp Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 14:01 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1096694 Goog...

tomatesverdes.cl XSS vulnerability

Vulnerable URL: http://tomatesverdes.cl/wp-admin/admin-ajax.php?action=revsliderajaxactionaction= derp Details: Description| Value ---|--- Patched:| Yes, at 26.09.2015 Latest check for patch:| 26.09.2015 01:35 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

WordPress Unite Gallery Lite Plugin 1.4.6 - Multiple Vulnerabilities

WordPress Unite Gallery Lite plugin version 1.4.6 suffers from cross site request forgery and remote SQL injection vulnerabilities. Title: Cross-Site Request Forgery & SQL Injection Vulnerabilities in Unite Gallery Lite Wordpress Plugin v1.4.6 Submitter: Nitin Venkatesh Product: Unite Gallery Lit...

Cross site scripting

Cross-site scripting XSS vulnerability in the saveorder function in class-floating-social-bar.php in the Floating Social Bar plugin before 1.1.6 for WordPress allows remote attackers to inject arbitrary web script or HTML via the items parameter in an fsbsaveorder action to wp-admin/admin-ajax.ph...

Sql injection

Multiple SQL injection vulnerabilities in includes/Function.php in the Easy2Map plugin before 1.2.5 for WordPress allow remote attackers to execute arbitrary SQL commands via the mapName parameter in an e2mimgsavemapname action to wp-admin/admin-ajax.php and other unspecified vectors...

CVE-2015-4614

Multiple SQL injection vulnerabilities in includes/Function.php in the Easy2Map plugin before 1.2.5 for WordPress allow remote attackers to execute arbitrary SQL commands via the mapName parameter in an e2mimgsavemapname action to wp-admin/admin-ajax.php and other unspecified vectors...

CVE-2015-5151

Cross-site scripting XSS vulnerability in the Slider Revolution revslider plugin 4.2.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the clientaction parameter in a revsliderajaxaction action to wp-admin/admin-ajax.php...

Cross site scripting

Cross-site scripting XSS vulnerability in the Slider Revolution revslider plugin 4.2.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the clientaction parameter in a revsliderajaxaction action to wp-admin/admin-ajax.php...

WordPress Revslider 4.2.2 XSS / Information Disclosure Vulnerabilities

WordPress Revslider plugin version 4.2.2 suffer from cross site scripting, file download, and information disclosure vulnerabilities. Note that this finding houses site-specific data. | Title : WordPress Revslider 4.2.2 Multi Vulnerability | Author : indoushka | email : email protected | Dork :...

Directory traversal

Directory traversal vulnerability in the zM Ajax Login & Register plugin before 1.1.0 for WordPress allows remote attackers to include and execute arbitrary php files via a relative path in the template parameter in a loadtemplate action to wp-admin/admin-ajax.php...