WordPress Music Store 1.0.14 Open Redirect

Title: Open Redirect Vulnerability in Music Store Wordpress Plugin v1.0.14 Submitter: Nitin Venkatesh Product: Music Store Wordpress Plugin Product URL: https://wordpress.org/plugins/music-store/ Vulnerability Type: URL Redirection to Untrusted Site 'Open Redirect' CWE-601 Affected Versions:...

WordPress CP Contact Form with Paypal Plugin Scripting Vulnerability

WordPress is a set of blogging platform using PHP language development, the platform supports in PHP and MySQL server set up a personal blog site.CP Contact Form with Paypal is a support for adding Paypal commonly used contacts to the Worpress website plugin. WordPress CP Contact Form with Paypal...

Alipay 9. 0 reset password function is defective, you can easily modify any user's password-vulnerability warning-the black bar safety net

As is well known, in the PayPal new upgrade of 9. 0 version cancel a user gesture password settings, the transition to“Big Data, risk control”protection. If the users phone does not have fingerprint unlock function, then on their mobile phones PayPal account can be directly accessed. !...

WordPress CP Contact Form With Paypal 1.1.5 CSRF / XSS / SQL Injection Vulnerabilities

WordPress CP Contact Form with Paypal plugin version 1.1.5 suffers from cross site request forgery, cross site scripting, and remote SQL injection vulnerabilities. Title: Cross-Site Request Forgery, Cross-Site Scripting and SQL Injection in CP Contact Form with Paypal Wordpress Plugin v1.1.5...

WordPress Plugin CP Contact Form with Paypal 1.1.5 - Multiple Vulnerabilities

WordPress Plugin CP Contact Form with Paypal 1.1.5 - Multiple Vulnerabilities Title: Cross-Site Request Forgery, Cross-Site Scripting and SQL Injection in CP Contact Form with Paypal Wordpress Plugin v1.1.5 Submitter: Nitin Venkatesh Product: CP Contact Form with Paypal Wordpress Plugin Product...

WordPress CP Contact Form with Paypal Plugin 1.1.5 - Multiple Vulnerabilities

There are multiple vulnerabilities in this plugin, such as CSRF, XSS and SQL injection. These vulnerabilities allow an attacker to add or delete forms, export CSV files of the messages and modify settings of the form. Solution Upgrade to version 1.1.6...

WordPress Plugin CP Contact Form with Paypal 1.1.5 - Multiple Vulnerabilities

Title: Cross-Site Request Forgery, Cross-Site Scripting and SQL Injection in CP Contact Form with Paypal Wordpress Plugin v1.1.5 Submitter: Nitin Venkatesh Product: CP Contact Form with Paypal Wordpress Plugin Product URL: https://wordpress.org/plugins/cp-contact-form-with-paypal/ Vulnerability...

WordPress CP Contact Form With Paypal 1.1.5 CSRF / XSS / SQL Injection

Title: Cross-Site Request Forgery, Cross-Site Scripting and SQL Injection in CP Contact Form with Paypal Wordpress Plugin v1.1.5 Submitter: Nitin Venkatesh Product: CP Contact Form with Paypal Wordpress Plugin Product URL: https://wordpress.org/plugins/cp-contact-form-with-paypal/ Vulnerability...

CP Contact Form with Paypal <= 1.1.5 - Multiple Vulnerabilities

The CP Contact Form with PayPal WordPress plugin was affected by a Multiple Vulnerabilities security vulnerability...

WordPress Plugin Paypal Currency Converter Basic For WooCommerce Absolute Path Traversal Vulnerability

WordPress is a set of blogging platform developed by WordPress Software Foundation using PHP language, which supports setting up personal blog sites on PHP and MySQL servers.Paypal Currency Converter Basic For WooCommerce is one of the plugins that supports using Paypal payments in the WooCommerc...

CVE-2015-5065

Absolute path traversal vulnerability in proxy.php in the google currency lookup in the Paypal Currency Converter Basic For WooCommerce plugin before 1.4 for WordPress allows remote attackers to read arbitrary files via a full pathname in the requrl parameter...

CVE-2015-5065

Absolute path traversal vulnerability in proxy.php in the google currency lookup in the Paypal Currency Converter Basic For WooCommerce plugin before 1.4 for WordPress allows remote attackers to read arbitrary files via a full pathname in the requrl parameter...

CVE-2015-5065

Absolute path traversal vulnerability in proxy.php in the google currency lookup in the Paypal Currency Converter Basic For WooCommerce plugin before 1.4 for WordPress allows remote attackers to read arbitrary files via a full pathname in the requrl parameter...

CVE-2015-5065

CVE-2015-5065 describes an absolute path traversal vulnerability in the WordPress plugin “Paypal Currency Converter Basic For WooCommerce” (WooCommerce integration). In proxy.php, the google currency lookup exposes a flaw that allows remote attackers to read arbitrary files by supplying a full pa...

WordPress WooCommerce Plugin <= 1.3 - Absolute Path Traversal

This vulnerability is in proxy.php in the google currency lookup in the Paypal Currency Converter Basic For WooCommerce plugin. It allows an attacker to read arbitrary files in the "requrl" parameter via a full pathname. Solution Update the plugin...

WordPress Paypal Currency Converter Basic For Woocommerce File Read Vulnerability

WordPress Paypal Currency Converter Basic For Woocommerce is prone to file read vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

WordPress Paypal Currency Converter Basic For Woocommerce 1.3 File Read

Exploit Title: Paypal Currency Converter Basic For Woocommerce File Read Google Dork: inurl:"paypal-currency-converter-basic-for-woocommerce" Date: 10/06/2015 Exploit Author: Kuroi'SH Software Link: https://wordpress.org/plugins/paypal-currency-converter-basic-for-woocommerce/ Version: ';...

WooCommerce 2.0.20-2.3.10 - Object Injection / XXE

According to the researcher: The vulnerability is only present when WooCommerce’s "PayPal Identity Token" option is set...

WordPress Plugin Paypal Currency Converter Basic For WooCommerce - File Read

Exploit Title: Paypal Currency Converter Basic For Woocommerce File Read Google Dork: inurl:"paypal-currency-converter-basic-for-woocommerce" Date: 10/06/2015 Exploit Author: Kuroi'SH Software Link: https://wordpress.org/plugins/paypal-currency-converter-basic-for-woocommerce/ Version: ';...

Paypal Currencucy Converter Basic For Woocommerce <= 1.3 - File Read

The PayPal Currency Converter BASIC for WooCommerce WordPress plugin was affected by a File Read security vulnerability...