PT-2022-19626

Name of the Vulnerable Software and Affected Versions Rara One Click Demo Import plugin version 1.2.9 and earlier Description The issue allows attackers to trick logged-in admin users into uploading dangerous files into the /wp-content/uploads/ directory through a Cross-Site Request Forgery CSRF...

CVE-2022-1166: Improper Limitation of a Pathname to a Restricted Directory

The JobMonster Theme was vulnerable to Directory Listing in the /wp-content/uploads/jobmonster/ folder, as it did not include a default PHP file, or .htaccess file. This could expose personal data such as people's resumes. Although Directory Listing can be prevented by securely configuring the we...

PT-2022-13683

Name of the Vulnerable Software and Affected Versions JobMonster Theme affected versions not specified Description The issue allows for Directory Listing in the /wp-content/uploads/jobmonster/ folder due to the absence of a default PHP file or .htaccess file. This could potentially expose sensiti...

CVE-2021-39333 Hashthemes Demo Importer <= 1.1.1 Improper Access Control Allowing Content Deletion

The Hashthemes Demo Importer Plugin = 1.1.1 for WordPress contained several AJAX functions which relied on a nonce which was visible to all logged-in users for access control, allowing them to execute a function that truncated nearly all database tables and removed the contents of...

CVE-2021-24212

The WooCommerce Help Scout WordPress plugin before 2.9.1 https://woocommerce.com/products/woocommerce-help-scout/ allows unauthenticated users to upload any files to the site which by default will end up in wp-content/uploads/hstmp...

PT-2021-15757

Name of the Vulnerable Software and Affected Versions: WooCommerce Help Scout WordPress plugin versions prior to 2.9.1 Description: The issue allows unauthenticated users to upload any files to the site, which by default will end up in wp-content/uploads/hstmp. Recommendations: For versions prior...

CVE-2021-24212: Unrestricted Upload of File with Dangerous Type

The WooCommerce Help Scout WordPress plugin before 2.9.1 https://woocommerce.com/products/woocommerce-help-scout/ allows unauthenticated users to upload any files to the site which by default will end up in wp-content/uploads/hstmp...

PT-2019-7441

Name of the Vulnerable Software and Affected Versions The ThemeMakers Car Dealer / Auto Dealer Responsive theme versions through 2015-05-15 Description The issue allows remote attackers to obtain sensitive information, such as user login, user pass, and user email values, via a direct request for...

CVE-2015-9487: Exposure of Sensitive Information to an Unauthorized Actor

The ThemeMakers Almera Responsive Portfolio theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information such as userlogin, userpass, and useremail values via a direct request for the wp-content/uploads/tmmdbmigrate/wpusers.dat URI...

CVE-2015-9488: Exposure of Sensitive Information to an Unauthorized Actor

The ThemeMakers Almera Responsive Portfolio Site Template component through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information such as userlogin, userpass, and useremail values via a direct request for the wp-content/uploads/tmmdbmigrate/wpusers.dat URI...

PT-2019-7444

Name of the Vulnerable Software and Affected Versions ThemeMakers Accio Responsive Parallax One Page Site Template component through 2015-05-15 for WordPress Description The issue allows remote attackers to obtain sensitive information, such as user login, user pass, and user email values, via a...

PT-2019-7447

Name of the Vulnerable Software and Affected Versions ThemeMakers Almera Responsive Portfolio Site Template component through 2015-05-15 for WordPress Description The issue allows remote attackers to obtain sensitive information, such as user login, user pass, and user email values, via a direct...

CVE-2015-9485: Exposure of Sensitive Information to an Unauthorized Actor

The ThemeMakers Accio Responsive Parallax One Page Site Template component through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information such as userlogin, userpass, and useremail values via a direct request for the wp-content/uploads/tmmdbmigrate/wpusers.dat URI...

CVE-2015-9489: Exposure of Sensitive Information to an Unauthorized Actor

The ThemeMakers Goodnex Premium Responsive theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information such as userlogin, userpass, and useremail values via a direct request for the wp-content/uploads/tmmdbmigrate/wpusers.dat URI...

CVE-2015-9490: Exposure of Sensitive Information to an Unauthorized Actor

The ThemeMakers GamesTheme Premium theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information such as userlogin, userpass, and useremail values via a direct request for the wp-content/uploads/tmmdbmigrate/wpusers.dat URI...

CVE-2015-9486: Exposure of Sensitive Information to an Unauthorized Actor

The ThemeMakers Axioma Premium Responsive theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information such as userlogin, userpass, and useremail values via a direct request for the wp-content/uploads/tmmdbmigrate/wpusers.dat URI...

Directory traversal

PHP Scripts Mall Advance Crowdfunding Script 2.0.3 has directory traversal via a direct request for a listing of an uploads directory such as the wp-content/uploads/2018/12 directory...

CVE-2018-20629: Improper Limitation of a Pathname to a Restricted Directory

PHP Scripts Mall Charity Donation Script readymadeb2bscript has directory traversal via a direct request for a listing of an uploads directory such as the wp-content/uploads/2018/12 directory...

DEBIAN-CVE-2018-14028

In WordPress 4.9.7, plugins uploaded via the admin area are not verified as being ZIP files. This allows for PHP files to be uploaded. Once a PHP file is uploaded, the plugin extraction fails, but the PHP file remains in a predictable wp-content/uploads location, allowing for an attacker to then...

CVE-2018-14028: Unrestricted Upload of File with Dangerous Type

In WordPress 4.9.7, plugins uploaded via the admin area are not verified as being ZIP files. This allows for PHP files to be uploaded. Once a PHP file is uploaded, the plugin extraction fails, but the PHP file remains in a predictable wp-content/uploads location, allowing for an attacker to then...