WordPress Document Embedder plugin title enumeration vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. Document Embedder WordPress plugin prior to version 1.7.9 is vulnerable to a title enumeration vulnerability, which stems from the fact that the plugin includes an AJAX operation endpoint that can be...

Unspecified vulnerability in jpress (CNVD-2022-08351)

Jpress is Jpress team of a set of blogging platform developed using the Java language . A security vulnerability exists in jpress that stems from vulnerability to RCE attacks via io.jpress.web.admin. Attackers can exploit this vulnerability by uploading templates and injecting malicious code...

Jpress Access Control Error Vulnerability

Jpress is a set of blogging platforms developed by the Jpress team using the Java language. an access control error vulnerability exists in Jpress, which stems from the product allowing the io.jpress.web.admin.AddonController::doUploadAndInstall function to execute commands. No detailed...

jpress command injection vulnerability

Jpress is a set of blogging platform developed by the Jpress team using the Java language. jpress has a security vulnerability that can be exploited by attackers to inject some malicious code through functional modifications to the template...

Jpress 代码注入漏洞

Jpress is a set of blogging platform developed by the Jpress team using the Java language. jpress has a security vulnerability that can be exploited by attackers to inject some malicious code through functional modifications to the template...

WordPress Contact Form

WordPress is a set of blogging platforms developed by the Wordpress Foundation using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers. contact Form...

WordPress WooCommerce EnvioPack plugin cross-site scripting vulnerability

WordPress is the Wordpress Foundation's set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers.WooCommerce EnvioPack plugin is a WordPress open source application plugin.The WordPress WooCommerce EnvioPack plugin h...

Wordpress Plugin Smart Product Review Arbitrary File Upload Vulnerability

WordPress is a blogging platform developed using the PHP language.Smart Product Review is a versatile review package for users' WooCommerce stores. Wordpress plugin Smart Product Review arbitrary file upload vulnerability can be exploited by an attacker to upload a webshell and gain server...

WordPress Delete All Comments Easily plugin cross-site request forgery vulnerability

WordPress is a set of blogging platforms developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. WordPress Delete All Comments Easily plugin in version 1.3 and earlier is vulnerable to cross-site request forgery, which can ...

WordPress 跨站脚本漏洞

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blogging sites on PHP and MySQL servers. WordPress Coming Soon, Under Construction...

WordPress YOP Poll Plugin Cross-Site Scripting Vulnerability

WordPress is a set of blogging platform developed by the Wordpress Foundation using the PHP language. The platform supports the hosting of personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress YOP Poll Plugin, which stems from a lack of...

WordPress plugin Popular Posts cross-site scripting vulnerability

WordPress is the WordPress Foundation's suite of blogging platforms developed using the PHP language. The platform supports the hosting of personal blog sites on servers with PHP and MySQL.The Wordpress plugin Popular Posts 5.3.3 and previous versions have a cross-site scripting vulnerability tha...

WordPress The Community Events plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the Wordpress Foundation using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.The Community Events plugin is an application plugin for WordPress. A cross-site scripting vulnerability exists in...

Arbitrary File Deletion Vulnerability in ZrLog CMS

ZrLog is a blogging program developed using Java. ZrLog CMS suffers from an arbitrary file deletion vulnerability that can be exploited by an attacker to compromise the integrity of the system...

Stored Cross-Site Scripting Vulnerability in ZrLog

ZrLog is a blogging program developed using Java. A stored cross-site scripting vulnerability exists in ZrLog. An attacker can exploit the vulnerability to obtain sensitive information such as user cookies...

Hackers breach Ghost blogging platform to mine cryptocurrency

By Waqas The popular open-source blogging platform Ghost has suffered a security breach in which hackers attempted to mine cryptocurrency on... This is a post from HackRead.com Read the original post: Hackers breach Ghost blogging platform to mine cryptocurrency...

Anchor Information Disclosure Vulnerability

Anchor is an open source light blogging system. The system supports Markdown editor , custom fields and multiple languages and so on. An information disclosure vulnerability exists in the config/error.php file in Anchor version 0.12.3, which can be exploited to obtain database credentials with th...

Debian Security Advisory DSA 2841-1 (movabletype-opensource - cross-site scripting)

A cross-site scripting vulnerability was discovered in the rich text editor of the Movable Type blogging engine. OpenVAS Vulnerability Test $Id: deb2841.nasl 6715 2017-07-13 09:57:40Z teissa $ Auto-generated from advisory DSA 2841-1 using nvtgen 1.0 Script version: 1.0 Author: Greenbone Networks...

Some WordPress Themes, Thousands of Sites Open to XSS Vulnerability

A number of WordPress themes being distributed by the developer Parallelus are vulnerable to cross-site scripting XSS attacks, reports said. Themes, bits of PHP and HTML code that alter the look and functionality of sites, are usually installed via WordPress’ dashboard tool or by FTP. According t...

WordPress NextGEN Gallery Plugin <= 1.5.1 - XSS Vulnerability

This NextGEN Gallery plugin is prone to a cross-site scripting vulnerability. It is really popular plugin for the WordPress content management system, usually found as a blogging platform. The vulnerability manipulates the mode parameter of the xml/media-rss.php script and it results that...