Design/Logic Flaw

The ThemeMakers Goodnex Premium Responsive theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information such as userlogin, userpass, and useremail values via a direct request for the wp-content/uploads/tmmdbmigrate/wpusers.dat URI...

CVE-2015-9482

The ThemeMakers Car Dealer / Auto Dealer Responsive theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information such as userlogin, userpass, and useremail values via a direct request for the wp-content/uploads/tmmdbmigrate/wpusers.dat URI...

CVE-2015-9492

CVE-2015-9492 affects ThemeMakers SmartIT Premium Responsive theme for WordPress (up to 2015-05-15). The vulnerability allows remote attackers to disclose sensitive user data (user_login, user_pass, user_email) by requesting the file wp-content/uploads/tmm_db_migrate/wp_users.dat. The root cause ...

CVE-2015-9491

The CVE-2015-9491 entry concerns ThemeMakers Blessing Premium Responsive theme for WordPress (

CVE-2015-9489

The ThemeMakers Goodnex Premium Responsive theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information such as userlogin, userpass, and useremail values via a direct request for the wp-content/uploads/tmmdbmigrate/wpusers.dat URI...

CVE-2015-9489

The CVE-2015-9489 entry concerns ThemeMakers Goodnex Premium Responsive theme for WordPress (through 2015-05-15). The connected documents specify that the vulnerability allows remote attackers to obtain sensitive information (user_login, user_pass, user_email) by directly requesting the file wp-c...

CVE-2015-9488

The ThemeMakers Almera Responsive Portfolio Site Template component through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information such as userlogin, userpass, and useremail values via a direct request for the wp-content/uploads/tmmdbmigrate/wpusers.dat URI...

CVE-2015-9487

The CVE-2015-9487 issue affects the ThemeMakers Almera Responsive Portfolio theme for WordPress (up to 2015-05-15). A direct request to wp-content/uploads/tmm_db_migrate/wp_users.dat allows remote attackers to obtain sensitive data (user_login, user_pass, user_email). Root cause is information di...

CVE-2015-9485

The CVE-2015-9485 entry concerns ThemeMakers Accio Responsive Parallax One Page Site Template for WordPress (pre-2015-05-15). Affected component/processes allow remote attackers to retrieve sensitive credentials by directly requesting wp-content/uploads/tmm_db_migrate/wp_users.dat, leading to exp...

CVE-2015-9483

The CVE-2015-9483 entry concerns ThemeMakers Invento Responsive Gallery/Architecture Template for WordPress, where an information disclosure vulnerability allows remote attackers to obtain sensitive user data (user_login, user_pass, user_email) by directly requesting wp-content/uploads/tmm_db_mig...

WordPress jtrt-responsive-tables plugin SQL injection vulnerability

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. jtrt-responsive-tables is used in one of the HTML form editor plugin . A SQL injection vulnerability exists in the WordPress...

CVE-2016-10975

The fluid-responsive-slideshow plugin before 2.2.7 for WordPress has reflected XSS via the skin parameter...

CVE-2016-10975

The fluid-responsive-slideshow plugin before 2.2.7 for WordPress has reflected XSS via the skin parameter...

CVE-2016-10974

The fluid-responsive-slideshow plugin before 2.2.7 for WordPress has frssave CSRF with resultant stored XSS...

CVE-2016-10975

The CVE-2016-10975 entry concerns the Fluid Responsive Slideshow WordPress plugin (pre-2.2.7). It describes a reflected XSS vulnerability via the skin parameter, with partial integrity impact and no confidentiality/availability impact per the NVD CVSS data, and with user interaction required in t...

CVE-2016-10974

The CVE-2016-10974 vulnerability affects the Fluid Responsive Slideshow WordPress plugin prior to version 2.2.7, where the frs_save CSRF flaw enables stored XSS. Red Hat and CVE records corroborate the issue as a CSRF-related stored XSS in the plugin for WordPress. The weakness arises in the frs_...

CVE-2017-18597

The jtrt-responsive-tables plugin before 4.1.2 for WordPress has SQL Injection via the admin/class-jtrt-responsive-tables-admin.php tableId parameter...

CVE-2017-18597

The jtrt-responsive-tables plugin before 4.1.2 for WordPress has SQL Injection via the admin/class-jtrt-responsive-tables-admin.php tableId parameter...

CVE-2017-18597

The jtrt-responsive-tables plugin before 4.1.2 for WordPress has SQL Injection via the admin/class-jtrt-responsive-tables-admin.php tableId parameter...

CVE-2017-18597

The CVE-2017-18597 vulnerability affects the WordPress plugin jtrt-responsive-tables (before 4.1.2). Root cause: SQL Injection in admin/class-jtrt-responsive-tables-admin.php via the tableId parameter, exploitable via crafted POST data (authenticated user context shown in PoC). Impact per sources...