WordPress Custom-Blocks SypexGeo 1.0 Database Disclosure

Exploit Title : WordPress Custom-Blocks SypexGeo Plugins 1.0 Database Backup Disclosure Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 08/12/2018 Vendor Homepage : wordpress.org Software Download Link : N/A Tested On : Windows and Linux Category : WebApps Version...

WordPress Events Made Easy 2.0.68 Database Disclosure

Exploit Title : WordPress Events Made Easy Plugins 2.0.68 Database Backup Disclosure Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 06/12/2018 Vendor Homepage : wordpress.org/plugins/events-made-easy/ Software Download Link :...

WordPress Orbis 1.3.3 Database Disclosure

Exploit Title : WordPress Orbis Plugins 1.3.3 Pronamic Database Backup Disclosure Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 06/12/2018 Vendor Homepage : pronamic.eu wordpress.org/plugins/orbis/ Software Download Link :...

WordPress Exports-and-Reports 0.8.1 Database Disclosure

Exploit Title : WordPress Exports-and-Reports Plugins 0.8.1 Database Backup Disclosure Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 06/12/2018 Vendor Homepage : wordpress.org/plugins/exports-and-reports/ Software Download Link :...

WordPress newwpml 3.0 Database Disclosure

Exploit Title : WordPress newwpml Plugins 3.0 Database Backup Disclosure Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 06/12/2018 Vendor Homepage : wordpress.org Software Download Link : N/A Tested On : Windows and Linux Category : WebApps Version Information :...

WordPress WP-Syntax Download Extension 1.1.1 Database Disclosure

Exploit Title : WordPress WP-Syntax Download Extension Plugins 1.1.1 Database Backup Disclosure Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 06/12/2018 Vendor Homepage : wordpress.org/plugins/wp-syntax-download-extension/ +...

WordPress Ari Adminer 1.1.12 Database Disclosure

Exploit Title : WordPress Ari Adminer Plugins 1.1.12 Database Backup Disclosure Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 06/12/2018 Vendor Homepage : ari-soft.com wordpress.org/plugins/ari-adminer/ Software Download Link :...

WordPress wp-contactpage-designer 1.0 Database Disclosure

Exploit Title : WordPress wp-contactpage-designer Plugins 1.0 Database Backup Disclosure Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 03/12/2018 Vendor Homepage : wordpress.org Software Download Link : N/A Tested On : Windows and Linux Category : WebApps Versio...

Joomla Kunena 5.1.7 Database Disclosure

Exploit Title : Joomla Kunena Components 5.1.7 Database Backup Disclosure Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 02/12/2018 Vendor Homepage : extensions.joomla.org/extension/kunena/ Software Download Link : kunena.org/download Tested On : Windows and Linu...

WordPress paid-memberships-pro 1.5.2 Database Disclosure

Exploit Title : WordPress paid-memberships-pro Plugins 1.5.2 Database Backup Disclosure Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 02/12/2018 Vendor Homepage : paidmembershipspro.com/update-1-5-2/ wordpress.org/plugins/pmpro-bbpress/ Software Download Link :...

WordPress BackWpUP 3.6.6 Database Disclosure

Exploit Title : WordPress BackWpUP Plugins 3.6.6 Database Backup Disclosure Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 02/12/2018 Vendor Homepage : wordpress.org/plugins/backwpup/ Software Download Link : downloads.wordpress.org/plugin/backwpup.3.6.6.zip...

WordPress HpHospital 1.0 Database Disclosure

Exploit Title : WordPress HpHospital Plugins 1.0 Database Backup Disclosure Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 02/12/2018 Vendor Homepage : wordpress.org Tested On : Windows and Linux Category : WebApps Exploit Risk : Medium Version Information : 1.0...

WordPress TemplateOne 1.0 Database Disclosure

Exploit Title : WordPress TemplateOne Themes 1.0 Database Backup Disclosure Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 02/12/2018 Vendor Homepage : wordpress.org dubicars.com Software Download Link : N/A Tested On : Windows and Linux Category : WebApps Versio...

WordPress HitAppoint 5.0.5 Database Disclosure

Exploit Title : WordPress HitAppoint Plugins 5.0.5 Database Backup Disclosure Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 02/12/2018 Vendor Homepage : wordpress.org hitappoint.com/wordpress-appointment-plugin/ Software Download Link : N/A Tested On : Windows a...

CVE-2018-19693

tp5cms (a PHP-based CMS framework) contains a cross-site scripting vulnerability in admin.php/system/set.html through the title parameter, present in tp5cms up to 2017-05-25. A remote attacker can inject arbitrary scripts/HTML via the title field. The CNVD entry for CNVD-2018-26479 explicitly des...

Joomla Fabrik 3.9 CSRF / LFI / Shell Upload

Exploit Title : Joomla ComFabrik 3.9 pluginAjax importcsv advancedsearch getprodimg controller LFI with htaccess CSRF Shell Access Vulnerability Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 29/11/2018 Vendor Homepage : extensions.joomla.org/extension/fabrik/...

WordPress WP Complete Backup 3.0.5 Database Backup Disclosure

Exploit Title : WordPress wp-complete-backup Plugins 3.0.5 Database Backup Information Disclosure Vulnerability Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 30/11/2018 Vendor Homepage : wordpress.org/plugins/wp-complete-backup/ Software Download Link :...

Joomla Event Booking 3.8.3 Database Disclosure

Exploit Title : Joomla comeventbooking 3.8.3 Components Database Backup Arbitrary File Download Vulnerability Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 29/11/2018 Vendor Homepage : extensions.joomla.org/extension/event-booking/ +...

WordPress sermon-shortcodes 1.0 Arbitrary File Download

Exploit Title : WordPress sermon-shortcodes 1.0 Plugins Arbitrary File Download Vulnerability Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 27/11/2018 Vendor Homepage : wordpress.org sermonmanager.pro...

WordPress allow-l10n-upload-filename 1.0 Arbitrary File Download

Exploit Title : WordPress allow-l10n-upload-filename 1.0 Plugins Arbitrary File Download Vulnerability Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 27/11/2018 Vendor Homepage : wordpress.org Tested On : Windows and Linux Category : WebApps Exploit Risk : Low...