3953 matches found
WordPress Security Vulnerabilities
WordPress is a blogging platform developed by the WordPress Wordpress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Ultimate Member plugin is one of the plugins used to create membership sites or online communities. A security vulnerability...
Ultimate Member plugin before for WordPress security vulnerability
WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A security vulnerability exists in Ultimate Member plugin before 2.1.12 for WordPress, which can be...
PT-2021-11936
Name of the Vulnerable Software and Affected Versions: Ultimate Member plugin versions prior to 2.1.12 Description: An issue allows unauthenticated privilege escalation via user meta. An attacker can supply an array parameter for sensitive metadata, such as the wp capabilities user meta that...
CVE-2020-35627
CVE-2020-35627 affects Ultimate WooCommerce Gift Cards 3.0.2. The issue is a file-upload vulnerability in the Custom GiftCard Template that enables remote code execution. By triggering the image-upload flow, an attacker can rename the image extension to PHP and execute PHP code on the server. Thi...
CVE-2020-35627
Ultimate WooCommerce Gift Cards 3.0.2 is affected by a file upload vulnerability in the Custom GiftCard Template that can remotely execute arbitrary code. Once it contains the function "Custom Gift Card Template", the function of uploading a custom image is used, changing the name of the image...
CVE-2020-35135
The ultimate-category-excluder plugin before 1.2 for WordPress allows ultimate-category-excluder.php CSRF...
Cross site request forgery (csrf)
The ultimate-category-excluder plugin before 1.2 for WordPress allows ultimate-category-excluder.php CSRF...
CVE-2020-35135
The ultimate-category-excluder plugin before 1.2 for WordPress allows ultimate-category-excluder.php CSRF...
CVE-2020-35135
The CVE-2020-35135 issue affects the WordPress plugin “ultimate-category-excluder” (versions prior to 1.2). The root cause is a CSRF vulnerability in the ultimate-category-excluder.php file stemming from insufficient CSRF protections on the plugin’s options page. Affected component: plugin PHP co...
WordPress Ultimate Category Excluder plugin <= 1.1 - Cross-Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability found by SCA AppSec Checkmarx in WordPress Ultimate Category Excluder plugin versions = 1.1. Solution Update the WordPress Ultimate Category Excluder plugin to the latest available version at least 1.2...
Ultimate Category Excluder < 1.2 - Cross-Site Request Forgery
The plugin did not check for CSRF nonce in its options page, allowing attacker to perform CSRF attacks against logged in users...
WordPress ultimate-category-excluder plugin 跨站请求伪造漏洞
WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site request forgery vulnerability exists in WordPress Ultimate-category-excluder Plugin...
PT-2020-17265 · WordPress · Ultimate-Category-Excluder
Name of the Vulnerable Software and Affected Versions: ultimate-category-excluder plugin versions prior to 1.2 Description: The issue allows for CSRF in the ultimate-category-excluder.php file. Recommendations: For versions prior to 1.2, update to version 1.2 or later to resolve the issue...
Ultimate Reviews < 2.1.33 - Unauthenticated PHP Object Injection
There were three occurrences in the plugin where an unauthenticated user could inject a serialized PHP object via a cookie, which could potentially lead to a PHP object injection vulnerability...
WordPress Ultimate Reviews plugin <= 2.1.32 - Insecure Deserialization vulnerability leading to unauthenticated PHP object injection
Insecure Deserialization vulnerability leading to unauthenticated PHP object injection found by Jerome Bruandet NinTechNet in WordPress Ultimate Reviews plugin versions = 2.1.32. Solution Update the WordPress Ultimate Reviews plugin to the latest available version at least 2.1.33...
WordPress Ultimate Member Plugin <= 2.1.11 Multiple Privilege Escalation Vulnerabilities
The WordPress plugin Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it...
Ultimate Member Plugin for WordPress Allows Site Takeover
A WordPress plugin installed on more than 100,000 sites has three critical security bugs that each allow privilege escalation – and potentially full control over a target WordPress site. The plugin, called Ultimate Member, allows web admins to add user profiles and membership areas to their web...
Ultimate Member < 2.1.12 - Unauthenticated Privilege Escalation via User Roles
Due to the lack of filtering on the role parameter that could be supplied during the registration process, an attacker could supply the role parameter with a WordPress capability or any custom Ultimate Member role and effectively be granted those privileges. $username, 'firstname-'. $formid =...
Ultimate Member < 2.1.12 - Authenticated Privilege Escalation via Profile Update
Due to the fact that Ultimate Member allowed the creation of new roles, this plugin also made it possible for site administrators to grant secondary Ultimate Member roles for all users upon a /wp-admin profile update. PoC $wpuser, 'pwd' = $wppass, 'rememberme' = 'forever', 'wp-submit' = 'Log+In',...
VulnCheck KEV: CVE-2020-36155
An issue was discovered in the Ultimate Member plugin before 2.1.12 for WordPress, aka Unauthenticated Privilege Escalation via User Meta. An attacker could supply an array parameter for sensitive metadata, such as the wpcapabilities user meta that defines a user's role. During the...