PT-2019-9546

Name of the Vulnerable Software and Affected Versions Tribulant Slideshow Gallery plugin version 1.6.8 Description The issue exists due to SQL Injection in the Tribulant Slideshow Gallery plugin for WordPress. This can be exploited via the "wp-admin/admin.php?page=slideshow-galleries&method=save"...

PT-2019-9509

Name of the Vulnerable Software and Affected Versions WP Fastest Cache plugin version 0.8.8.5 Description The issue concerns a CSRF problem. It affects the wp-admin/admin.php page, specifically the wpfastestcacheoptions section. Recommendations For WP Fastest Cache plugin version 0.8.8.5, conside...

PT-2019-9545

Name of the Vulnerable Software and Affected Versions Tribulant Slideshow Gallery plugin version 1.6.8 Description A security issue exists in the Tribulant Slideshow Gallery plugin for WordPress, allowing for XSS attacks. This is possible via the...

CVE-2018-18019: Improper Neutralization of Input During Web Page Generation

XSS exists in the Tribulant Slideshow Gallery plugin 1.6.8 for WordPress via the wp-admin/admin.php?page=slideshow-slides&method=save Slidetitle, Slidemediafile, or Slideimageurl parameter...

CVE-2018-18018: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection exists in the Tribulant Slideshow Gallery plugin 1.6.8 for WordPress via the wp-admin/admin.php?page=slideshow-galleries&method=save Galleryid or Gallerytitle parameter...

CVE-2018-18017: Improper Neutralization of Input During Web Page Generation

XSS exists in the Tribulant Slideshow Gallery plugin 1.6.8 for WordPress via the wp-admin/admin.php?page=slideshow-galleries&method=save Galleryid or Gallerytitle parameter...

CVE-2018-17584: Cross-Site Request Forgery (CSRF)

The WP Fastest Cache plugin 0.8.8.5 for WordPress has CSRF via the wp-admin/admin.php wpfastestcacheoptions page...

CVE-2018-18261

In waimai Super Cms 20150505, there is an XSS vulnerability via the /admin.php/Foodcat/addsave fcname parameter...

CVE-2018-18261

CVE-2018-18261 affects waimai Super Cms 20150505. A Cross-Site Scripting (XSS) vulnerability exists via the /admin.php/Foodcat/addsave fcname parameter. The issue arises from improper handling/validation of input, allowing injected scripts to be reflected to users. References in Red Hat and NVD c...

PT-2019-9567

Name of the Vulnerable Software and Affected Versions waimai Super Cms version 20150505 Description The issue is related to an XSS vulnerability. It can be exploited via the "/admin.php/Foodcat/addsave" API endpoint, specifically through the fcname parameter. Recommendations For waimai Super Cms...

CVE-2018-18261: Improper Neutralization of Input During Web Page Generation

In waimai Super Cms 20150505, there is an XSS vulnerability via the /admin.php/Foodcat/addsave fcname parameter...

CVE-2019-10888

A CSRF Issue that can add an admin user was discovered in UKcms v1.1.10 via admin.php/admin/role/add.html...

PT-2019-12080

Name of the Vulnerable Software and Affected Versions UKcms version 1.1.10 Description A CSRF issue was discovered that can add an admin user. The issue is related to the "admin.php/admin/role/add.html" API endpoint. Recommendations For UKcms version 1.1.10, update to a newer version that contain...

CVE-2019-10888: Cross-Site Request Forgery (CSRF)

A CSRF Issue that can add an admin user was discovered in UKcms v1.1.10 via admin.php/admin/role/add.html...

Design/Logic Flaw

The wp-google-maps plugin before 7.10.43 for WordPress has XSS via the wp-admin/admin.php PATHINFO...

CVE-2019-9912

The wp-google-maps plugin before 7.10.43 for WordPress has XSS via the wp-admin/admin.php PATHINFO...

CVE-2019-9910

The kingcomposer plugin 2.7.6 for WordPress has wp-admin/admin.php?page=kc-mapper id XSS...

PT-2019-19932

Name of the Vulnerable Software and Affected Versions yop-poll plugin versions prior to 6.0.3 Description The issue affects the yop-poll plugin, allowing for XSS through the poll id parameter in the "view-votes" action, accessible via the /wp-admin/admin.php?page=yop-polls&action=view-votes...

CVE-2019-9914: Improper Neutralization of Input During Web Page Generation

The yop-poll plugin before 6.0.3 for WordPress has wp-admin/admin.php?page=yop-polls&action=view-votes pollid XSS...

CVE-2019-9913: Improper Neutralization of Input During Web Page Generation

The wp-live-chat-support plugin before 8.0.18 for WordPress has wp-admin/admin.php?page=wplivechat-menu-gdpr-page term XSS...