WordPress Contact Form

WordPress is a set of blogging platforms developed by the Wordpress Foundation using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers. contact Form...

WordPress Blog2Social: Social Media Auto Post

WordPress is the Wordpress Foundation's set of blogging platforms developed using the PHP language. The platform supports the hosting of personal blog sites on PHP and MySQL servers. WordPress Blog2Social: Social Media Auto Post...

WordPress WooCommerce EnvioPack plugin cross-site scripting vulnerability

WordPress is the Wordpress Foundation's set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers.WooCommerce EnvioPack plugin is a WordPress open source application plugin.The WordPress WooCommerce EnvioPack plugin h...

Anchor Cross-Site Scripting Vulnerability (CNVD-2021-103514)

Anchor is an open source lightweight blogging system. Anchor is vulnerable to a cross-site scripting vulnerability that could be exploited by attackers to upload headers and content containing malicious code via the post bar...

WordPress Contact Form, Survey

WordPress is a set of blogging platform developed by the Wordpress Foundation using the PHP language. The platform supports personal blogging sites on PHP and MySQL servers. WordPress Contact Form, Survey...

Z-BlogPHP arbitrary file deletion vulnerability

Z-BlogPHP is an open source PHP-based blogging system from the Z-blog community.Z-BlogPHP is vulnerable to an arbitrary file deletion vulnerability that stems from the inclusion of an arbitrary file deletion vulnerability via appdel.php. No detailed vulnerability details are currently available...

Hexo cross-site scripting vulnerability

Hexo is a fast, simple and powerful blogging framework from the personal developer Tommy Chen in China. Hexo suffers from a cross-site scripting vulnerability that stems from Hexo's lack of data validation filtering of user-supplied data and output. An attacker could exploit this vulnerability to...

Wordpress Plugin Smart Product Review Arbitrary File Upload Vulnerability

WordPress is a blogging platform developed using the PHP language.Smart Product Review is a versatile review package for users' WooCommerce stores. Wordpress plugin Smart Product Review arbitrary file upload vulnerability can be exploited by an attacker to upload a webshell and gain server...

WordPress Delete All Comments Easily plugin cross-site request forgery vulnerability

WordPress is a set of blogging platforms developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. WordPress Delete All Comments Easily plugin in version 1.3 and earlier is vulnerable to cross-site request forgery, which can ...

WordPress Coming Soon, Under Construction ＆ Maintenance Mode By Dazzler plugin跨站脚本漏洞

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blogging sites on PHP and MySQL servers. WordPress Coming Soon, Under Construction...

WordPress 跨站脚本漏洞

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blogging sites on PHP and MySQL servers. WordPress Coming Soon, Under Construction...

WordPress YOP Poll Plugin Cross-Site Scripting Vulnerability

WordPress is a set of blogging platform developed by the Wordpress Foundation using the PHP language. The platform supports the hosting of personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress YOP Poll Plugin, which stems from a lack of...

WordPress plugin Popular Posts cross-site scripting vulnerability

WordPress is the WordPress Foundation's suite of blogging platforms developed using the PHP language. The platform supports the hosting of personal blog sites on servers with PHP and MySQL.The Wordpress plugin Popular Posts 5.3.3 and previous versions have a cross-site scripting vulnerability tha...

WordPress Gutenberg Template Library

WordPress is the WordPress Wordpress Foundation's set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers. WordPress Gutenberg Template Library...

Blog_mini Cross-Site Scripting Vulnerability (CNVD-2021-67502)

Blogmini is an open source blogging system that is vulnerable to a cross-site scripting vulnerability in Blog mini v1.0. An attacker could use this vulnerability to execute arbitrary code via the "Manage Submitted Posts" component...

Friday Squid Blogging: Tentacle Doorknob

Its pretty. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Read my blog posting guidelines here...

Apache Roller Resource Management Error Vulnerability

Apache Roller is a Java-based multi-user open source blogging system from the Apache Foundation. a security vulnerability exists in Apache Roller. An attacker could exploit this vulnerability to cause security issues...

WordPress Handsome Testimonials&Reviews plugin SQL Injection Vulnerability

WordPress is a blogging platform developed by the Wordpress Foundation using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.Handsome Testimonials&Reviews plugin is an application plugin for WordPress. Versions of the WordPress Handsome...

WordPress The Community Events plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the Wordpress Foundation using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.The Community Events plugin is an application plugin for WordPress. A cross-site scripting vulnerability exists in...

WordPress suffers from information disclosure vulnerability (CNVD-2021-54095)

WordPress is a blogging platform based on the PHP language. WordPress suffers from an information disclosure vulnerability that can be exploited by attackers to obtain sensitive information...