WordPress Plugin N-Media Website Contact Form with File Upload 1.3.4 - Arbitrary File Upload (2)

WordPress Plugin N-Media Website Contact Form with File Upload 1.3.4 - Arbitrary File Upload 2 !/bin/bash Exploit Title : Wordpress N-Media Website Contact Form with File Upload 1.3.4 Google Dork : inurl:"/uploads/contactfiles/" Exploit Author : Claudio Viviani Vulnerability discovered by : Claud...

WordPress Plugin N-Media Website Contact Form with File Upload 1.3.4 - Arbitrary File Upload (2)

!/bin/bash Exploit Title : Wordpress N-Media Website Contact Form with File Upload 1.3.4 Google Dork : inurl:"/uploads/contactfiles/" Exploit Author : Claudio Viviani Vulnerability discovered by : Claudio Viviani Script Written by : F17.c0de Software link :...

WordPress NEX-Forms 3.0 SQL Injection

Exploit Title : NEX-Forms 3.0 SQL Injection Vulnerability Exploit Author : Claudio Viviani Website Author: http://www.homelab.it http://archive-exploit.homelab.it/1 Full HomelabIT Vulns Archive Vendor Homepage : https://wordpress.org/plugins/nex-forms-express-wp-form-builder/ Software Link :...

WordPress Plugin Work The Flow - Arbitrary File Upload (Metasploit)

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Wordpress Work The Flow Upload Vulnerability', 'Description' = %q This module exploits an arbitrary PHP code upload in the WordPress...

WordPress Ajax Store Locator 1.2 SQL Injection

Exploit Title : Wordpress Ajax Store Locator = 5.0.12 AND time-based blind SELECT' injectable for the remaining tests, do you want to include all tests for 'MySQL' extending pr...

WordPress Plugin Ajax Store Locator 1.2 - SQL Injection

WordPress Plugin Ajax Store Locator 1.2 - SQL Injection Exploit Title : Wordpress Ajax Store Locator = 5.0.12 AND time-based blind SELECT' injectable for the remaining tests, do you want to include all tests for 'MySQ...

WordPress Plugin Ajax Store Locator 1.2 - SQL Injection

Exploit Title : Wordpress Ajax Store Locator = 5.0.12 AND time-based blind SELECT' injectable for the remaining tests, do you want to include all tests for 'MySQL' extending...

WordPress Video Gallery 2.8 SQL Injection

Exploit Title : Wordpress Video Gallery 2.8 SQL Injection Vulnerabilitiey Exploit Author : Claudio Viviani Vendor Homepage : http://www.apptha.com/category/extension/Wordpress/Video-Gallery Software Link : https://downloads.wordpress.org/plugin/contus-video-gallery.2.8.zip Dork Google:...

WordPress Plugin Video Gallery 2.8 - SQL Injection

WordPress Plugin Video Gallery 2.8 - SQL Injection Exploit Title : Wordpress Video Gallery 2.8 SQL Injection Vulnerabilitiey Exploit Author : Claudio Viviani Vendor Homepage : http://www.apptha.com/category/extension/Wordpress/Video-Gallery Software Link :...

WordPress N-Media Website Contact Form 1.3.4 Shell Upload

Exploit Title : Wordpress N-Media Website Contact Form with File Upload 1.3.4 Shell Upload Vulnerability Exploit Author : Claudio Viviani Software Link : https://downloads.wordpress.org/plugin/website-contact-form-with-file-upload.1.3.4.zip Date : 2015-04-1 Dork Google: index of...

WordPress Plugin Video Gallery 2.8 - SQL Injection

Exploit Title : Wordpress Video Gallery 2.8 SQL Injection Vulnerabilitiey Exploit Author : Claudio Viviani Vendor Homepage : http://www.apptha.com/category/extension/Wordpress/Video-Gallery Software Link : https://downloads.wordpress.org/plugin/contus-video-gallery.2.8.zip Dork Google:...

WordPress Plugin N-Media Website Contact Form with File Upload 1.3.4 - Arbitrary File Upload (1)

WordPress Plugin N-Media Website Contact Form with File Upload 1.3.4 - Arbitrary File Upload 1 Exploit Title : Wordpress N-Media Website Contact Form with File Upload 1.3.4 Shell Upload Vulnerability Exploit Author : Claudio Viviani Software Link :...

WordPress Duplicator 0.5.14 Cross Site Request Forgery / SQL Injection

Exploit Title : Wordpress Duplicator prefix . 'duplicatorpackages'; $postIDs = isset$post'duplicatordelid' ? $post'duplicatordelid' : null; $list = explode",", $postIDs; $delCount = 0; if $postIDs != null foreach $list as $id $getResult = $wpdb-getresults"SELECT name, hash FROM $tblName WHERE id...

WordPress Plugin All In One WP Security Firewall 3.9.0 - SQL Injection

WordPress Plugin All In One WP Security Firewall 3.9.0 - SQL Injection Exploit Title : WordPress All In One WP Security & Firewall 3.9.0 SQL Injection Vulnerability Exploit Author : Claudio Viviani Vendor Homepage : https://wordpress.org/plugins/all-in-one-wp-security-and-firewall/ Software Link ...

WordPress Plugin All In One WP Security & Firewall 3.9.0 - SQL Injection

Exploit Title : WordPress All In One WP Security & Firewall 3.9.0 SQL Injection Vulnerability Exploit Author : Claudio Viviani Vendor Homepage : https://wordpress.org/plugins/all-in-one-wp-security-and-firewall/ Software Link :...

WordPress All In One WP Security And Firewall 3.9.0 SQL Injection

Exploit Title : WordPress All In One WP Security & Firewall 3.9.0 SQL Injection Vulnerability Exploit Author : Claudio Viviani Vendor Homepage : https://wordpress.org/plugins/all-in-one-wp-security-and-firewall/ Software Link :...

WordPress Work The Flow 2.5.2 Shell Upload

Exploit Title : Wordpress Work the flow file upload 2.5.2 Shell Upload Vulnerability Exploit Author : Claudio Viviani Software Link : https://downloads.wordpress.org/plugin/work-the-flow-file-upload.2.5.2.zip Date : 2015-03-14 Tested on : Linux BackBox 4.0 / curl 7.35.0 Description: Work the Flow...

WordPress Plugin Work The Flow File Upload 2.5.2 - Arbitrary File Upload

Exploit Title : Wordpress Work the flow file upload 2.5.2 Shell Upload Vulnerability Exploit Author : Claudio Viviani Software Link : https://downloads.wordpress.org/plugin/work-the-flow-file-upload.2.5.2.zip Date : 2015-03-14 Tested on : Linux BackBox 4.0 / curl 7.35.0 Description: Work the Flow...

WordPress Plugin Slider REvolution 4.1.4 - Arbitrary File Download

Exploit Title : WordPress Slider Revolution Responsive = 4.1.4 Arbitrary File Download vulnerability Exploit Author : Claudio Viviani Vendor Homepage : http://codecanyon.net/item/slider-revolution-responsive-wordpress-plugin/2751380 Software Link : Premium plugin Dork Google: revslider.php "index...

WordPress Plugin Slider REvolution 4.1.4 - Arbitrary File Download

WordPress Plugin Slider REvolution 4.1.4 - Arbitrary File Download Exploit Title : WordPress Slider Revolution Responsive = 4.1.4 Arbitrary File Download vulnerability Exploit Author : Claudio Viviani Vendor Homepage : http://codecanyon.net/item/slider-revolution-responsive-wordpress-plugin/27513...