WordPress Plugin Multisite Post Duplicator 0.9.5.1 - Cross-Site Request Forgery

alert1" input type=...

WordPress Multisite Post Duplicator Plugin <= 0.9.5.1 - Cross Site Request Forgery

This plugin is prone to a cross site request forgery vulnerability. Solution Update the plugin...

WordPress Multisite Post Duplicator Plugin <= 0.9.5.1 - Cross Site Request Forgery

This plugin is prone to a cross site request forgery vulnerability. Solution Update the plugin...

Multisite Post Duplicator <= 0.9.5.1 - Cross-Site Request Forgery (CSRF)

The Multisite Post Duplicator WordPress plugin was affected by a Cross-Site Request Forgery CSRF security vulnerability...

WordPress Multisite Post Duplicator 0.9.5.1 Cross Site Request Forgery

Details ================ Software: Multisite Post Duplicator Version: 0.9.5.1 Homepage: http://wordpress.org/plugins/multisite-post-duplicator/ Advisory report:...

Post Duplicator <= 2.16 - Cross-Site Scripting (XSS)

The Post Duplicator WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...

WordPress Duplicator plugin cross-site request forgery vulnerability

WordPress is the WordPress Software Foundation's suite of blogging platforms developed using the PHP language, which supports the hosting of personal blog sites on servers running PHP and MySQL.Duplicator is one of the extension plugins used to migrate/clone a site to another location. A cross-si...

WordPress Duplicator 1.1.0 / 1.2.0 Cross Site Request Forgery

----------------------------------------------------------------------------------------------- RatioSec Research Security Advisory RS-2016-002 ----------------------------------------------------------------------------------------------- Duplicator Wordpress Plugin Code And Database Dump Via CS...

WordPress Duplicator Plugin <= 1.1.3 - Cross Site Request Forgery

This plugin is prone to a cross site request forgery vulnerability. Solution Update the plugin...

Duplicator <= 1.1.3 - Cross-Site Request Forgery (CSRF)

The Duplicator – WordPress Migration Plugin WordPress plugin was affected by a Cross-Site Request Forgery CSRF security vulnerability...

WordPress Duplicator Plugin <= 0.5.26 - Cross Site Scripting

This plugin is prone to a cross site scripting vulnerability via "logname" parameter. Solution Update the plugin...

Duplicator <= 0.5.26 - Authenticated Cross-Site Scripting (XSS)

The Duplicator – WordPress Migration Plugin WordPress plugin was affected by an Authenticated Cross-Site Scripting XSS security vulnerability...

WordPress plugin Duplicator views/actions.php duplicator_delid parameter SQL injection vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL.Duplicator Plugin for WordPress is a plugin for WordPress. Duplicator Plugin for WordPress views/actions.php script handles a...

WordPress Plugin Duplicator 0.5.14 - SQL Injection / Cross-Site Request Forgery

Exploit Title : Wordpress Duplicator prefix . 'duplicatorpackages'; $postIDs = isset$post'duplicatordelid' ? $post'duplicatordelid' : null; $list = explode",", $postIDs; $delCount = 0; if $postIDs != null foreach $list as $id $getResult = $wpdb-getresults"SELECT name, hash FROM $tblName WHERE id...

WordPress Duplicator Plugin <= 0.5.14 - SQL Injection and CSRF

Duplicator plugin is prone to an SQL injection and cross-site request forgery vulnerabilities that allow an attacker to get an authenticated admin by executing arbitrary SQL queries. Solution Upgrade the plugin...

WordPress Plugin Duplicator 0.5.14 - SQL Injection Cross-Site Request Forgery

WordPress Plugin Duplicator 0.5.14 - SQL Injection Cross-Site Request Forgery Exploit Title : Wordpress Duplicator prefix . 'duplicatorpackages'; $postIDs = isset$post'duplicatordelid' ? $post'duplicatordelid' : null; $list = explode",", $postIDs; $delCount = 0; if $postIDs != null foreach $list...

WordPress Duplicator 0.5.14 Cross Site Request Forgery / SQL Injection Vulnerabilities

WordPress Duplicator plugin versions 0.5.14 and below suffer from cross site request forgery and remote SQL injection vulnerabilities. Exploit Title : Wordpress Duplicator prefix . 'duplicatorpackages'; $postIDs = isset$post'duplicatordelid' ? $post'duplicatordelid' : null; $list = explode",",...

Duplicator <= 0.5.14 - SQL Injection & CSRF

An authorised user with "export" permission or a remote unauthenticated attacker could use this vulnerability to execute arbitrary SQL queries on the victim WordPress web site by enticing an authenticated admin CSRF. http://www.example.com/wp-admin/admin-ajax.php?action=duplicatorpackagedelete PO...

WordPress Duplicator 0.5.14 Cross Site Request Forgery / SQL Injection

Exploit Title : Wordpress Duplicator prefix . 'duplicatorpackages'; $postIDs = isset$post'duplicatordelid' ? $post'duplicatordelid' : null; $list = explode",", $postIDs; $delCount = 0; if $postIDs != null foreach $list as $id $getResult = $wpdb-getresults"SELECT name, hash FROM $tblName WHERE id...

Duplicator <= 0.5.14 - SQL Injection & CSRF

An authorised user with "export" permission or a remote unauthenticated attacker could use this vulnerability to execute arbitrary SQL queries on the victim WordPress web site by enticing an authenticated admin CSRF. PoC http://www.example.com/wp-admin/admin-ajax.php?action=duplicatorpackagedelet...