8761 matches found
WordPress Catholic Liturgical Calendar Plugin <= 0.0.1 - Stored XSS
This plugin is prone to a cross site scripting vulnerability. Solution Upgrade the plugin...
My Calendar <= 2.3.29 - Arbitrary File Override & Reflected XSS
The file override vulnerability allows an admin to override any file on the web server, ignoring settings such as DISALLOWFILEEDIT. PoC Arbitrary File Override ----------------------- POST http://localhost/wordpress/wp-admin/admin.php?page=my-calendar-styles Post Data: wpnonceavalidnonce...
WordPress Editorial Calendar Plugin <= 2.6 - Bypass
This plugin is prone to a permission verification arbitrary calendar post deletion vulnerability. Solution Update the plugin...
WordPress Editorial Calendar Plugin <= 2.6 - SQL Injection
This plugin is prone to a post query multiple filter SQL injection vulnerability. Solution Upgrade the plugin...
WordPress Spider Calendar Plugin <= 1.1.0 - Cross Site Scripting
This plugin is prone to a cross site scripting vulnerability in "manyspcalendar". Solution Update the plugin...
WordPress Events Calendar Plugin <= 6.7.11a - XSS
Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update the plugin...
WordPress Editorial Calendar Plugin <= 2.6 - Cross Site Scripting
This plugin is prone to a post title XSS vulnerability. Solution Upgrade the plugin...
WordPress Editorial Calendar Plugin <= 2.6 - Bypass
This plugin is prone to a permission verification arbitrary calendar post deletion vulnerability. Solution Update the plugin...
WordPress Event Easy Calendar Plugin <= 1.0.0 - Multiple Cross Site Scripting
Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Remove this plugin from your WordPress installation...
WordPress Editorial Calendar Plugin <= 2.6 - SQL Injection
This plugin is prone to a post query multiple filter SQL injection vulnerability. Solution Upgrade the plugin...
WordPress All in One Event Calendar Plugin <= 1.9 - SQL Injection
This plugin is prone to index.php multiple parameter SQL injection vulnerability. Solution Update the plugin...
WordPress Spider Event Calendar Plugin - Multiple Vulnerabilities
This plugin is prone to security bypass, cross site scripting and SQL injection vulnerabilities. Solution Update the plugin...
WordPress Booking Calendar Contact Form Plugin 1.0.2 - Multiple vulnerabilities
Booking Calendar Contact Form plugin is prone to multiple vulnerabilities: 1. Authenticated SQL injection in "get" parameter allows an attacker to escalate editor privileges. 2. Filter bypass & Authenticated SQL injection in "id" parameter via...
WordPress Booking Calendar Contact Form 1.0.2 XSS / SQL Injection
Exploit Title: WordPress Booking Calendar Contact Form 1.0.2Multiple vulnerabilities Date: 2015-05-01 Google Dork: Index of /wordpress/wp-content/plugins/booking-calendar-contact-form/ Exploit Author: Joaquin Ramirez Martinez i0akiN SEC-LABORATORY Software Link:...
iClassSchedule 1.6 iOS & Android - Persistent Vulnerability
Document Title: =============== iClassSchedule 1.6 iOS & Android - Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1494 Release Date: ============= 2015-05-13 Vulnerability Laboratory ID VL-ID: ===================================...
WordPress Plugin Booking Calendar Contact Form 1.0.2 - Multiple Vulnerabilities
Exploit Title: WordPress Booking Calendar Contact Form 1.0.2Multiple vulnerabilities Date: 2015-05-01 Google Dork: Index of /wordpress/wp-content/plugins/booking-calendar-contact-form/ Exploit Author: Joaquin Ramirez Martinez i0akiN SEC-LABORATORY Software Link:...
Booking Calendar Contact Form <= 1.0.2 - Multiple Authenticated Vulnerabilities
The Booking Calendar Contact Form WordPress plugin was affected by a Multiple Authenticated Vulnerabilities security vulnerability...
iClassSchedule 1.6 iOS & Android - Persistent Vulnerability
Document Title: =============== iClassSchedule 1.6 iOS & Android - Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1494 Release Date: ============= 2015-05-12 Vulnerability Laboratory ID VL-ID: ===================================...
WordPress CP Multi View Event Calendar 1.1.4 SQL Injection
SQL Injection vulnerability in CP Multi View Event Calendar plugin Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...