WordPress Contact Form to Any API plugin <= 3.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Wordfence PRISM in WordPress Plugin Contact Form to Any API versions = 3.0.6...

WordPress Solid Security < 9.0.1 - Unauthenticated Login Page Disclosure Detection

WordPress Solid Security formerly iThemes Security/Better WP Security plugin before 9.0.1 is vulnerable to login page disclosure. When the Hide Backend feature is enabled and comments require user registration, the secret login URL token is exposed in the HTML source via the itsec-hb-token...

WordPress Contact Form 7 - Full Path Disclosure Detection

The WordPress Contact Form 7 plugin was detected to be vulnerable to Full Path Disclosure, where direct access to PHP files revealed the full server filesystem path and could aid further exploitation. !/usr/bin/env python3 -- coding: utf-8 -- """The WordPress Contact Form 7 plugin was detected to...

WordPress Contact Form - Full Path Disclosure Detection

WordPress Contact Form plugin files are publicly accessible without ABSPATH protection, exposing sensitive server path information through PHP error messages when accessed directly. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Contact Form plugin files are publicly accessible without...

AC Smart II - Authentication Bypass Detection

AC Smart II contains an authentication bypass caused by a hidden password reset form that can be manipulated to change the administrator password without verifying login or permissions, letting attackers change admin passwords without authorization. !/usr/bin/env python3 -- coding: utf-8 -- """AC...

WordPress Contact Form 7 Captcha <0.1.2 - Cross-Site Scripting Detection

WordPress Contact Form 7 Captcha plugin before 0.1.2 contains a reflected cross-site scripting vulnerability. It does not escape the $SERVER'REQUESTURI' parameter before outputting it back in an attribute. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Contact Form 7 Captcha plugin before...

Form Detection

A template to detect HTML Forms in page response. !/usr/bin/env python3 -- coding: utf-8 -- """A template to detect HTML Forms in page response.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Form Detection',...

WordPress Candidate Application Form <= 1.3 - Local File Inclusion Detection

WordPress Candidate Application Form = 1.3 is susceptible to arbitrary file downloads because the code in downloadpdffile.php does not do any sanity checks. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Candidate Application Form = 1.""" import re from kittysploit import from...

WordPress Pondol Form to Mail <=1.1 - Cross-Site Scripting Detection

WordPress Pondol Form to Mail 1.1 and before contains a reflected cross-site scripting vulnerability which allows an attacker to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authenticati...

phpLDAPadmin <= 1.2.3 - Reflected XSS Detection

phpLDAPadmin = 1.2.3 contains a reflected cross-site scripting caused by unsanitized input in htdocs/entrychooser.php via the form, element, rdn, or container parameter, letting attackers execute malicious scripts in victim browsers, exploit requires sending crafted input. !/usr/bin/env python3 -...

AppWeb - Authentication Bypass Detection

The Embedthis HTTP library, and Appweb versions before 7.0.3, have a logic flaw related to the authCondition function in http/httpLib.c. With a forged HTTP request, it is possible to bypass authentication for the form and digest login types. !/usr/bin/env python3 -- coding: utf-8 -- """The...

Drupal - Remote Code Execution Detection

Drupal 8.5.x before 8.5.11 and Drupal 8.6.x before 8.6.10 V contain certain field types that do not properly sanitize data from non-form sources, which can lead to arbitrary PHP code execution in some cases. !/usr/bin/env python3 -- coding: utf-8 -- """Drupal 8.""" from kittysploit import from...

WordPress Contact Form 7 <2.3.4 - Arbitrary Nonce Generation Detection

WordPress Contact Form 7 before version 2.3.4 allows unauthenticated users to use the wpcf7rgetnonce AJAX action to retrieve a valid nonce for any WordPress action/function. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Contact Form 7 before version 2.""" import re from kittysploit impor...

Joomla! Component & Plugin JE Tooltip 1.0 - Local File Inclusion Detection

A directory traversal vulnerability in the JE Form Creator comjeformcr component for Joomla!, when magicquotesgpc is disabled, allows remote attackers to read arbitrary files via directory traversal sequences in the view parameter to index.php. NOTE -- the original researcher states that the...

JobMonster < 4.5.2.9 - Cross-Site Scripting Detection

In the theme JobMonster 4.5.2.9 there is a XSS vulnerability as the input for the search form is provided through unsanitized GET requests. !/usr/bin/env python3 -- coding: utf-8 -- """In the theme JobMonster 4.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Jenkin Audit Trail <=3.2 - Cross-Site Scripting Detection

Jenkins Audit Trail 3.2 and earlier does not escape the error message for the URL Patterns field form validation, resulting in a reflected cross-site scripting vulnerability. !/usr/bin/env python3 -- coding: utf-8 -- """Jenkins Audit Trail 3.""" from kittysploit import from...

WordPress OpenID Connect Generic Client 3.8.0-3.8.1 - Cross-Site Scripting Detection

WordPress OpenID Connect Generic Client plugin 3.8.0 and 3.8.1 contains a cross-site scripting vulnerability. It does not sanitize the login error when output back in the login form, thereby not requiring authentication, which can be exploited with the default configuration. !/usr/bin/env python3...

WordPress Visual Form Builder <3.0.8 - Information Disclosure Detection

WordPress Visual Form Builder plugin before 3.0.8 contains a information disclosure vulnerability. The plugin does not perform access control on entry form export, allowing an unauthenticated user to export the form entries as CSV files using the vfb-export endpoint. !/usr/bin/env python3 --...

Redirection for Contact Form 7 < 2.5.0 - Cross-Site Scripting Detection

The Redirection for Contact Form 7 WordPress plugin before 2.5.0 does not escape a link generated before outputting it in an attribute, leading to a Reflected Cross-Site Scripting. !/usr/bin/env python3 -- coding: utf-8 -- """The Redirection for Contact Form 7 WordPress plugin before 2.""" from...

Haraj 3.7 - Cross-Site Scripting Detection

Haraj 3.7 contains a cross-site scripting vulnerability in the User Upgrade Form. An attacker can inject malicious script and thus steal authentication credentials and launch other attacks. !/usr/bin/env python3 -- coding: utf-8 -- """Haraj 3.""" from kittysploit import from...