4338 matches found
super-refer-a-friend - Full Path Disclosure
The Super Refer A Friend WordPress plugin was affected by a Full Path Disclosure security vulnerability...
NextGEN Gallery <= 1.7.3 - xml/ajax.php Path Disclosure
The WordPress Gallery Plugin – NextGEN Gallery WordPress plugin was affected by a xml/ajax.php Path Disclosure security vulnerability...
RokBox <= 2.13 - thumb.php src Parameter Malformed Input Path Disclosure
The wprokbox WordPress plugin was affected by a thumb.php src Parameter Malformed Input Path Disclosure security vulnerability...
grou-r&om-image-widget - Full Path Disclosure
The grou-random-image-widget WordPress plugin was affected by a Full Path Disclosure security vulnerability...
sintic_gallery - Path Disclosure
The sinticgallery WordPress plugin was affected by a Path Disclosure security vulnerability...
WordPress Advanced Dewplayer Plugin <= 1.2 - Full Path Disclosure
This plugin is prone to a direct request full path disclosure in dewplayer.php. Solution Update the plugin...
WordPress Photocrati Theme - Full Path Disclosure
Because of this vulnerability, the attackers can obtain sensitive information via an invalid upload request. Solution Update the theme...
WordPress Sahifa Theme <= 2.4.0 - Multiple Vulnerabilities
This theme is prone to a cross site request forgery and full path disclosure vulnerabilities. Because of CSRF you can lost your site settings. Because of full path disclosure, the attackers can obtain sensitive information via an invalid upload request. Solution Update the theme...
WordPress Slash Themes - Multiple Vulnerabilities
All versions of this theme are prone to full path disclosure in "index.php" and others php files vulnerability, also, to a cross site scripting and shell upload vulnerabilities. Solution There are no information about fixing these vulnerabilities...
WordPress 3.5.2 - Media Library Multiple Function Path Disclosure
...
WordPress MoneyMasters Theme - Full Path Disclosure
Because of this vulnerability, the attackers can obtain sensitive information via an invalid upload request. Solution Update the theme...
WordPress Dewplayer Plugin <= 1.2 - Full Path Disclosure
This plugin is prone to a direct rquest path disclosure weakness in dewplayer.php. Solution Update the plugin...
WordPress Shotzz Theme - Full Path Disclosure
Because of this vulnerability, the attackers can obtain sensitive information via an invalid upload request. Solution Update the theme...
WordPress Vithy Theme - Full Path Disclosure
Because of this vulnerabilitity, attackers can obtain the installation path via a direct request to various files. Solution Update the theme...
WordPress Caulk Theme - Full Path Disclosure
Because of this vulnerability, the attackers can obtain sensitive information via an invalid upload request. Solution Update the theme...
Sahifa 2.4.0 - Multiple Full Path Disclosure
The sahifa WordPress theme was affected by a Multiple Full Path Disclosure security vulnerability...
WordPress Feather12 Theme - Multiple Vulnerabilities
The attack vector requires separate vulnerability at target site to conduct CS and XSS attacks with using of jPlayer. Also, there are a full path disclosure vulnerability in this theme. Solution Update the theme...
WordPress One Page Website Theme - Full Path Disclosure
Because of this vulnerability, the attackers can obtain sensitive information via an invalid upload request. Solution Update the theme...