5452 matches found
WordPress Plugin Slider Revolution <= 4.1.4 任意文件下载漏洞
所涉及文件：/incphp/framework/baseadmin.class.php //if not inside plugin don't continue if$this-isInsidePlugin == true self::addActionself::ACTIONADDSCRIPTS, "addCommonScripts"; self::addActionself::ACTIONADDSCRIPTS, "onAddScripts"; //a must event for any admin. call onActivate function...
WordPress Testimonial Slider Plugin <= 1.2.1 - Multiple Vulnerabilities
This plugin is prone to an authenticated stored cross site scripting and cross site request forgery vulnerabilities. Solution Update the plugin...
WordPress Testimonial Slider Plugin <= 1.2.1 - Multiple Vulnerabilities
This plugin is prone to an authenticated stored cross site scripting and cross site request forgery vulnerabilities. Solution Update the plugin...
Testimonial Slider <= 1.2.1 - Authenticated Stored Cross-Site Scripting (XSS) & CSRF
This vulnerability needs administrator privileges to exploit. Editor and author roles do not have the necessary permissions to create new sliders, contrary to what the original advisory says. However, this vulnerability can be exploited by a malicious actor by combining the XSS with CSRF to...
WordPress Testimonial Slider 1.2.1 Cross Site Scripting
GhostMail Exploit : For Exploiting This Vulnerability Install Testimonial Slider Plugin Then Create New Slider In Slider Name Input Place Your JavaScript Code After Creating Slider JavaScript Code Will Be Executed . Image POC : Vulnerable Code : Slider ID = For Patching : Slider ID = This...
WordPress Captain Slider Plugin <= 1.0.6 - Cross Site Scripting (XSS)
Because of this vulnerability, the attackers can inject arbitrary web script or HTML. Solution Update the plugin...
Captain Slider 1.0.6 - Cross-Site Scripting (XSS)
The captain-slider WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...
WordPress Captain Slider Plugin <= 1.0.6 - Cross Site Scripting (XSS)
Because of this vulnerability, the attackers can inject arbitrary web script or HTML. Solution Update the plugin...
WordPress Plugin Responsive Thumbnail Slider 1.0 - Arbitrary File Upload
WordPress Plugin Responsive Thumbnail Slider 1.0 - Arbitrary File Upload Exploit Title: Wordpress Responsive Thumbnail Slider Arbitrary File Upload Date: 2015/8/29 Exploit Author: Arash Khazaei Vendor Homepage: https://wordpress.org/plugins/wp-responsive-thumbnail-slider/ Software Link:...
WordPress Responsive Thumbnail Slider Plugin <= 1.0 - Multiple Vulnerabilities
This plugin is prone to a cross site scripting and cross site request forgery vulnerabilities. Solution Update the plugin...
WordPress Responsive Thumbnail Slider Plugin 1.0 - XSS / Arbitrary File Upload Vulnerabilities
Exploit for php platform in category web applications " name="thumbnails" " style="width:50px" height="50px"/ input type="checkbox" val...
Thumbnail Carousel Slider < 1.0.1 - Stored Cross-Site Scripting (XSS) & CSRF
The original advisory states that this vulnerability is exploitable with editor and author roles but this is incorrect. Only the administrator role by default can trigger this vulnerability. However, CSRF on the image upload form makes this exploitable by a malicious actor...
WordPress Responsive Thumbnail Slider Arbitrary File Upload
This module exploits an arbitrary file upload vulnerability in Responsive Thumbnail Slider Plugin v1.0 for WordPress post authentication. Module Options msf use exploit/multi/http/wp/responsivethumbnailsliderupload msf undefinedresponsivethumbnailsliderupload show actions ...actions... msf...
WordPress Responsive Thumbnail Slider 1.0 Shell Upload
POC : For Exploiting This Vulnerability : Go To Add Image Section And Upload File By Self Plugin Uploader Then Upload File With Double Extension Image And By Using A BurpSuite Or Tamper Data Change The File Name From Shell.php.jpg To Shell.php And Shell Is Uploaded . :...
WordPress Captain Slider 1.0.6 Cross Site Scripting
--e89a8ff1ccaefae749051e667db5 Content-Type: text/plain; charset=UTF-8 --e89a8ff1ccaefae749051e667db5 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Exploit Title: Wordpress Captain Slider St...
WordPress Plugin Responsive Thumbnail Slider 1.0 - Arbitrary File Upload
Exploit Title: Wordpress Responsive Thumbnail Slider Arbitrary File Upload Date: 2015/8/29 Exploit Author: Arash Khazaei Vendor Homepage: https://wordpress.org/plugins/wp-responsive-thumbnail-slider/ Software Link: https://downloads.wordpress.org/plugin/wp-responsive-thumbnail-slider.zip Version:...
Smart Slider 2 <= 2.3.11 - Authenticated Reflected Cross-Site Scripting (XSS)
The smart-slider-2 WordPress plugin was affected by an Authenticated Reflected Cross-Site Scripting XSS security vulnerability...
WordPress Smart Slider 2 Plugin <= 2.3.11 - Reflected XSS
Because of this vulnerability, authenticated administrators can inject HTML or JS code. Solution Update the plugin...