86 matches found
WordPress 插件 信息泄露漏洞
WordPress Plugin is an open source application plugin for WordPress. The WordPress plugin BulletProof Security suffers from an information disclosure vulnerability that stems from the fact that the BulletProof Security plugin for WordPress can easily disclose sensitive information due to a file...
Wordpress BulletProof Security Backup Disclosure
The Wordpress plugin BulletProof Security, versions use auxiliary/scanner/http/wp/bulletproofsecuritybackups msf undefinedbulletproofsecuritybackups show actions ...actions... msf undefinedbulletproofsecuritybackups set ACTION msf undefinedbulletproofsecuritybackups show options ...show and set...
PT-2021-22534 · WordPress · Bulletproof Security
Name of the Vulnerable Software and Affected Versions: BulletProof Security WordPress plugin versions up to, and including, 5.1 Description: The issue concerns sensitive information disclosure due to a file path disclosure in the publicly accessible /db backup log.txt file. This grants attackers...
WordPress BulletProof Security plugin <= 5.1 - Sensitive Information Disclosure vulnerability
Sensitive Information Disclosure vulnerability discovered by Vincent Rakotomanga in WordPress BulletProof Security plugin versions = 5.1. Solution Update the WordPress BulletProof Security plugin to the latest available version at least 5.2...
BulletProof Security < 5.2 - Sensitive Information Disclosure
The plugin is vulnerable to sensitive information disclosure due to a file path disclosure in the publicly accessible /dbbackuplog.txt file which grants attackers the full path of the site, in addition to the path of database backup files...
WordPress BulletProof Security Plugin Cross-Site Scripting Vulnerability
WordPress is a blogging platform developed in PHP by the WordPress Software Foundation, which supports setting up personal blog sites on PHP and MySQL servers.BulletProof Security is one of the security plug-ins against brute-force cracking. A cross-site scripting vulnerability exists in the...
Code injection
In the admin/db-backup-security/db-backup-security.php page in the BulletProof Security plugin before .52.5 for WordPress, XSS is possible for remote authenticated administrators via the DBTablePrefix parameter...
CVE-2015-9230
In the admin/db-backup-security/db-backup-security.php page in the BulletProof Security plugin before .52.5 for WordPress, XSS is possible for remote authenticated administrators via the DBTablePrefix parameter...
CVE-2015-9230
The CVE-2015-9230 entry relates to the BulletProof Security WordPress plugin. Affected component: admin/db-backup-security/db-backup-security.php. Root cause: cross-site scripting (XSS) vulnerability via the DBTablePrefix parameter in plugin versions prior to 0.52.5, exploitable by remote authent...
WordPress Bulletproof Security plugin cross-site scripting vulnerability (CNVD-2016-05861)
WordPress is a blogging platform developed in PHP by the WordPress Software Foundation.BulletProof Security is one of the security plugins against brute force cracking. Cross-site scripting vulnerability exists in versions of the WordPress Bulletproof Security plugin prior to 0.53.4, which can be...
Wordpress BulletProof Security plugin cross-site scripting vulnerability
WordPress is a blogging platform developed in PHP by the WordPress Software Foundation.BulletProof Security is one of the security plugins against brute force cracking. A cross-site scripting vulnerability exists in version 0.53.2 of the WordPress Bulletproof Security plugin. An attacker can...
WordPress BulletProof Security Plugin <= .53.3 - Multiple XSS
Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update the plugin...
WordPress Bulletproof Security Plugin <= .53.2 - Multiple XSS
Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update the plugin...
BulletProof Security <= .53.3 - Multiple XSS Vulnerabilities
The BulletProof Security WordPress plugin was affected by a Multiple XSS Vulnerabilities security vulnerability...
Wordpress BulletProof Security 53.3 Cross Site Scripting
Information -------------------- Advisory by Netsparker Name: Multiple XSS Vulnerabilities in BulletProof Security Affected Software : BulletProof Security Affected Versions: v53.3 and possibly below Vendor Homepage : https://wordpress.org/plugins/bulletproof-security/ Vulnerability Type :...
Bulletproof Security <= .53.2 - Multiple Cross Site Scripting Vulnerabilities
The BulletProof Security WordPress plugin was affected by a Multiple Cross Site Scripting Vulnerabilities security vulnerability...
WordPress Bulletproof 0.53.2 Cross Site Scripting
Product: Bulletproof SecurityExploit Author: Sachin WaghAffected Version: 0.53.2 Fixed Version: 0.53.3 http://forum.ait-pro.com/forums/topic/bps-changelog/ Home page Link: https://wordpress.org/plugins/bulletproof-security/ Detail: The Bulletproof Security plugin for WordPress is prone to a...
BulletProof Security .52.4 Cross Site Scripting
Details ================ Title : XSS Vulnerability in BulletProof Security Version .52.4 Affected Product : BulletProof Security Version .52.4 Vendor Homepage : https://wordpress.org/plugins/bulletproof-security/ Vulnerability Type : Cross Site Scripting Risk : High POC URL :...