4005 matches found
Ultimate Weather Plugin <= 1.0 - Cross-Site Scripting
The ultimate-weather plugin 1.0 for WordPress contains a cross-site scripting vulnerability. id: CVE-2014-4561 info: name: Ultimate Weather Plugin = 1.0 - Cross-Site Scripting author: daffainfo severity: medium description: The ultimate-weather plugin 1.0 for WordPress contains a cross-site...
WordPress Shortcodes Ultimate <= 5.0.0 - Authenticated Remote Code Execution
Shortcodes Ultimate plugin before 5.0.1 for WordPress contains a remote code execution caused by a filter in meta, post, or user shortcode, letting remote attackers execute arbitrary code, exploit requires sending crafted shortcode data. id: CVE-2017-18580 info: name: WordPress Shortcodes Ultimat...
WordPress Image Hover Ultimate - Unauthenticated Settings Update
Unauthenticated Arbitrary Options Update vulnerability leading to full website compromise discovered in Image Hover Effects Ultimate versions = 9.6.1 WordPress plugin. id: CVE-2021-36888 info: name: WordPress Image Hover Ultimate - Unauthenticated Settings Update author: riteshs4hu severity:...
CVE-2024-1071-SQL-Injection
Proof of concept CVE-2024-1071: WordPress Vulnerability Exploited Disclaimer : This Proof of Concept POC is made for educational and ethical testing purposes only. Usage of this tool for attacking targets without prior mutual consent is illegal. It is the end user’s responsibility to obey all...
CVE-2023-3460
CVE-2023-3460 The Ultimate Member WordPress plugin before 2.6.7 does not prevent visitors from creating user accounts with arbitrary capabilities, effectively allowing attackers to create administrator accounts at will. This script perform an exploit for this vulnerability and scan different...
Ultimate-Social-Scrapers
Ultimate Social Scrapers by Cyfy Labs 📢 Important Update 📢 Cyfy Labs is no longer active. Thank you for all your support on this journey! 🫶 Cyfy Labs provides modern social media scraping tools. Our products enable businesses and researchers to collect hundreds of public data points for use cases...
CVE-2024-8425
वर्डप्रेस WooCommerce Ultimate Gift Card = 2.6.0 - अप्रमाणित मनमानी फ़ाइल अपलोड CVE-2024-8425 वर्डप्रेस के लिए WooCommerce Ultimate Gift Card प्लगइन सभी संस्करणों में 2.6.0 तक और सहित 'mwbwgmpreviewmail' और 'mwbwgmwoocommerceaddcartitemdata' फ़ंक्शंस में अपर्याप्त फ़ाइल प्रकार मान्यता के कारण...
CVE-2024-12157
CVE-2024-12157 Popup – MailChimp, GetResponse and ActiveCampaign Intergrations = 3.2.6 - حقن SQL بدون مصادقة الوصف إن ملحق Popup – MailChimp, GetResponse and ActiveCampaign Intergrations لووردبريس معرّض لثغرة حقن SQL عبر المعامل 'id' في إجراء AJAX 'upcdeletedbrecord' في جميع الإصدارات حتى 3.2.6 و...
CVE-2024-11423
CVE-2024-11423 Ultimate Gift Cards for WooCommerce = 3.0.6 - Absence d'autorisation menant à une faille d'argent infini Description Le plugin Ultimate Gift Cards for WooCommerce – Créer des cartes cadeaux WooCommerce, des bons cadeaux, échanger et gérer des coupons cadeaux numériques. Offrir des...
CVE-2026-85309
Missing Authorization vulnerability in Supsystic Ultimate Maps by Supsystic allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Ultimate Maps by Supsystic: from n/a through 1.5.3...
EUVD-2026-70553
Missing Authorization vulnerability in Supsystic Ultimate Maps by Supsystic allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Ultimate Maps by Supsystic: from n/a through 1.5.3...
CVE-2026-85309
CVE-2026-85309 is a Missing Authorization (Broken Access Control) vulnerability in the Ultimate Maps by Supsystic WordPress plugin, affecting versions from unspecified through 1.5.3 . Unauthenticated attackers can exploit incorrectly configured access control security levels over the network with...
CVE-2026-85309 WordPress Ultimate Maps by Supsystic plugin <= 1.5.3 - Broken Access Control vulnerability
Missing Authorization vulnerability in Supsystic Ultimate Maps by Supsystic allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Ultimate Maps by Supsystic: from n/a through 1.5.3...
WordPress Ultimate Maps by Supsystic plugin <= 1.5.3 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Supakiad S. m3ez in WordPress Plugin Ultimate Maps by Supsystic versions = 1.5.3...
exploit-CVE-2023-3460
title: "أمن نظم المعلومات - CVE 2023-38408" تحليل واستغلال CVE-2023-3460 CVE ID| درجة CVSS| تاريخ الاكتشاف| البرنامج المساعد المتأثر| نوع الثغرة الأمنية ---|---|---|---|--- CVE-2023-3460| | 07/04/2023| Ultimate Member| وصول إداري غير مصرح به الملخص مقدمة الآلية العامة للثغرة الأمنية آلية إدارة...
CVE-2024-56278
CVE-2024-56278 1️⃣ نوع المكوّن إضافة ووردبريس 2️⃣ تفاصيل المكوّن اسم المكوّن WP Ultimate Exporter الإصدار القابل للاستغلال = 2.9.1 معرّف المكوّن wp-ultimate-exporter رابط المكوّن https://wordpress.org/plugins/wp-ultimate-exporter/ 3️⃣ OWASP 2017: TOP 10 فئة الثغرة A4: تصميم غير آمن نوع الثغرة تنفيذ...
CVE-2025-60378
CVE-2025-60378 : Injection HTML stockée dans RISE Ultimate Project Manager & CRM ⚠️ Avis de sécurité Une vulnérabilité critique d'injection HTML stockée affectant les factures, la messagerie et les communications automatisées -ff6600 📋 Vue d'ensemble Une vulnérabilité critique d'injection HTML...
CVE-2026-84760
CVE-2026-84760 is an unauthenticated Broken Access Control vulnerability in the Ultimate Gift Cards For WooCommerce WordPress plugin, affecting versions