Design/Logic Flaw

The "Add Link to Facebook" plugin through 2.3 for WordPress has XSS via the al2fbfacebookid parameter to wp-admin/profile.php...

CVE-2018-5212

The Simple Download Monitor plugin before 3.5.4 for WordPress has XSS via the sdmuploadthumbnail aka File Thumbnail parameter in an edit action to wp-admin/post.php...

CVE-2018-5213

The Simple Download Monitor plugin before 3.5.4 for WordPress has XSS via the sdmupload aka Downloadable File parameter in an edit action to wp-admin/post.php...

CVE-2018-5213: Improper Neutralization of Input During Web Page Generation

The Simple Download Monitor plugin before 3.5.4 for WordPress has XSS via the sdmupload aka Downloadable File parameter in an edit action to wp-admin/post.php...

CVE-2018-5212: Improper Neutralization of Input During Web Page Generation

The Simple Download Monitor plugin before 3.5.4 for WordPress has XSS via the sdmuploadthumbnail aka File Thumbnail parameter in an edit action to wp-admin/post.php...

PT-2018-16865

Name of the Vulnerable Software and Affected Versions ImageInject plugin version 1.15 Description The issue allows for XSS via the flickr appid parameter to the "/wp-admin/options-general.php" API endpoint. Recommendations For ImageInject plugin version 1.15, avoid using the flickr appid paramete...

CVE-2018-5214: Improper Neutralization of Input During Web Page Generation

The "Add Link to Facebook" plugin through 2.3 for WordPress has XSS via the al2fbfacebookid parameter to wp-admin/profile.php...

PT-2018-16866

Name of the Vulnerable Software and Affected Versions ImageInject plugin version 1.15 for WordPress Description The issue concerns a CSRF vulnerability. It affects the wp-admin/options-general.php API endpoint. Recommendations For ImageInject plugin version 1.15, consider disabling access to the...

PT-2018-16806

Name of the Vulnerable Software and Affected Versions Add Link to Facebook plugin versions prior to 2.3 Description The issue allows for XSS via the al2fb facebook id parameter to the "wp-admin/profile.php" endpoint. Recommendations For Add Link to Facebook plugin versions prior to 2.3, update to...

PT-2018-16805

Name of the Vulnerable Software and Affected Versions Simple Download Monitor plugin versions prior to 3.5.4 Description The issue allows for XSS via the sdm upload parameter in an edit action to the "wp-admin/post.php" endpoint. This affects the WordPress plugin, potentially allowing malicious...

PT-2018-16804

Name of the Vulnerable Software and Affected Versions Simple Download Monitor plugin versions prior to 3.5.4 Description The issue allows for XSS via the sdm upload thumbnail parameter in an edit action to the "/wp-admin/post.php" endpoint. This affects the plugin's functionality related to file...

PT-2017-14997

Name of the Vulnerable Software and Affected Versions Clockwork Free and Paid SMS Notifications versions 2.0.3 Two-Factor Authentication - Clockwork SMS version 1.0.2 Booking Calendar - Clockwork SMS version 1.0.5 Contact Form 7 - Clockwork SMS version 2.3.0 Fast Secure Contact Form - Clockwork S...

WordPress Booking Calendar 7.0 / 7.1 SQL Injection / Local File Inclusion Vulnerabilities

WordPress Booking Calendar plugin versions 7.1, 7.0, and below suffer from remote SQL injection and local file inclusion vulnerabilities. Advisory Title: WordPress Booking Calendar Plugin Multiple Vulnerabilities Advisory URL: http://www.defensecode.com/advisories.php Software: WordPress Booking...

CVE-2017-17780: Improper Neutralization of Input During Web Page Generation

The Clockwork SMS clockwork-test-message.php component has XSS via a crafted "to" parameter in a clockwork-test-message request to wp-admin/admin.php. This component code is found in the following WordPress plugins: Clockwork Free and Paid SMS Notifications 2.0.3, Two-Factor Authentication -...

CVE-2017-17091

wp-admin/user-new.php in WordPress before 4.9.1 sets the newbloguser key to a string that can be directly derived from the user ID, which allows remote attackers to bypass intended access restrictions by entering this string...

CVE-2017-17091: Use of Insufficiently Random Values

wp-admin/user-new.php in WordPress before 4.9.1 sets the newbloguser key to a string that can be directly derived from the user ID, which allows remote attackers to bypass intended access restrictions by entering this string...

PT-2017-14657

Name of the Vulnerable Software and Affected Versions InLinks plugin versions through 1.1 for WordPress Description The issue allows authenticated users to execute arbitrary SQL commands. This is achieved via the "keyword" parameter to the "/wp-admin/options-general.php?page=inlinks/inlinks.php"...

WordPress: Arbitrary file deletion in wp-core - guides towards RCE and information disclosure

Vulnerable place 1: wp-admin/post.php $newmeta'thumb' is placed into DB not sanitized directly from user input. case 'editattachment': checkadminreferer'update-post' . $postid; // Don't let these be changed unset$POST'guid'; $POST'posttype' = 'attachment'; // Update the thumbnail filename $newmet...

CVE-2017-15919: Improper Neutralization of Special Elements used in an SQL Command

The ultimate-form-builder-lite plugin before 1.3.7 for WordPress has SQL Injection, with resultant PHP Object Injection, via wp-admin/admin-ajax.php...

PT-2017-14283

Name of the Vulnerable Software and Affected Versions ultimate-form-builder-lite plugin versions prior to 1.3.7 Description The issue concerns SQL Injection, which can lead to PHP Object Injection. This occurs via the API endpoint "/wp-admin/admin-ajax.php". Recommendations For versions prior to...