397 matches found
CVE-2018-20986
The advanced-custom-fields aka Elliot Condon Advanced Custom Fields plugin before 5.7.8 for WordPress has XSS by authors...
CVE-2018-20986
The advanced-custom-fields aka Elliot Condon Advanced Custom Fields plugin before 5.7.8 for WordPress has XSS by authors...
WordPress Plugin Advanced Custom Fields Pro SQL Injection Vulnerability
WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. WordPress plugin Advanced Custom Fields Pro SQL injection vulnerability. The vulnerability is caused due to the program faili...
WordPress Advanced Custom Fields Pro 5.7.10 SQL Injection
Exploit Title : WordPress Advanced Custom Fields Pro Plugins 5.7.10 SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 28/01/2019 Vendor Homepage : advancedcustomfields.com/pro/ Software Download Link :...
WordPress Advanced Custom Fields plugin <= 5.7.7 - Authenticated Cross-Site Scripting (XSS) vulnerability
Authenticated Cross-Site Scripting XSS vulnerability found by Loading Kura Kura in WordPress Advanced Custom Fields plugin versions = 5.7.7. Solution Update the WordPress Advanced Custom Fields plugin to the latest available version at least 5.7.8...
WordPress Advanced Custom Fields 5.7.7 Cross Site Scripting
Exploit Title: Wordpress Plugins Advanced-custom-fields 5.7.7 - Cross-Site Scripting Google Dork: N/A Date: 2018-12-02 Exploit Author: Loading Kura Kura Vendor Homepage: https://www.advancedcustomfields.com/ Software Link: https://www.advancedcustomfields.com/ Version: 5.7.7 Tested on: Win10...
Wordpress Advanced-Custom-Fields 5.7.7 Plugins - Cross-Site Scripting Vulnerability
Exploit for php platform in category web applications Exploit Title: Wordpress Plugins Advanced-custom-fields 5.7.7 - Cross-Site Scripting Google Dork: N/A Exploit Author: Loading Kura Kura Vendor Homepage: https://www.advancedcustomfields.com/ Software Link: https://www.advancedcustomfields.com/...
WordPress Plugin Advanced-Custom-Fields 5.7.7 - Cross-Site Scripting
Exploit Title: Wordpress Plugins Advanced-custom-fields 5.7.7 - Cross-Site Scripting Google Dork: N/A Date: 2018-12-02 Exploit Author: Loading Kura Kura Vendor Homepage: https://www.advancedcustomfields.com/ Software Link: https://www.advancedcustomfields.com/ Version: 5.7.7 Tested on: Win10...
WordPress Advanced Custom Fields Plugin <= 1.1.12 - Stored Cross Site Scripting
Because of this vulnerability, users can inject JavaScript into pages within /wp-admin/. Solution Upgrade the plugin...
WordPress Advanced Custom Fields 4.4.7 Cross Site Scripting
FULL DISCLOSURE Product : Advanced Custom Fields Exploit Author : Rahul Pratap Singh Version : 4.4.7 Home page Link :https://wordpress.org/plugins/advanced-custom-fields/ Website : https://0x62626262.wordpress.com Linkedin : https://in.linkedin.com/in/rahulpratapsingh94 Date : 1/5/2016...
Advanced Custom Fields <= 3.5.1 - Remote File Inclusion
The Advanced Custom Fields WordPress plugin was affected by a Remote File Inclusion security vulnerability...
WordPress Plugin Advanced Custom Fields Remote File Inclusion
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...
WordPress Advanced Custom Fields Remote File Inclusion
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'WordPress Plugin Advanced Custom Fiel...
WordPress Plugin Advanced Custom Fields - Remote File Inclusion (Metasploit)
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'WordPress Plugin Advanced Custom Fiel...
WordPress Advanced Custom Fields Plugin - Remote File Inclusion
WordPress Advanced Custom Fields plugin is prone to a remote file inclusion vulnerability. It allows for remote file inclusion and remote code execution via the export.php script. Solution Update the plugin...
WordPress Plugin Advanced Custom Fields Remote File Inclusion
This module exploits a remote file inclusion flaw in the WordPress blogging software plugin known as Advanced Custom Fields. The vulnerability allows for remote file inclusion and remote code execution via the export.php script. The Advanced Custom Fields plug-in versions 3.5.1 and below are...
WordPress Advanced Custom Fields 3.5.1 RFI
Remote file include vulnerability in WordPress Advanced Custom Fields plugin Vulnerability Type: Remote File Include For the exploit source code contact DSquare Security sales team...