7914 matches found
WordPress unite-gallery-lite plugin SQL injection vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. unite-gallery-lite is an image and video gallery plugin used in it. A SQL injection vulnerability exists in WordPress unite-gallery-li...
Sql injection
The plugmatter-optin-feature-box-lite plugin before 2.0.14 for WordPress has SQL injection via the wp-admin/admin-ajax.php?action=pmfbcc pmfbtid parameter...
Sql injection
The plugmatter-optin-feature-box-lite plugin before 2.0.14 for WordPress has SQL injection via the wp-admin/admin-ajax.php?action=pmfbmailchimp pmfbtid parameter...
CVE-2015-9451
The plugmatter-optin-feature-box-lite plugin before 2.0.14 for WordPress has SQL injection via the wp-admin/admin-ajax.php?action=pmfbmailchimp pmfbtid parameter...
CVE-2015-9450
The plugmatter-optin-feature-box-lite plugin before 2.0.14 for WordPress has SQL injection via the wp-admin/admin-ajax.php?action=pmfbcc pmfbtid parameter...
CVE-2015-9450
Summary: The plugmatter-optin-feature-box-lite WordPress plugin is affected by an SQL injection vulnerability in versions before 2.0.14, exploitable via the request parameter wp-admin/admin-ajax.php?action=pmfb_cc pmfb_tid. This is documented across CVE/NVD records and corroborated by other datab...
CVE-2015-9445
The unite-gallery-lite plugin before 1.5 for WordPress has CSRF and SQL injection via wp-admin/admin-ajax.php in a unitegalleryajaxaction operation...
Sql injection
The unite-gallery-lite plugin before 1.5 for WordPress has CSRF and SQL injection via wp-admin/admin.php galleryid or id parameters...
Sql injection
The unite-gallery-lite plugin before 1.5 for WordPress has SQL injection via datagalleryID to wp-admin/admin-ajax.php...
CVE-2015-9445
CVE-2015-9445 affects the WordPress plugin ** Unite Gallery Lite** (before version 1.5). The issue is a combination of CSRF and SQL injection via wp-admin/admin-ajax.php in the operation unitegallery_ajax_action . This vulnerability is reported with a high impact (NVD CVSS v3.1 base score 8.8) an...
CVE-2015-9446
The unite-gallery-lite plugin before 1.5 for WordPress has SQL injection via datagalleryID to wp-admin/admin-ajax.php...
CVE-2015-9446
CVE-2015-9446 affects the Unite Gallery Lite WordPress plugin (pre-1.5). The vulnerability is an SQL injection via data[galleryID] sent to wp-admin/admin-ajax.php, allowing the attacker to manipulate queries in the plugin’s context. Public references identify the issue in Unite Gallery Lite versi...
CVE-2015-9447
The CVE refers to the WordPress plugin Unite Gallery Lite prior to version 1.5. The vulnerability arises from CSRF and SQL injection via wp-admin/admin.php parameters named galleryid or id, indicating insufficient request validation that enables manipulation or unauthorized database queries. Seve...
CVE-2015-9447
The unite-gallery-lite plugin before 1.5 for WordPress has CSRF and SQL injection via wp-admin/admin.php galleryid or id parameters...
CVE-2015-9407
The xpinner-lite plugin through 2.2 for WordPress has xpinner-lite.php XSS...
CVE-2015-9408
The xpinner-lite plugin through 2.2 for WordPress has wp-admin/options-general.php CSRF with resultant XSS...
Cross site scripting
The xpinner-lite plugin through 2.2 for WordPress has xpinner-lite.php XSS...
CVE-2015-9408
The xpinner-lite plugin through 2.2 for WordPress has wp-admin/options-general.php CSRF with resultant XSS...
CVE-2015-9408
CVE-2015-9408 affects the WordPress xpinner-lite plugin up to version 2.2. The vulnerability is a CSRF on wp-admin/options-general.php that results in a Cross-Site Scripting (XSS) condition. Documentation in connected sources confirms the affected software/component but does not provide exploit d...