Meta Slider 2.1.6 - Multiple Full Path Disclosure

The Responsive Slider by MetaSlider – Slider and Carousel Plugin for WordPress WordPress plugin was affected by a Multiple Full Path Disclosure security vulnerability...

Spam Free Plugin 1.9.2 - Multiple Script Direct Request Path Disclosure

The Spam Free WordPress WordPress plugin was affected by a Multiple Script Direct Request Path Disclosure security vulnerability...

AntiVirus 1.0 - uninstall.php Direct Request Path Disclosure

The AntiVirus WordPress plugin was affected by an uninstall.php Direct Request Path Disclosure security vulnerability...

search-&-share 0.9.3 - SearchAndShare.php Direct Request Path Disclosure

The search-and-share WordPress plugin was affected by a SearchAndShare.php Direct Request Path Disclosure security vulnerability...

WP Photo Album Plus - Full Path Disclosure

The WP Photo Album Plus WordPress plugin was affected by a Full Path Disclosure security vulnerability...

super-refer-a-friend - Full Path Disclosure

The Super Refer A Friend WordPress plugin was affected by a Full Path Disclosure security vulnerability...

NextGEN Gallery <= 1.7.3 - xml/ajax.php Path Disclosure

The WordPress Gallery Plugin – NextGEN Gallery WordPress plugin was affected by a xml/ajax.php Path Disclosure security vulnerability...

grou-r&om-image-widget - Full Path Disclosure

The grou-random-image-widget WordPress plugin was affected by a Full Path Disclosure security vulnerability...

sintic_gallery - Path Disclosure

The sinticgallery WordPress plugin was affected by a Path Disclosure security vulnerability...

RokBox <= 2.13 - thumb.php src Parameter Malformed Input Path Disclosure

The wprokbox WordPress plugin was affected by a thumb.php src Parameter Malformed Input Path Disclosure security vulnerability...

WordPress Studio Zen Theme - Multiple Vulnerabilities

The attack vector requires separate vulnerability at target site to conduct CS and XSS attacks with using of jPlayer. Also, there are a full path disclosure vulnerability in this theme. Solution Update the theme...

WordPress Yvora Theme - Full Path Disclosure

Because of this vulnerability, the attackers can obtain sensitive information via an invalid upload request. Solution Update the theme...

WordPress MoneyMasters Theme - Full Path Disclosure

Because of this vulnerability, the attackers can obtain sensitive information via an invalid upload request. Solution Update the theme...

WordPress 3.5.2 - Media Library Multiple Function Path Disclosure

...

WordPress Starbox Voting Plugin - Full Path Disclosure

Because of this vulnerability, remote users can determine the full path to the web root directory and other potentially sensitive information. Solution Update the plugin...

WordPress Feather12 Theme - Multiple Vulnerabilities

The attack vector requires separate vulnerability at target site to conduct CS and XSS attacks with using of jPlayer. Also, there are a full path disclosure vulnerability in this theme. Solution Update the theme...

Sahifa 2.4.0 - Multiple Full Path Disclosure

The sahifa WordPress theme was affected by a Multiple Full Path Disclosure security vulnerability...

WordPress Slash Themes - Multiple Vulnerabilities

All versions of this theme are prone to full path disclosure in "index.php" and others php files vulnerability, also, to a cross site scripting and shell upload vulnerabilities. Solution There are no information about fixing these vulnerabilities...

WordPress Imperial Fairytale Theme - Full Path Disclosure

Because of this vulnerability, the attackers can obtain sensitive information via an invalid upload request. Solution Update the theme...

WordPress Sahifa Theme <= 2.4.0 - Multiple Vulnerabilities

This theme is prone to a cross site request forgery and full path disclosure vulnerabilities. Because of CSRF you can lost your site settings. Because of full path disclosure, the attackers can obtain sensitive information via an invalid upload request. Solution Update the theme...