WordPress Antena_Ri Institute Themes Open Redirect Vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. An open redirect vulnerability exists in WordPress AntenaRi Institute Themes. An attacker can successfully initiate a phishin...

WordPress Satoshi 2.0 Cross Site Request Forgery / File Upload

Exploit Title : WordPress Satoshi Themes 2.0 CSRF Arbitrary File Upload Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 05/06/2019 Vendor Homepage : vooshthemes.com - tecnoge.com - netsons.com WordPress Affected Versions : 4.7.13 - 3.4.2 Theme Affected Version :...

WordPress Tigin Themes Open Redirect Vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. An open redirect vulnerability exists in WordPress Tigin Themes. An attacker can successfully launch a phishing scam and stea...

WordPress Xunjin Themes Cross-Site Request Forgery Vulnerability

WordPress is a blogging platform based on the PHP language, which can be used to set up a website on a server that supports PHP and MySQL databases, and can also be used as a content management system CMS. A cross-site request forgery vulnerability exists in WordPress Xunjin Themes, where an...

WordPress Divi-Child Themes Open Redirect Vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. An open redirect vulnerability exists in WordPress Divi-Child Themes. Allows an attacker to target users of a malicious websi...

WordPress 4DMayi Themes Open Redirect Vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. An open redirect vulnerability exists in WordPress 4DMayi Themes. An attacker can successfully launch a phishing scam and ste...

WordPress Tigin Themes Open Redirect Vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. An open redirect vulnerability exists in WordPress Tigin Themes. An attacker can successfully launch a phishing scam and stea...

WordPress Jingke Themes Open Redirect Vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. An open redirect vulnerability exists in WordPress Jingke Themes. An attacker can successfully launch a phishing scam and ste...

WordPress jilijilibegin Themes LTS Open Redirect Vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. An open redirect vulnerability exists in WordPress jilijilibegin Themes LTS. An attacker can successfully initiate a phishing...

WordPress Jingke Themes Cross-Site Request Forgery Vulnerability

WordPress is a blogging platform based on the PHP language, which can be used to set up a website on a server that supports PHP and MySQL databases, and can also be used as a content management system CMS. WordPress Jingke Themes suffers from a cross-site request forgery vulnerability that could ...

WordPress Aliyun Themes Open Redirect Vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. An open redirection vulnerability exists in WordPress Aliyun Themes. An attacker can exploit the vulnerability to target user...

WordPress 4DMayi 4.6 Open Redirection

Exploit Title : WordPress 4DMayi Themes 4.6 Open Redirection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 25/05/2019 Vendor Homepage : zmingcx.com Information Link : zmingcx.com/begin.html WordPress Version : 4.9.10 Theme Version : 4.6 Category : WebApps...

WordPress Ninger 4.6 Open Redirection

Exploit Title : WordPress Ninger Themes 4.6 Open Redirection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 24/05/2019 Vendor Homepage : sh-ninger.com - zmingcx.com WordPress Affected Version : 4.9.x - 5.0.x Theme Affected Version : 4.6 Information Link :...

WordPress jilijilibegin LTS 4.6 Open Redirection

Exploit Title : WordPress jilijilibegin Themes LTS 4.6 Open Redirection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 24/05/2019 Vendor Homepage : zmingcx.com Theme Affected Version : LTS and 4.6 WordPress Affected Version : 5.1.1 Information Link :...

WordPress Tigin 1.0.5 Open Redirection

Exploit Title : WordPress Tigin Themes 1.0.5 Open Redirection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 24/05/2019 Vendor Homepage : tiginstitute.com - gilgalmediaarts.com Theme Affected Version : 1.0.5 WordPress Affected Version : 4.8.9 Information Link :...

WordPress Xunjin 4.6 Open Redirection

Exploit Title : WordPress Xunjin Themes 4.6 Open Redirection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 24/05/2019 Vendor Homepage : xunjinwang.com Theme Affected Version : 4.6 WordPress Affected Version : 4.9.10 Information Link :...

WordPress Jingke 1.0 Open Redirection

Exploit Title : WordPress Jingke Themes 1.0 Open Redirection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 24/05/2019 Vendor Homepage : hwaq.cc - zmingcx.com WordPress Affected Version : 4.9.x Theme Affected Version : 1.0 Information Link :...

WordPress Aliyun 5.2 Open Redirection

Exploit Title : WordPress Aliyun Themes 5.2 Open Redirection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 23/05/2019 Vendor Homepage : aliyunhelp.com - zmingcx.com Version : WordPress Version 4.9.10 - Theme Version 5.2 Tested On : Windows and Linux Category :...

WordPress Howsci 1.8 Open Redirection

Exploit Title : WordPress Howsci Themes 1.8 Open Redirection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 24/05/2019 Vendor Homepage : howsci.com Theme Affected Version : 1.8 WordPress Affected Version : 4.9.10 Information Link : howsci.com/tag/themes/ Tested...

WordPress WPGraphQL 0.2.3 Authentication Bypass / Information Disclosure

!/usr/bin/env python Author: Simone Quatrini of Pen Test Partners CVEs: 2019-9879, 2019-9880, 2019-9881 Tested on Wordpress 5.1.1 and wp-graphql 0.2.3 https://www.pentestpartners.com/security-blog/pwning-wordpress-graphql/ import argparse import requests import base64 import json import sys parse...