329 matches found
Form Maker by 10Web < 1.13.5 - Cross-Site Request Forgery (CSRF) to LFI
Form Maker by WD plugin suffers from a CSRF issue that could lead to an LFI attack...
WordPress plugin ad manager wd arbitrary file download vulnerability
WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. An arbitrary file download vulnerability exists in the WordPress plugin ad manager wd. An attacker can exploit the...
WordPress Ad Manager WD 1.0.11 Arbitrary File Download
Exploit Title: WordPress Plugin ad manager wd v1.0.11 - Arbitrary File Download Google Dork: N/A Date: 25.01.2019 Vendor Homepage: https://web-dorado.com/products/wordpress-ad-manager-wd.html Software: https://wordpress.org/plugins/ad-manager-wd Version: 1.0.11 Tested on: Win7 x64, Exploit Author...
WordPress Plugin Ad Manager WD 1.0.11 - Arbitrary File Download
WordPress Plugin Ad Manager WD 1.0.11 - Arbitrary File Download Exploit Title: WordPress Plugin ad manager wd v1.0.11 - Arbitrary File Download Google Dork: N/A Date: 25.01.2019 Vendor Homepage: https://web-dorado.com/products/wordpress-ad-manager-wd.html Software:...
WordPress Plugin Ad Manager WD 1.0.11 - Arbitrary File Download
Exploit Title: WordPress Plugin ad manager wd v1.0.11 - Arbitrary File Download Google Dork: N/A Date: 25.01.2019 Vendor Homepage: https://web-dorado.com/products/wordpress-ad-manager-wd.html Software: https://wordpress.org/plugins/ad-manager-wd Version: 1.0.11 Tested on: Win7 x64, Exploit Author...
CVE-2018-16164
Cross-site scripting vulnerability in Event Calendar WD version 1.1.21 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2018-16164
Cross-site scripting vulnerability in Event Calendar WD version 1.1.21 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors...
Cross site scripting
Cross-site scripting vulnerability in Event Calendar WD version 1.1.21 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2018-16164
CVE-2018-16164 is a stored cross-site scripting vulnerability in the WordPress plugin Event Calendar WD (Web-Dorado) for version 1.1.21 and earlier. The flaw allows a logged-in attacker to inject arbitrary scripts/HTML via unspecified vectors (CWE-79). Impact is an arbitrary script execution in a...
CVE-2018-16164
Cross-site scripting vulnerability in Event Calendar WD version 1.1.21 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2018-16164
Cross-site scripting vulnerability in Event Calendar WD version 1.1.21 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2018-16164: Improper Neutralization of Input During Web Page Generation
Cross-site scripting vulnerability in Event Calendar WD version 1.1.21 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors...
PT-2019-9229
Name of the Vulnerable Software and Affected Versions Event Calendar WD versions 1.1.21 and earlier Description A cross-site scripting issue allows remote authenticated attackers to inject arbitrary web script or HTML. Recommendations For Event Calendar WD versions 1.1.21 and earlier, update to a...
Western Digital My Cloud / WD Cloud Products Detection Consolidation
Consolidation of Western Digital My Cloud product Called Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you...
WordPress Plugin Event Calendar WD Cross-Site Scripting Vulnerability
WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress plugin Event Calendar WD, which could allow an attacker to execu...
JVN#75738023: WordPress plugin "Event Calendar WD" vulnerable to cross-site scripting
The WordPress plugin "Event Calendar WD" provided by Web-Dorado contains a stored cross-site scripting vulnerability CWE-79. Impact An arbitrary script may be executed on a logged-in user's web browser. Solution Update the plugin Update the plugin according to the information provided by the...
Event Calendar WD <= 1.1.21 - Cross-Site Scripting (XSS)
The Event Calendar WD – Responsive Event Calendar plugin WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...
Western Digital WD TV Detection
Detection of Western Digital WD TV. The script sends a connection request to the server and attempts to detect Western Digital WD TV and to extract its firmware version. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyrigh...
CVE-2018-10504
The CVE-2018-10504 entry concerns the WordPress plugin WebDorado Form Maker by WD, version prior to 1.12.24, which is vulnerable to CSV injection. The root cause is that CSV data exported by the Form Maker form can be crafted to execute commands when opened by a user with sufficient privileges, e...