WP All Import Pro <= 4.1.1 - Multiple Vulnerabilities

Multiple issues were fixed, such as Authenticated SQL Injection, Authenticated Reflected XSS and Unauthorised access to some methods...

WordPress WP All Import Plugin <= 3.2.4 - Multiple Vulnerabilities

This plugin is prone to an SQL injection and cross site scripting vulnerabilities. Because of them, attackers can gain admin access to your website or trick you into visiting the malicious URL. Solution Update the plugin...

WordPress Plugin All In One WP Security & Firewall SQL Injection Vulnerability

WordPress is a use of PHP language development of blogging platform , users can support PHP and MySQL database server to set up their own weblog . All In One WP Security & Firewall plugin is a Wordpress security management and firewall plugin . A SQL injection vulnerability exists in versions of...

WordPress Pie Register 2.0.14 Cross Site Scripting

+Title: Wordpress Pie Register Plugin 2.0.14 - XSS Vulnerability +Author: TUNISIAN CYBER +Date: 09/03/2015 +Type:WebApp +Risk:High +Affected Version:All +Overview: Pie Register 2.x suffers, from an XSS vulnerability. +Proof Of Concept: PHP global $pieregdirpath; includeonce...

CVE-2015-0895

Cross-site request forgery CSRF vulnerability in the All In One WP Security & Firewall plugin before 3.9.0 for WordPress allows remote attackers to hijack the authentication of administrators for requests that delete logs of 404 aka Not Found HTTP status codes...

CVE-2015-0894

SQL injection vulnerability in the All In One WP Security & Firewall plugin before 3.8.8 for WordPress allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Sql injection

SQL injection vulnerability in the All In One WP Security & Firewall plugin before 3.8.8 for WordPress allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2015-0895

All In One WP Security & Firewall for WordPress (versions before 3.9.0) is affected by a CSRF vulnerability that can allow an attacker, while a logged-in admin exists, to hijack the administrator’s authentication to delete 404 logs via forged requests. Root cause is CSRF in the plugin; impact inc...

CVE-2015-0894

CVE-2015-0894 affects the WordPress plugin All In One WP Security & Firewall and its versions prior to 3.8.8. The vulnerability is described as a SQL injection (CWE-89) that could allow a remote attacker to execute arbitrary SQL commands via unspecified vectors, potentially impacting data confide...

CVE-2015-0895

Cross-site request forgery CSRF vulnerability in the All In One WP Security & Firewall plugin before 3.9.0 for WordPress allows remote attackers to hijack the authentication of administrators for requests that delete logs of 404 aka Not Found HTTP status codes...

PT-2015-4951

Name of the Vulnerable Software and Affected Versions All In One WP Security & Firewall plugin versions prior to 3.9.0 Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of administrators for requests that delete logs of 404 HTTP status codes...

PT-2015-4950

Name of the Vulnerable Software and Affected Versions All In One WP Security & Firewall plugin versions prior to 3.8.8 Description The issue allows remote attackers to execute arbitrary SQL commands. Recommendations For All In One WP Security & Firewall plugin versions prior to 3.8.8, update to...

CVE-2015-0894: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the All In One WP Security & Firewall plugin before 3.8.8 for WordPress allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2015-0895: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the All In One WP Security & Firewall plugin before 3.9.0 for WordPress allows remote attackers to hijack the authentication of administrators for requests that delete logs of 404 aka Not Found HTTP status codes...

Wordpress WP All Import 3.2.3 plugin RCE Vulnerability

WordPress WP All Import plugin versions 3.2.3 and below suffer from a remote shell upload vulnerability. ------------------------------------------------------------------------------ WordPress WP All Import Plugin RCE ------------------------------------------------------------------------------...

WordPress WP All 3.2.3 Shell Upload

------------------------------------------------------------------------------ WordPress WP All Import Plugin RCE ------------------------------------------------------------------------------ - Vulnerability Author: James Golovich @Pritect - Exploit Author Evex @Evex1337 - Plugin Link:...

PT-2017-6603

Name of the Vulnerable Software and Affected Versions WP EasyCart plugin versions 1.1.30 through 3.0.20 Description The issue allows remote attackers to gain administrator privileges and execute arbitrary code. This is achieved via the option name and option value parameters in the ec ajax update...

WP All Import Pro <= 4.1.0 - RCE

WP All Import does not properly verify that a user has permission to execute functions. Coupled with an interesting method that allows arbitrary functions in specific objects to be called allows this to be leveraged in many ways...

WordPress WP All Import Plugin <= 3.2.3 - Remote Code Execution

Because of this vulnerability, remote attackers can upload arbitrary files to system or retrieve any files on the system that ends in .txt or .html. Solution Update the plugin...

Facebook Launches Free Mobile Internet Service In India

Last year, the founder of the Social Network giant highlighted the future of universal Internet access, the dream that Facebook founder Mark Zuckerberg wants to fulfill — Making Internet access available to everyone across the world just like a service as essential as of 911 in the case of an...