PICA Photo Gallery - Remote File Disclosure

The pica-photo-gallery WordPress plugin was affected by a Remote File Disclosure security vulnerability...

Social Discussions 6.1.1 - Remote File Inclusion

The Social Discussions WordPress plugin was affected by a Remote File Inclusion security vulnerability...

Advanced Custom Fields <= 3.5.1 - Remote File Inclusion

The Advanced Custom Fields WordPress plugin was affected by a Remote File Inclusion security vulnerability...

Floating Social Media Links <= 1.4.2 - fsml-admin.js.php wpp Parameter Remote File Inclusion

The Floating Social Media Links WordPress plugin was affected by a fsml-admin.js.php wpp Parameter Remote File Inclusion security vulnerability...

PictPress <= 0.91 - Remote File Disclosure

The pictpress WordPress plugin was affected by a Remote File Disclosure security vulnerability...

WordPress The Cotton Theme - Remote File Upload Vulnerability

WordPress The Cotton theme is prone to a remote file upload vulnerability. Solution Update the theme...

WordPress Anthology Theme <= 1.4.4 - Remote File Upload

WordPress Anthology theme is prone to a remote file upload vulnerability. Infected file is "upload-handler.php". Solution Update the theme...

WordPress Simple Fields Plugin 0.3.5 - Remote File Inclusion

This plugin is prone to a remote file inclusion vulnerability. Solution Update the plugin...

WordPress TT Guest Post Submit Plugin <= 1.0.0 - Remote File Inclusion

This plugin is prone to a tt-guest-post-submit-submit.php rootpath parameter remote file inclusion vulnerability. Solution Upgrade this plugin...

WordPress Global Flash Galleries Plugin - Remote File Upload

Because of this vulnerability, attacker could use the affected system to Host files. Solution Update the plugin...

WordPress Global Flash Galleries Plugin - Remote File Upload

Because of this vulnerability, attacker could use the affected system to Host files. Solution Update the plugin...

WordPress Global Flash Galleries Plugin - Remote File Upload

Because of this vulnerability, attacker could use the affected system to Host files. Solution Update the plugin...

WordPress Global Flash Galleries Plugin - Remote File Upload

Because of this vulnerability, attacker could use the affected system to Host files. Solution Update the plugin...

WordPress TT Guest Post Submit Plugin <= 1.0.0 - Remote File Inclusion

This plugin is prone to a tt-guest-post-submit-submit.php rootpath parameter remote file inclusion vulnerability. Solution Upgrade this plugin...

CVE-2012-6651

Multiple directory traversal vulnerabilities in the Vitamin plugin before 1.1.0 for WordPress allow remote attackers to access arbitrary files via a .. dot dot in the path parameter to 1 addheaders.php or 2 minify.php...

CVE-2014-3543

mod/imscp/locallib.php in Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 allows remote attackers to read arbitrary files via a package with a manifest file containing an XML external entity declaration in conjunction with an entity...

CVE-2014-3543

CVE-2014-3543 affects Moodle versions up to 2.7.1 (and earlier branches) via mod/imscp/locallib.php, where a package manifest containing an XML external entity declaration combined with an entity reference enables reading arbitrary files (XML External Entity issue affecting IMSCP resources/IMSCC)...

CMSimple 4.4.4 RFI / Code Execution / Default Password

Exploit Title : CMSimple 4.4.4 various security vulnerability Author : Govind Singh aka NullPort Vendor : http://cmsimple.org/ Download Link : http://www.cmsimple.org/downloadcounter/dlcount/count.php?id=31 Date : 26/07/2014 Discovered at : IHT Lab 1ND14N H4X0R5 T34M Love to : Manish Tanwar,...

WordPress MailPoet Newsletters Plugin Remote File Upload Vulnerability

WordPress MailPoet Plugin is prone to remote file upload vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CMSimple 4.4.4 - Remote File Inclusion

CMSimple 4.4.4 - Remote File Inclusion source: https://www.securityfocus.com/bid/68961/info CMSimple is prone to multiple security vulnerabilities including: 1. Multiple arbitrary PHP code-execution vulnerabilities 2. A weak authentication security-bypass vulnerability 3. Multiple security...