CVE-2022-47612 WordPress Participants Database Plugin <= 2.4.5 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Roland Barker, xnau webdesign Participants Database plugin = 2.4.5 leads to list column update...

WordPress plugin Participants Database 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

PT-2023-15435 · WordPress · Participants Database

Name of the Vulnerable Software and Affected Versions: Participants Database plugin versions 2.4.5 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows for list column updates. Recommendations: For versions 2.4.5 and earlier, update to a version later...

WordPress Participants Database Plugin <= 2.4.5 is vulnerable to Cross Site Request Forgery (CSRF)

Software Participants Database Type Plugin Vulnerable versions = 2.4.5 Fixed in 2.4.6 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2022-47612 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 2aed529173b0 Credits rezaduty...

Sql injection

participants-database.php in the Participants Database plugin 1.9.5.5 and previous versions for WordPress has a time-based SQL injection vulnerability via the ascdesc, listfiltercount, or sortBy parameters. It is possible to exfiltrate data and potentially execute code if certain conditions are m...

WordPress Participants Database plugin <= 1.9.5.5 - Authenticated Time Based SQL Injection (SQLi) vulnerability

Authenticated Time Based SQL Injection SQLi vulnerability found by Teacish in WordPress Participants Database plugin versions = 1.9.5.5. Solution Update the WordPress Participants Database plugin to the latest available version at least 1.9.5.6...

Participants Database Temporal SQL Injection Vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A SQL injection vulnerability exists in the WordPress Participants Database plugin prior to version 1.9.5.5. T...

CVE-2020-8596

CVE-2020-8596 affects the WordPress plugin Participants Database (versions ≤ 1.9.5.5). The vulnerability is a time-based SQL injection in the plugin’s parameters ascdesc, list_filter_count, and sortBy, which can enable data exfiltration and, under certain conditions, remote code execution. Exploi...

WordPress Participants Database plugin <= 1.9.5.5 - Authenticated Time Based SQL Injection (SQLi) injection

Authenticated Time Based SQL Injection SQLi injection found by Teacish in WordPress Participants Database plugin versions = 1.9.5.5. Solution Update the WordPress Participants Database plugin to the latest available version at least 1.9.5.6...

Participants Database < 1.9.5.6 - Authenticated Time Based SQL Injection

Authenticated time-based SQL injection via the ascdesc, listfiltercount, and sortBy parameters. PoC Form the original advisory see references: POST /wp-admin/admin.php?page=participants-database HTTP/1.1 Host: redacted....cause User-Agent: Mozilla/5.0 X11; Linux x8664; rv:68.0 Gecko/20100101...

Participants Database < 1.9.5.6 - Authenticated Time Based SQL Injection

Authenticated time-based SQL injection via the ascdesc, listfiltercount, and sortBy parameters. Form the original advisory see references: POST /wp-admin/admin.php?page=participants-database HTTP/1.1 Host: redacted....cause User-Agent: Mozilla/5.0 X11; Linux x8664; rv:68.0 Gecko/20100101...

WordPress Participants Database plugin <=1.7.5.9 - Cross-Site Scripting (XSS) vulnerability

Cross-Site Scripting XSS vulnerability found by Benjamin Lim in WordPress Participants Database plugin version 1.7.5.9 and earlier versions. Data of the text input field of the plugin passed without escaping HTML special characters thus allows an attacker to insert javascript. Solution Update the...

Participants Database <= 1.7.5.9 - Cross-Site Scripting

Cross site scripting XSS vulnerability in the Wordpress Participants Database plugin 1.7.59 allows attackers to inject arbitrary javascript via the Name parameter. curl -k -F action=signup -F subsource=participants-database -F shortcodepage=/?pageid=1 -F thankspage=/?pageid=1 -F instanceindex=2 -...

WordPress Participants Database Plugin Cross-Site Scripting Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language , the platform supports PHP and MySQL server set up a personal blog site . Participants Database is one of the Participants Database plugin . A cross-site scripting vulnerability exists in...

Cross site scripting

The Participants Database plugin before 1.7.5.10 for WordPress has XSS...

CVE-2017-14126

The Participants Database plugin before 1.7.5.10 for WordPress has XSS...

CVE-2017-14126

The Participants Database plugin before 1.7.5.10 for WordPress has XSS...

CVE-2017-14126

The CVE-2017-14126 entry concerns the WordPress Participants Database plugin prior to version 1.7.5.10, which is affected by a Cross-Site Scripting (XSS) flaw. The root cause is that text input data (notably the signup form’s Name field) is passed without escaping HTML special characters, enablin...

CVE-2017-14126

The Participants Database plugin before 1.7.5.10 for WordPress has XSS...

WordPress Plugin Participants Database 1.7.5.10 - Cross-Site Scripting

WordPress Plugin Participants Database 1.7.5.10 - Cross-Site Scripting Exploit Title: Wordpress Plugin Participants Database 1.7.5.10 - XSS Google Dork: inurl:wp-content/plugins/participants-database/ Date: 01-Sep-17 Exploit Author: Benjamin Lim Vendor Homepage: https://xnau.com/ Software Link:...