Mulitple WordPress Themes - 'admin-ajax.php?img' Arbitrary File Download

WordPress CuckooTap Theme & eShop Arbitrary File Download Risk: High CWE number: CWE-200 Author: Hugo Santiago Contact: [email protected] Date: 31/08/2014 Vendor Homepage: http://themeforest.net/item/cuckootap-one-page-parallax-wp-theme-plus-eshop/3512405 Tested on: Windows 7 and Gnu/Linux...

Sql injection

SQL injection vulnerability in the Gallery Objects plugin 0.4 for WordPress allows remote attackers to execute arbitrary SQL commands via the viewid parameter in a goviewobject action to wp-admin/admin-ajax.php...

CVE-2014-5201: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Gallery Objects plugin 0.4 for WordPress allows remote attackers to execute arbitrary SQL commands via the viewid parameter in a goviewobject action to wp-admin/admin-ajax.php...

Starbox Voting - ajax.php Full Path Disclosure

The Starbox Voting WordPress plugin was affected by an ajax.php Full Path Disclosure security vulnerability...

NextGEN Gallery <= 1.7.3 - xml/ajax.php Path Disclosure

The WordPress Gallery Plugin – NextGEN Gallery WordPress plugin was affected by a xml/ajax.php Path Disclosure security vulnerability...

WP DS FAQ <= 1.3.2 - ajax.php id Parameter SQL Injection

The WP DS FAQ WordPress plugin was affected by an ajax.php id Parameter SQL Injection security vulnerability...

Wordpress 2.1.3 admin-ajax.php SQL Injection Blind Fishing Exploit

...

WordPress Pinshop Theme - File Upload Arbitrary Code Execution

A "themify-ajax.php" file upload arbitrary PHP code execution vulnerability was found in WordPress Pinshop theme. Solution Update the theme...

Ajax Pagination 1.1 - wp-admin/admin-ajax.php loop Parameter Local File Inclusion

Plugin is still affected and has been closed...

WordPress Elemin Theme - File Upload Arbitrary Code Execution

A "themify-ajax.php" file upload arbitrary PHP code execution vulnerability was found in WordPress Elemin theme. Solution Update the theme...

WordPress Bloggie Theme - File Upload Arbitrary Code Execution

A "themify-ajax.php" file upload arbitrary PHP code execution vulnerability was found in WordPress Bloggie theme. Solution Update the theme...

WordPress Slide Theme - File Upload Arbitrary Code Execution

A "themify-ajax.php" file upload arbitrary PHP code execution vulnerability was found in WordPress Slide theme. Solution Update the theme...

DZS Video Gallery - ajax.php source Parameter Reflected XSS

The dzs-videogallery WordPress plugin was affected by an ajax.php source Parameter Reflected XSS security vulnerability...

CVE-2014-4580

The vulnerability CVE-2014-4580 affects the WordPress WP BlipBot plugin (versions

vBulletin ChangUonDyU Advanced Statistics - SQL Injection Vulnerability

No description provided by source. Exploit Title: vBulletin ChangUonDyU Advanced Statistics - SQL Injection Vulnerability Google Dork: No Dork Date: 19/10/2012 Exploit Author: Junookyo Vendor Homepage: http://hoiquantinhoc.com Software Link:...

WordPress Evarisk plugin <= 5.1.3.6 - SQL Injection Vulnerability

No description provided by source. Exploit Title: WordPress Evarisk plugin = 5.1.3.6 SQL Injection Vulnerability Date: 2011-08-28 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/evarisk.5.1.3.6.zip Version: 5.1.3.6 tested Note:...

苹果CMS SQL注入一枚

简要描述： 看到之前一发路人甲的漏洞，厂商说未测试成功，我也换个地方试试 详细说明： WooYun: 苹果CMS系统sql注入一枚 这个漏洞，厂商说未测试成功，然后继续换个地方看看。 inc/ajax.php:123行 elseif$ac=='score' if$id 10 $score = 10; if$tab=='art' $col='a'; else $col='d'; $sql="SELECT ".$col."score,".$col."scoreall,".$col."scorenum FROM pre".$tab." WHERE ".$col."id=" .$id;...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the Featured Comments plugin 1.2.1 for WordPress allow remote attackers to hijack the authentication of administrators for requests that change the 1 buried or 2 featured status of a comment via a request to wp-admin/admin-ajax.php...

CVE-2014-4163

Multiple cross-site request forgery CSRF vulnerabilities in the Featured Comments plugin 1.2.1 for WordPress allow remote attackers to hijack the authentication of administrators for requests that change the 1 buried or 2 featured status of a comment via a request to wp-admin/admin-ajax.php...

CVE-2014-4163: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in the Featured Comments plugin 1.2.1 for WordPress allow remote attackers to hijack the authentication of administrators for requests that change the 1 buried or 2 featured status of a comment via a request to wp-admin/admin-ajax.php...