1285 matches found
CVE-2016-10959
The estatik plugin before 2.3.1 for WordPress has authenticated arbitrary file upload exploitable with CSRF via esmediaimages to wp-admin/admin-ajax.php...
Cross site request forgery (csrf)
The estatik plugin before 2.3.1 for WordPress has authenticated arbitrary file upload exploitable with CSRF via esmediaimages to wp-admin/admin-ajax.php...
Code injection
The newspaper theme before 6.7.2 for WordPress has script injection via tdadsheader to admin-ajax.php...
CVE-2016-10959
The estatik plugin before 2.3.1 for WordPress has authenticated arbitrary file upload exploitable with CSRF via esmediaimages to wp-admin/admin-ajax.php...
CVE-2016-10959
The estatik plugin before 2.3.1 for WordPress has authenticated arbitrary file upload exploitable with CSRF via esmediaimages to wp-admin/admin-ajax.php...
CVE-2016-10958
The estatik plugin before 2.3.0 for WordPress has unauthenticated arbitrary file upload via esmediaimages to wp-admin/admin-ajax.php...
PT-2019-7752
Name of the Vulnerable Software and Affected Versions Estatik plugin versions prior to 2.3.1 for WordPress Description The issue concerns an authenticated arbitrary file upload, which is also exploitable with CSRF, via the es media images parameter to the "wp-admin/admin-ajax.php" API endpoint...
PT-2019-7751
Name of the Vulnerable Software and Affected Versions Estatik plugin versions prior to 2.3.0 for WordPress Description The issue allows for unauthenticated arbitrary file upload. This is achieved by exploiting the es media images parameter in the "wp-admin/admin-ajax.php" API endpoint...
CVE-2016-10958: Unrestricted Upload of File with Dangerous Type
The estatik plugin before 2.3.0 for WordPress has unauthenticated arbitrary file upload via esmediaimages to wp-admin/admin-ajax.php...
CVE-2016-10959: Unrestricted Upload of File with Dangerous Type
The estatik plugin before 2.3.1 for WordPress has authenticated arbitrary file upload exploitable with CSRF via esmediaimages to wp-admin/admin-ajax.php...
PT-2019-8547
Name of the Vulnerable Software and Affected Versions Newspaper theme versions prior to 6.7.2 Description The issue concerns script injection via the td adsheader variable to the "admin-ajax.php" endpoint. This allows for malicious script execution. Recommendations For versions prior to 6.7.2,...
CVE-2017-18634: Improper Neutralization of Special Elements in Output Used by a Downstream Component
The newspaper theme before 6.7.2 for WordPress has script injection via tdadsheader to admin-ajax.php...
CVE-2019-12517: Improper Neutralization of Input During Web Page Generation
An XSS issue was discovered in the slickquiz plugin through 1.3.7.1 for WordPress. The savequizscore functionality available via the /wp-admin/admin-ajax.php endpoint allows unauthenticated users to submit quiz solutions/answers, which are stored in the database and later shown in the WordPress...
WordPress SlickQuiz 1.3.7.1 Cross Site Scripting Vulnerability
Exploit for php platform in category web applications 1. ADVISORY INFORMATION ======================= Product: SlickQuiz Vendor URL: https://wordpress.org/plugins/slickquiz/ Type: Cross-Site Scripting CWE-79 Date found: 2019-05-30 Date published: 2019-09-10 CVSSv3 Score: 6.1...
PT-2019-12838
Name of the Vulnerable Software and Affected Versions SlickQuiz plugin for WordPress versions through 1.3.7.1 Description A stored XSS issue was discovered, allowing unauthenticated users to submit malicious data via the /wp-admin/admin-ajax.php endpoint, specifically through the save quiz score...
CVE-2018-21013
The Swape theme before 1.2.1 for WordPress has incorrect access control, as demonstrated by allowing new administrator accounts via vectors involving xmlPath to wp-admin/admin-ajax.php...
CVE-2018-21013: Improper Privilege Management
The Swape theme before 1.2.1 for WordPress has incorrect access control, as demonstrated by allowing new administrator accounts via vectors involving xmlPath to wp-admin/admin-ajax.php...
PT-2019-10438
Name of the Vulnerable Software and Affected Versions Swape theme for WordPress versions prior to 1.2.1 Description The issue concerns incorrect access control in the Swape theme for WordPress. This allows unauthorized creation of new administrator accounts through specific vectors involving the...
CVE-2019-15873
The profilegrid-user-profiles-groups-and-communities plugin before 2.8.6 for WordPress has remote code execution via an wp-admin/admin-ajax.php request with the action=pmtemplatepreview&html=?php substring followed by PHP code...
CVE-2019-15873
The profilegrid-user-profiles-groups-and-communities plugin before 2.8.6 for WordPress has remote code execution via an wp-admin/admin-ajax.php request with the action=pmtemplatepreview&html=?php substring followed by PHP code...