WordPress Ocean eComm Treasure Box plugin <= 1.8.0 - Unauthenticated Stored Cross-Site Scripting vulnerability

Unauthenticated Stored Cross-Site Scripting vulnerability discovered by Alex Thomas, Wordfence Argus in WordPress Plugin Ocean eComm Treasure Box versions = 1.8.0...

CVE-2026-81929

The Ocean Pro Demos and Ocean eComm Treasure Box plugins for WordPress is vulnerable to Stored Cross-Site Scripting via the 'content' parameter in all versions up to, and including, 1.5.4, and 1.8.0, respectively, due to insufficient authorization, input sanitization, and output escaping in the...

CVE-2026-81929 Ocean Pro Demos <= 1.5.4 and Ocean eComm Treasure Box <= 1.8.0 - Unauthenticated Stored Cross-Site Scripting via 'content' Parameter

The Ocean Pro Demos and Ocean eComm Treasure Box plugins for WordPress is vulnerable to Stored Cross-Site Scripting via the 'content' parameter in all versions up to, and including, 1.5.4, and 1.8.0, respectively, due to insufficient authorization, input sanitization, and output escaping in the...

CVE-2026-81929 Ocean Pro Demos <= 1.5.4 and Ocean eComm Treasure Box <= 1.8.0 - Unauthenticated Stored Cross-Site Scripting via 'content' Parameter

The Ocean Pro Demos and Ocean eComm Treasure Box plugins for WordPress is vulnerable to Stored Cross-Site Scripting via the 'content' parameter in all versions up to, and including, 1.5.4, and 1.8.0, respectively, due to insufficient authorization, input sanitization, and output escaping in the...

EUVD-2026-95509

The Ocean Pro Demos and Ocean eComm Treasure Box plugins for WordPress is vulnerable to Stored Cross-Site Scripting via the 'content' parameter in all versions up to, and including, 1.5.4, and 1.8.0, respectively, due to insufficient authorization, input sanitization, and output escaping in the...

CVE-2026-81929

The Ocean Pro Demos (versions up to and including 1.5.4 ) and Ocean eComm Treasure Box (versions up to and including 1.8.0 ) WordPress plugins are vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is insufficient authorization, input sanitization, and output escaping within the Pop...

PT-2026-108750

The Ocean Pro Demos and Ocean eComm Treasure Box plugins for WordPress is vulnerable to Stored Cross-Site Scripting via the 'content' parameter in all versions up to, and including, 1.5.4, and 1.8.0, respectively, due to insufficient authorization, input sanitization, and output escaping in the...

CVE-2026-81929: Improper Neutralization of Input During Web Page Generation

The Ocean Pro Demos and Ocean eComm Treasure Box plugins for WordPress is vulnerable to Stored Cross-Site Scripting via the 'content' parameter in all versions up to, and including, 1.5.4, and 1.8.0, respectively, due to insufficient authorization, input sanitization, and output escaping in the...

OceanWP Ocean Pro Demos – Cross-site Scripting Vulnerabilities

Ocean Pro Demos 1.5.4 and earlier versions, as well as Ocean eComm Treasure Box 1.8.0 and earlier versions, have a cross-site scripting vulnerability. This vulnerability stems from insufficient authorization in the AJAX operation of savepopupcontent, improper input cleaning, and inadequate output...

EUVD-2005-1415

Malware in sbrugna...

CVE-2005-1412

SQL injection vulnerability in verify.asp for Ecomm Professional Guestbook 3.x allows remote attackers to execute arbitrary SQL commands via the AdminPWD parameter...

ecomm.party Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1188798 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

Wordpress Photocrati theme-ecomm-sizes.php文件prod_id参数-跨站脚本漏洞

No description provided by source...

WordPress Photocrati Theme SQL Injection Vulnerability

WordPress is the WordPress Software Foundation's suite of blogging platforms developed using the PHP language, which supports personal blog sites on servers running PHP and MySQL.Photocrati is one of the photography themes. A SQL injection vulnerability exists in the ecomm-sizes.php script in...

CVE-2015-2216

SQL injection vulnerability in ecomm-sizes.php in the Photocrati theme 4.x for WordPress allows remote attackers to execute arbitrary SQL commands via the prodid parameter...

Sql injection

SQL injection vulnerability in ecomm-sizes.php in the Photocrati theme 4.x for WordPress allows remote attackers to execute arbitrary SQL commands via the prodid parameter...

PT-2015-5668

Name of the Vulnerable Software and Affected Versions Photocrati theme versions 4.x Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands via the prod id parameter in the ecomm-sizes.php file. Recommendations For Photocrati theme version 4.x, consider...

CVE-2015-2216: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in ecomm-sizes.php in the Photocrati theme 4.x for WordPress allows remote attackers to execute arbitrary SQL commands via the prodid parameter...

Photocrati Theme 4.x.x - SQL Injection

http://www.example.com/wp-content/themes/photocrati-theme-path/ecomm-sizes.php?prodid=SQL...

CVE-2014-100016: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in photocrati-gallery/ecomm-sizes.php in the Photocrati theme for WordPress allows remote attackers to inject arbitrary web script or HTML via the prodid parameter...