33190 matches found
CVE-2015-1000001
Remote file upload vulnerability in fast-image-adder v1.1 Wordpress plugin...
Remote file inclusion
Remote file download vulnerability in recent-backups v0.7 wordpress plugin...
Design/Logic Flaw
Remote file upload vulnerability in mailcwp v1.99 wordpress plugin...
Remote file inclusion
Remote file download vulnerability in candidate-application-form v1.0 wordpress plugin...
Remote file inclusion
Remote file download vulnerability in wptf-image-gallery v1.03...
Design/Logic Flaw
Remote file upload vulnerability in fast-image-adder v1.1 Wordpress plugin...
Design/Logic Flaw
Remote file upload vulnerability in wordpress plugin csv2wpec-coupon v1.1...
Remote file inclusion
Local File Inclusion Vulnerability in mypixs v0.3 wordpress plugin...
Remote file inclusion
Remote file download in simple-image-manipulator v1.0 wordpress plugin...
CVE-2015-1000001
The CVE-2015-1000001 entry maps to WordPress plugin fast-image-adder (v1.1 and earlier). A Remote File Upload vulnerability exists in the uploader script (fast-image-adder-uploader.php), allowing an unauthenticated attacker to upload arbitrary files to the server (potentially leading to web shell...
CVE-2015-1000010
Remote file download in simple-image-manipulator v1.0 wordpress plugin...
CVE-2015-1000013
Remote file upload vulnerability in wordpress plugin csv2wpec-coupon v1.1...
CVE-2015-1000001
Remote file upload vulnerability in fast-image-adder v1.1 Wordpress plugin...
CVE-2015-1000005
CVE-2015-1000005 affects the WordPress plugin Candidate Application Form (v1.0;
CVE-2015-1000006
CVE-2015-1000006 corresponds to a remote file download vulnerability in the WordPress plugin recent-backups v0.7. Connected sources confirm a file‑download flaw in the plugin, with OpenVAS and WPVulnDB noting directory traversal/file download risk and WPEX exploit notes that download-file.php doe...
CVE-2015-1000005
Remote file download vulnerability in candidate-application-form v1.0 wordpress plugin...
CVE-2015-1000007
Remote file download vulnerability in wptf-image-gallery v1.03...
CVE-2015-1000000
CVE-2015-1000000 affects the MailCWP WordPress plugin (around v1.99/v1.100) via an unauthenticated arbitrary file upload vulnerability. The root cause is improper access control in the upload logic (mailcwp-upload.php), allowing any user to upload a file without authentication or type checks, pot...
CVE-2015-1000007
CVE-2015-1000007 corresponds to a remote file download vulnerability in the WordPress plugin “wptf-image-gallery” v1.03. The issue arises in the plugin’s file handling in lib-mbox/ajax_load.php, where user input is not properly sanitized and access control is not enforced, enabling an unauthentic...