CVE-2015-9330

The CVE-2015-9330 entry concerns the WordPress plugin wp-all-import, with a blind SQL injection vulnerability reported in versions before 3.2.5. Public sources (NVD, Red Hat, CNVD, CVE lists) consistently describe a SQL injection flaw in this plugin, aligned with a high/critical risk profile (CVS...

CVE-2015-9330

The wp-all-import plugin before 3.2.5 for WordPress has blind SQL injection...

CVE-2015-9330

The wp-all-import plugin before 3.2.5 for WordPress has blind SQL injection...

CVE-2015-9331

The CVE-2015-9331 flaw affects the WordPress plugin WP All Import, specifically versions up to 3.2.3 (CVE references also note

PT-2019-7288

Name of the Vulnerable Software and Affected Versions wp-all-import plugin versions prior to 3.2.5 Description The issue is related to reflected XSS in the wp-all-import plugin for WordPress. Recommendations For versions prior to 3.2.5, update to version 3.2.5 or later to resolve the issue...

CVE-2015-9331: Undefined Security Weakness

The wp-all-import plugin before 3.2.4 for WordPress has no prevention of unauthenticated requests to adminInit...

CVE-2018-20978: Improper Neutralization of Input During Web Page Generation

The wp-all-import plugin before 3.4.7 for WordPress has XSS...

CVE-2017-18567: Improper Neutralization of Input During Web Page Generation

The wp-all-import plugin before 3.4.6 for WordPress has XSS...

PT-2019-7290

Name of the Vulnerable Software and Affected Versions wp-all-import plugin versions prior to 3.2.4 Description The issue concerns the lack of prevention for unauthenticated requests to adminInit. This allows unauthorized access, potentially leading to exploitation. Recommendations For versions...

PT-2019-7291

Name of the Vulnerable Software and Affected Versions WordPress uninstall plugin versions prior to 1.2 Description The issue allows for CSRF, enabling the deletion of all tables via the "wp-admin/admin-ajax.php?action=uninstall" API endpoint. Recommendations For versions prior to 1.2, update to...

PT-2019-7289

Name of the Vulnerable Software and Affected Versions wp-all-import plugin versions prior to 3.2.5 Description The issue is related to blind SQL injection. Recommendations For versions prior to 3.2.5, update to version 3.2.5 or later to resolve the issue...

CVE-2015-9330: Improper Neutralization of Special Elements used in an SQL Command

The wp-all-import plugin before 3.2.5 for WordPress has blind SQL injection...

PT-2019-10414

Name of the Vulnerable Software and Affected Versions wp-all-import plugin versions prior to 3.4.7 Description The issue is related to a cross-site scripting XSS problem. Recommendations For versions prior to 3.4.7, update to version 3.4.7 or later to resolve the issue...

CVE-2015-9332: Cross-Site Request Forgery (CSRF)

The uninstall plugin before 1.2 for WordPress has CSRF to delete all tables via the wp-admin/admin-ajax.php?action=uninstall URI...

CVE-2015-9329: Improper Neutralization of Input During Web Page Generation

The wp-all-import plugin before 3.2.5 for WordPress has reflected XSS...

PT-2019-8501

Name of the Vulnerable Software and Affected Versions wp-all-import plugin versions prior to 3.4.6 Description The issue is related to a Cross-Site Scripting XSS problem. Recommendations For versions prior to 3.4.6, update to version 3.4.6 or later to resolve the issue...

Photo gallery suffers from denial of service vulnerability (CNVD-2019-30301)

Photo Gallery is an image viewing and management software that supports all formats. A denial of service vulnerability exists in Picture Gallery, which can be exploited by attackers to cause a denial of service...

PT-2019-13865

Name of the Vulnerable Software and Affected Versions EyesOfNetwork version 5.1 Description The issue allows for Remote Command Execution via shell metacharacters in the host field, located in the module/tool all/ area. Recommendations For EyesOfNetwork version 5.1, consider restricting access to...

ovirt-engine-metrics: disclosure of sensitive passwords in log files and ansible playbooks

Sensitive passwords used in deployment and configuration of oVirt Metrics, all versions. were found to be insufficiently protected. Passwords could be disclosed in log files if playbooks are run with -v or in playbooks stored on Metrics or Bastion hosts...

CVE-2016-10888: Improper Neutralization of Special Elements used in an SQL Command

The all-in-one-wp-security-and-firewall plugin before 4.0.7 for WordPress has multiple SQL injection issues...