72 matches found
CVE-2021-4374 WordPress Automatic Plugin <= 3.53.2 - Unauthenticated Arbitrary Options Update
The WordPress Automatic Plugin for WordPress is vulnerable to arbitrary options updates in versions up to, and including, 3.53.2. This is due to missing authorization and option validation in the processform.php file. This makes it possible for unauthenticated attackers to arbitrarily update the...
CVE-2021-4374
CVE-2021-4374 affects WordPress Automatic Plugin versions up to 3.53.2. The root cause is missing authorization and option validation in process_form.php, allowing unauthenticated users to update arbitrary WordPress options (via update_option()) and potentially compromise the site. The nuclei tem...
WordPress Plugin WordPress Automatic 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...
CVE-2021-4374: Missing Authorization
The WordPress Automatic Plugin for WordPress is vulnerable to arbitrary options updates in versions up to, and including, 3.53.2. This is due to missing authorization and option validation in the processform.php file. This makes it possible for unauthenticated attackers to arbitrarily update the...
WordPress WP Sessions Time Monitoring Full Automatic plugin <= 1.0.5 - Sensitive Information Disclosure vulnerability
Sensitive Information Disclosure vulnerability discovered in WordPress WP Sessions Time Monitoring Full Automatic plugin versions = 1.0.5. Solution Update the WordPress WP Sessions Time Monitoring Full Automatic plugin to the latest available version at least 1.0.6...
WordPress Automatic < 3.53.3 - Unauthenticated Arbitrary Options Update
The plugin was vulnerable to Unauthenticated Arbitrary Options Update...
VulnCheck KEV: CVE-2021-4374
The WordPress Automatic Plugin for WordPress is vulnerable to arbitrary options updates in versions up to, and including, 3.53.2. This is due to missing authorization and option validation in the processform.php file. This makes it possible for unauthenticated attackers to arbitrarily update the...
Automatic 2.0.3 - csv.php q Parameter SQL Injection
The wp-automatic WordPress plugin was affected by a csv.php q Parameter SQL Injection security vulnerability...
WordPress Automatic Plugin "q" SQL注入漏洞
WordPress是一种使用PHP语言和MySQL数据库开发的Blog（博客、网志引擎，用户可以在支持PHP和MySQL数据库的服务器上建立自己的Blog。 Wordpress Automatic Plugin for WordPress 2.0.3之前版本没有验证通过"q"参数传递到csv.php的输入即用作SQL查询，csv.php文件没有要求有效的登录凭证，通过注入任意SQL代码可操作SQL查询，执行SQL注入攻击。 0 WordPress Automatic Plugin 2.x 厂商补丁： WordPress ---------...
WordPress Automatic 2.0.3 Cross Site Request Forgery
Title: ====== Wordpress Automatic Plugin v2.0.3 CSRF Exploit Date: ===== 2012-06-15 Website: =========== http://codecanyon.net/item/wordpress-automatic-plugin/1904470 Introduction: ============= Wordpress automatic plugin posts quality targeted articles, Amazon Products, clickbank Products, Youtu...
Wordpress Automatic Plugin v2.0.3 CSRF Exploit
Exploit for php platform in category web applications Title: ====== Wordpress Automatic Plugin v2.0.3 CSRF Exploit Date: ===== 2012-06-15 Website: =========== http://codecanyon.net/item/wordpress-automatic-plugin/1904470 Introduction: ============= Wordpress automatic plugin posts quality targete...
WordPress Automatic Plugin 2.0.3 - SQL Injection
This WordPress Automatic plugin is prone to an SQL injection. This vulnerability works in the csv.php file which does not require valid login credential and it allows an attacker to execute SQL Queries. Solution Upgrade this plugin to version 2.0.4...