PT-2025-4507 · Unknown · Yamna Tatheer Knr Author List Widget

Name of the Vulnerable Software and Affected Versions: Yamna Tatheer KNR Author List Widget versions n/a through 3.1.1 Description: The issue is related to an Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS, which allows Reflected XSS. This can ...

WordPress Axact Author List Widget Plugin <= 3.1.1 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin KNR Author List Widget versions = 3.1.1...

WordPress KNR Author List Widget 2.0.0 SQL Injection

Exploit Title: WordPress KNR Author List Widget plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0 --------------- Vulnerable code --------------- foreach $GET'listItem' as $position = $item : $iterSql = "UPDATE $wpdb-users SET knrauthororder = $position WHERE ID = $item";...

WordPress Plugin KNR Author List Widget 2.0.0 - SQL Injection

WordPress Plugin KNR Author List Widget 2.0.0 - SQL Injection Exploit Title: WordPress KNR Author List Widget plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0 --------------- Vulnerable code --------------- foreach $GET'listItem' as $position = $item : $iterSql = "UPDATE $wpdb-users SET...

WordPress KNR Author List Widget plugin <= 2.0.0 SQL Injection

Exploit for php platform in category web applications Exploit Title: WordPress KNR Author List Widget plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0 --------------- Vulnerable code --------------- foreach $GET'listItem' as $position = $item : $iterSql = "UPDATE $wpdb-users SET...