Event Espresso Core-Reg 4.10.7.p - Cross-Site Scripting Detection

Event Espresso Core-Reg 4.10.7.p is vulnerable to cross-site scripting in wp-content/plugins/event-espresso-core-reg/adminpages/messages/templates/eemsgadminoverview.template.php and allows remote attackers to inject arbitrary web script or HTML via the page parameter. !/usr/bin/env python3 --...

CVE-2023-31214: Missing Authorization

Missing Authorization vulnerability in Arul Prasad J WP Quick Post Duplicator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Quick Post Duplicator: from n/a through 2.0...

CVE-2021-24981: Unrestricted Upload of File with Dangerous Type

The Directorist WordPress plugin before 7.0.6.2 was vulnerable to Cross-Site Request Forgery to Remote File Upload leading to arbitrary PHP shell uploads in the wp-content/plugins directory...

PT-2021-16392

Name of the Vulnerable Software and Affected Versions: The Directorist WordPress plugin versions prior to 7.0.6.2 Description: The issue allows for Cross-Site Request Forgery to Remote File Upload, leading to arbitrary PHP shell uploads in the wp-content/plugins directory. This can be exploited t...

WordPress plugin code vulnerabilities

WordPress is the Wordpress Foundation's set of blogging platforms developed using the PHP language. The platform supports personal blogging sites on PHP and MySQL servers. WordPress Directorist plugin has a cross-site request forgery vulnerability, which stems from the fact that the WordPress...

CVE-2021-40883

A Remote Code Execution RCE vulnerability exists in emlog 5.3.1 via content/plugins...

CVE-2021-40883

A Remote Code Execution RCE vulnerability exists in emlog 5.3.1 via content/plugins...

CVE-2021-40883

A Remote Code Execution RCE vulnerability exists in emlog 5.3.1 via content/plugins...

Remote code execution

A Remote Code Execution RCE vulnerability exists in emlog 5.3.1 via content/plugins...

CVE-2021-40883

A Remote Code Execution RCE vulnerability exists in emlog 5.3.1 via content/plugins...

CVE-2021-40883

CVE-2021-40883 affects emlog 5.3.1, with a Remote Code Execution via content/plugins. The root cause is described as failure to properly filter special elements when constructing code segments from external input. The connected documents provide no explicit exploit details, affected versions beyo...

PT-2021-23001

Name of the Vulnerable Software and Affected Versions emlog version 5.3.1 Description A Remote Code Execution RCE issue exists via content/plugins, allowing for potential code execution. Recommendations For emlog version 5.3.1, at the moment, there is no information about a newer version that...

PT-2019-7791

Name of the Vulnerable Software and Affected Versions ocim-mp3 plugin versions prior to 2016-03-07 Description The issue concerns a problem with the ocim-mp3 plugin for WordPress, where the id parameter in the /wp-content/plugins/ocim-mp3/source/pages.php endpoint is vulnerable to XSS attacks...

CVE-2016-10998: Improper Neutralization of Input During Web Page Generation

The ocim-mp3 plugin through 2016-03-07 for WordPress has wp-content/plugins/ocim-mp3/source/pages.php?id= XSS...

CVE-2017-17058: Improper Limitation of a Pathname to a Restricted Directory

The WooCommerce plugin through 3.x for WordPress has a Directory Traversal Vulnerability via a /wp-content/plugins/woocommerce/templates/emails/plain/ URI, which accesses a parent directory. NOTE: a software maintainer indicates that Directory Traversal is not possible because all of the template...

PT-2017-14679

Name of the Vulnerable Software and Affected Versions Emag Marketplace Connector plugin version 1.0.0 Description The issue is related to reflected XSS. The parameter post to the API endpoint "/wp-content/plugins/emag-marketplace-connector/templates/order/awb-meta-box.php" is not filtered...

CVE-2005-4463: Undefined Security Weakness

WordPress before 1.5.2 allows remote attackers to obtain sensitive information via a direct request to 1 wp-includes/vars.php, 2 wp-content/plugins/hello.php, 3 wp-admin/upgrade-functions.php, 4 wp-admin/edit-form.php, 5 wp-settings.php, and 6 wp-admin/edit-form-comment.php, which leaks the path ...