PT-2019-7252

Name of the Vulnerable Software and Affected Versions all-in-one-wp-security-and-firewall plugin versions prior to 3.9.8 Description The issue concerns a Cross-Site Scripting XSS flaw in the unlock request feature of the plugin. This type of flaw allows attackers to inject malicious scripts into...

PT-2019-7253

Name of the Vulnerable Software and Affected Versions all-in-one-wp-security-and-firewall plugin versions prior to 3.9.5 Description The issue concerns a cross-site scripting XSS problem in the add query arg and remove query arg function instances. This could potentially allow attackers to inject...

PT-2019-7664

Name of the Vulnerable Software and Affected Versions all-in-one-wp-security-and-firewall plugin versions prior to 4.0.5 Description The issue concerns the all-in-one-wp-security-and-firewall plugin for WordPress, which has a cross-site scripting XSS problem. This problem is found in the blacklis...

CVE-2016-10867: Improper Neutralization of Input During Web Page Generation

The all-in-one-wp-security-and-firewall plugin before 4.0.6 for WordPress has XSS in settings pages...

CVE-2015-9294: Improper Neutralization of Input During Web Page Generation

The all-in-one-wp-security-and-firewall plugin before 3.9.5 for WordPress has XSS in addqueryarg and removequeryarg function instances...

CVE-2015-9293: Improper Neutralization of Input During Web Page Generation

The all-in-one-wp-security-and-firewall plugin before 3.9.8 for WordPress has XSS in the unlock request feature...

CVE-2016-10866: Improper Neutralization of Input During Web Page Generation

The all-in-one-wp-security-and-firewall plugin before 4.2.0 for WordPress has multiple XSS issues...

CVE-2016-10868: Improper Neutralization of Input During Web Page Generation

The all-in-one-wp-security-and-firewall plugin before 4.0.5 for WordPress has XSS in the blacklist, file system, and file change detection settings pages...

PT-2019-7662

Name of the Vulnerable Software and Affected Versions all-in-one-wp-security-and-firewall plugin versions prior to 4.2.0 Description The issue concerns multiple XSS problems. Recommendations For versions prior to 4.2.0, update to version 4.2.0 or later to resolve the issue...

WordPress All-in-One WP Migration plugin <= 6.97 - Cross-Site Scripting (XSS) vulnerability (admin backend)

Cross-Site Scripting XSS vulnerability admin backend found by Connum in WordPress All-in-One WP Migration plugin versions = 6.97. Solution Update the WordPress All-in-One WP Migration plugin to the latest available version at least 7.0...

All-in-One WP Migration <= 6.97 - Authenticated Cross-Site Scripting (XSS)

An attacker would already have to be able to either compromise the database or gain access to a user account with high enough privileges to view the backup history, so some damage has already been done, but such an attacker could then also insert some XSS in order to compromise other admin users...

PT-2019-3152

Name of the Vulnerable Software and Affected Versions HP DeskJet 3630 All-in-One Printers models F5S43A - F5S57A HP DeskJet 3630 All-in-One Printers models K4T93A - K4T99C HP DeskJet 3630 All-in-One Printers models K4U00B - K4U03B HP DeskJet 3630 All-in-One Printers models V3F21A - V3F22A with...

PT-2019-2857

Name of the Vulnerable Software and Affected Versions HP DeskJet 3630 All-in-One Printers models F5S43A - F5S57A, K4T93A - K4T99C, K4U00B - K4U03B, and V3F21A - V3F22A firmware version SWP1FN1912BR or higher Description The issue is related to a Cross-Site Request Forgery CSRF that could allow a...

PT-2019-10990

Name of the Vulnerable Software and Affected Versions: Practecol's Guardzilla All-In-One Video Security System affected versions not specified Description: The issue is related to a static, hard-coded credential used in the cloud-based storage system of the Guardzilla device. This allows an...

CVE-2018-5560: Use of Hard-coded Credentials

A reliance on a static, hard-coded credential in the design of the cloud-based storage system of Practecol's Guardzilla All-In-One Video Security System allows an attacker to view the private data of all users of the Guardzilla device...

WordPress All-in-One WP Migration 6.83 SQL Injection

Exploit Title : WordPress All-in-One WP Migration Plugins 6.83 SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 28/01/2019 Vendor Homepage : servmask.com Software Download Link : downloads.wordpress.org/plugin/all-in-one-wp-migration.6.83.zip Softwa...

WordPress Plugin All In One Favicon 4.6 - (Authenticated) Cross-Site Scripting

Exploit Title: WordPress Plugin All In One Favicon = 4.6 - Authenticated Multiple XSS Persistent Date: 2018-07-10 Exploit Author: Javier Olmedo Website: https://hackpuntes.com/ Vendor Homepage: http://www.techotronic.de/ Software Link: https://wordpress.org/plugins/all-in-one-favicon/ Version/s:...

WordPress Techotronic all-in-one-favicon plugin cross-site scripting vulnerability

WordPress is the WordPress Software Foundation's suite of blogging platforms developed using the PHP language, which supports personal blog sites on servers running PHP and MySQL.Techotronic all-in-one-favicon aka All In One Favicon is one of the plugins used to add favicon tags to a website. A...

CVE-2018-13832

Multiple Persistent cross-site scripting XSS issues in the Techotronic all-in-one-favicon aka All In One Favicon plugin 4.6 for WordPress allow remote attackers to inject arbitrary web script or HTML via Apple-Text, GIF-Text, ICO-Text, PNG-Text, or JPG-Text...

CVE-2018-13832

Multiple Persistent cross-site scripting XSS issues in the Techotronic all-in-one-favicon aka All In One Favicon plugin 4.6 for WordPress allow remote attackers to inject arbitrary web script or HTML via Apple-Text, GIF-Text, ICO-Text, PNG-Text, or JPG-Text...