34 matches found
WordPress-File-Upload-4.24.11---Unauthenticated-Path-Traversal
WordPress-File-Upload-4.24.11---Unauthenticated-Path-Traversal CVE-2024-9047 WordPress WP File Upload 플러그인버전 = 4.24.11의 임의 파일 읽기 취약점을 탐지하고 악용하기 위한 Python 기반 보안 도구입니다...
CVE-2024-6651
CVE-2024-6651 POC XSS - CVE-2024-6651 CVE-2024-6651の脆弱性に対する実用的なPoCです。WordPressのプラグインWP File Upload 4.24.8に影響し、Reflected Cross-Site Scripting XSS を引き起こします。 📌 説明 この脆弱性は、WP File Uploadプラグインの管理パネルにおいて、サニタイズされていないパラメータを介して任意のJavaScriptコードの注入を許容します。 攻撃はFile Browser機能の dir...
CVE-POC
SecNeural // CVE PoC Collection Authorized, defensive vulnera...
EUVD-2014-1277
Malware in sbrugna...
EUVD-2015-9180
Malware in sbrugna...
EUVD-2015-9181
Malware in sbrugna...
CVE-2014-125110
A vulnerability has been found in wp-file-upload Plugin up to 2.4.3 on WordPress and classified as problematic. Affected by this vulnerability is the function wfuajaxactioncallback of the file lib/wfuajaxactions.php. The manipulation leads to cross site scripting. The attack can be launched...
CVE-2014-125110 wp-file-upload Plugin wfu_ajaxactions.php wfu_ajax_action_callback cross site scripting
A vulnerability has been found in wp-file-upload Plugin up to 2.4.3 on WordPress and classified as problematic. Affected by this vulnerability is the function wfuajaxactioncallback of the file lib/wfuajaxactions.php. The manipulation leads to cross site scripting. The attack can be launched...
PT-2024-10552 · WordPress · Wp-File-Upload
Name of the Vulnerable Software and Affected Versions: wp-file-upload Plugin versions up to 2.4.3 Description: A vulnerability has been found in the wp-file-upload Plugin, which is classified as problematic. The issue affects the function wfu ajax action callback of the file lib/wfu...
CVE-2014-125110: Improper Neutralization of Input During Web Page Generation
A vulnerability has been found in wp-file-upload Plugin up to 2.4.3 on WordPress and classified as problematic. Affected by this vulnerability is the function wfuajaxactioncallback of the file lib/wfuajaxactions.php. The manipulation leads to cross site scripting. The attack can be launched...
WordPress plugin wp-file-upload 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
WordPress wp-file-upload plugin code issue vulnerability (CNVD-2019-30990)
WordPress is a set of blogging platform developed by WordPress Foundation using PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers. wp-file-upload is a file upload plugin used in it. A code issue vulnerability exists in the WordPress wp-file-upload plugin,...
WordPress wp-file-upload plugin code issue vulnerability
WordPress is a set of blogging platform developed by WordPress Foundation using PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers. wp-file-upload is a file upload plugin used in it. A code issue vulnerability exists in the WordPress wp-file-upload plugin,...
WordPress wp-file-upload plugin code issue vulnerability (CNVD-2019-30984)
WordPress is a set of blogging platform developed by WordPress Foundation using PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers. wp-file-upload is a file upload plugin used in it. There is a code issue vulnerability in the WordPress wp-file-upload plugi...
CVE-2015-9340
The wp-file-upload plugin before 3.0.0 for WordPress has insufficient restrictions on upload of php, js, pht, php3, php4, php5, phtml, htm, html, and htaccess files...
Design/Logic Flaw
The wp-file-upload plugin before 3.4.1 for WordPress has insufficient restrictions on upload of .php.js files...
CVE-2015-9338
The wp-file-upload plugin before 2.5.0 for WordPress has insufficient restrictions on upload of .php files...
CVE-2015-9338
CVE-2015-9338 affects the WordPress wp-file-upload plugin prior to version 2.5.0. The vulnerability arises from insufficient restrictions on uploading PHP files, allowing potentially harmful PHP uploads through the plugin. Affected product is the wp-file-upload plugin for WordPress; root cause is...
