WordPress Welcart e-Commerce plugin <= 2.0.0 - SQL injection (SQLi) vulnerability

SQL injection SQLi vulnerability found by Erik David Martin in WordPress Welcart e-Commerce plugin versions = 2.0.0. Solution Update the WordPress Welcart e-Commerce plugin to the latest available version at least 2.0.1...

WordPress Supsystic Backup 2.3.9 Local File Inclusion

Exploit Title: WordPress Plugin Supsystic Backup 2.3.9 - Local File Inclusion Date: 24/07/2020 Exploit Author: Erik David Martin Vendor Homepage: https://supsystic.com/ Software Link: https://downloads.wordpress.org/plugin/backup-by-supsystic.zip Version: 2.3.9 Tested on: Ubuntu 16.04.6 LTS /...

WordPress Newsletter by Supsystic plugin <= 1.5.6 - SQL injection (SQLi) vulnerability

SQL injection SQLi vulnerability found by Erik David Martin in WordPress Newsletter by Supsystic plugin versions = 1.5.6. Solution 2021-02-08 - we were unable to find a patched version of this plugin. WordPress plugin repository notice: "This plugin has been closed as of December 1, 2020 and is n...

WordPress Data Tables Generator by Supsystic plugin <= 1.9.96 - Stored Cross-Site Scripting (XSS) vulnerability

Stored Cross-Site Scripting XSS vulnerability found by Erik David Martin in WordPress Data Tables Generator by Supsystic plugin versions = 1.9.96. Solution Update the WordPress Data Tables Generator by Supsystic plugin to the latest available version at least 1.9.97...

WordPress Pricing Table by Supsystic plugin <= 1.8.8 - SQL injection (SQLi) vulnerability

SQL injection SQLi vulnerability found by Erik David Martin in WordPress Pricing Table by Supsystic plugin versions = 1.8.8. Solution Update the WordPress Pricing Table by Supsystic plugin to the latest available version at least 1.8.9...

WordPress Contact Form by Supsystic plugin <= 1.7.5 - SQL injection (SQLi) vulnerability

SQL injection SQLi vulnerability found by Erik David Martin in WordPress Contact Form by Supsystic plugin versions = 1.7.5. Solution Update the WordPress Contact Form by Supsystic plugin to the latest available version at least 1.7.7...

WordPress Contact Form by Supsystic plugin <= 1.7.5 - Stored Cross-Site Scripting (XSS) vulnerability

Stored Cross-Site Scripting XSS vulnerability found by Erik David Martin in WordPress Contact Form by Supsystic plugin versions = 1.7.5. Solution Update the WordPress Contact Form by Supsystic plugin to the latest available version at least 1.7.7...

WordPress Data Tables Generator by Supsystic plugin <= 1.9.96 - SQL injection (SQLi) vulnerability

SQL injection SQLi vulnerability found by Erik David Martin in WordPress Data Tables Generator by Supsystic plugin versions = 1.9.96. Solution Update the WordPress Data Tables Generator by Supsystic plugin to the latest available version at least 1.9.97...

WordPress Ultimate Maps by Supsystic plugin <= 1.1.14 - SQL injection (SQLi) vulnerability

SQL injection SQLi vulnerability found by Erik David Martin in WordPress Ultimate Maps by Supsystic plugin versions = 1.1.14. Solution Update the WordPress Ultimate Maps by Supsystic plugin to the latest available version at least 1.1.16...

WordPress Digital Publications by Supsystic plugin <= 1.6.11 - Path Traversal and DoS vulnerability

Path Traversal and DoS vulnerability found by Erik David Martin in WordPress Digital Publications by Supsystic plugin versions = 1.6.11. Solution Update the WordPress Digital Publications by Supsystic plugin to the latest available version at least 1.6.12...

WordPress Backup by Supsystic plugin <= 2.3.12 - Local File Inclusion (LFI) vulnerability

Local File Inclusion LFI vulnerability found by Erik David Martin in WordPress Backup by Supsystic plugin versions = 2.3.12. Solution 2021-02-08 - we were unable to find a patched version of this plugin. Notice from WordPress plugin repository: "This plugin has been closed as of December 1, 2020...

Core FTP 2.0 - 'XRMD' Denial of Service (PoC)

Exploit Title: Core FTP 2.0 - 'XRMD' Denial of Service PoC Date: 2018-07-24 Exploit Author: Erik David Martin Vendor Homepage: http://www.coreftp.com/ Software Link: http://www.coreftp.com/server/download/CoreFTPServer.exe Version: Version 2.0, build 653, 32-bit Tested on: Windows XP Professional...

Core FTP 2.0 XRMD Denial Of Service

Exploit Title: Core FTP 2.0 - 'XRMD' Denial of Service PoC Date: 2018-07-24 Exploit Author: Erik David Martin Vendor Homepage: http://www.coreftp.com/ Software Link: http://www.coreftp.com/server/download/CoreFTPServer.exe Version: Version 2.0, build 653, 32-bit Tested on: Windows XP Professional...