CVE-2015-9488: Exposure of Sensitive Information to an Unauthorized Actor

The ThemeMakers Almera Responsive Portfolio Site Template component through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information such as userlogin, userpass, and useremail values via a direct request for the wp-content/uploads/tmmdbmigrate/wpusers.dat URI...

PT-2019-7448

Name of the Vulnerable Software and Affected Versions ThemeMakers Goodnex Premium Responsive theme through 2015-05-15 for WordPress Description The issue allows remote attackers to obtain sensitive information, such as user login, user pass, and user email values, via a direct request for the...

PT-2019-7450

Name of the Vulnerable Software and Affected Versions ThemeMakers Blessing Premium Responsive theme through 2015-05-15 for WordPress Description The issue allows remote attackers to obtain sensitive information, such as user login, user pass, and user email values, via a direct request for the...

PT-2019-7442

Name of the Vulnerable Software and Affected Versions The ThemeMakers Invento Responsive Gallery/Architecture Template component through 2015-05-15 for WordPress Description The issue allows remote attackers to obtain sensitive information, such as user login, user pass, and user email values, vi...

PT-2019-7446

Name of the Vulnerable Software and Affected Versions ThemeMakers Almera Responsive Portfolio theme through 2015-05-15 for WordPress Description The issue allows remote attackers to obtain sensitive information, such as user login, user pass, and user email values, via a direct request for the...

PT-2019-7447

Name of the Vulnerable Software and Affected Versions ThemeMakers Almera Responsive Portfolio Site Template component through 2015-05-15 for WordPress Description The issue allows remote attackers to obtain sensitive information, such as user login, user pass, and user email values, via a direct...

PT-2019-7445

Name of the Vulnerable Software and Affected Versions ThemeMakers Axioma Premium Responsive theme through 2015-05-15 for WordPress Description The issue allows remote attackers to obtain sensitive information, such as user login, user pass, and user email values, via a direct request for the...

CVE-2015-9482: Exposure of Sensitive Information to an Unauthorized Actor

The ThemeMakers Car Dealer / Auto Dealer Responsive theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information such as userlogin, userpass, and useremail values via a direct request for the wp-content/uploads/tmmdbmigrate/wpusers.dat URI...

CVE-2015-9485: Exposure of Sensitive Information to an Unauthorized Actor

The ThemeMakers Accio Responsive Parallax One Page Site Template component through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information such as userlogin, userpass, and useremail values via a direct request for the wp-content/uploads/tmmdbmigrate/wpusers.dat URI...

PT-2019-7444

Name of the Vulnerable Software and Affected Versions ThemeMakers Accio Responsive Parallax One Page Site Template component through 2015-05-15 for WordPress Description The issue allows remote attackers to obtain sensitive information, such as user login, user pass, and user email values, via a...

WordPress jtrt-responsive-tables plugin SQL injection vulnerability

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. jtrt-responsive-tables is used in one of the HTML form editor plugin . A SQL injection vulnerability exists in the WordPress...

CVE-2016-10975

The fluid-responsive-slideshow plugin before 2.2.7 for WordPress has reflected XSS via the skin parameter...

CVE-2016-10974

The fluid-responsive-slideshow plugin before 2.2.7 for WordPress has frssave CSRF with resultant stored XSS...

CVE-2016-10975

The fluid-responsive-slideshow plugin before 2.2.7 for WordPress has reflected XSS via the skin parameter...

CVE-2016-10975

The CVE-2016-10975 entry concerns the Fluid Responsive Slideshow WordPress plugin (pre-2.2.7). It describes a reflected XSS vulnerability via the skin parameter, with partial integrity impact and no confidentiality/availability impact per the NVD CVSS data, and with user interaction required in t...

CVE-2016-10974

The CVE-2016-10974 vulnerability affects the Fluid Responsive Slideshow WordPress plugin prior to version 2.2.7, where the frs_save CSRF flaw enables stored XSS. Red Hat and CVE records corroborate the issue as a CSRF-related stored XSS in the plugin for WordPress. The weakness arises in the frs_...

CVE-2016-10975: Improper Neutralization of Input During Web Page Generation

The fluid-responsive-slideshow plugin before 2.2.7 for WordPress has reflected XSS via the skin parameter...

CVE-2016-10974: Cross-Site Request Forgery (CSRF)

The fluid-responsive-slideshow plugin before 2.2.7 for WordPress has frssave CSRF with resultant stored XSS...

PT-2019-7768

Name of the Vulnerable Software and Affected Versions fluid-responsive-slideshow plugin versions prior to 2.2.7 Description The issue is related to reflected XSS, which occurs via the skin parameter. This allows for potential malicious script injection and execution. Recommendations For versions...

PT-2019-7767

Name of the Vulnerable Software and Affected Versions fluid-responsive-slideshow plugin versions prior to 2.2.7 Description The issue concerns a CSRF vulnerability that leads to stored XSS. This occurs in the frs save function, allowing for malicious input to be stored and executed. Recommendatio...