WordPress Finalist Plugin - SQL Injection

This plugin is prone to an SQL injection via vote.php id parameter. Solution Update the plugin...

WordPress Finalist Cross Site Scripting

Exploit Title : Wordpress finalist Plugin Cross site scripting Exploit Author : Ashiyane Digital Security Team Google Dork : inurl:wp-content/plugins/finalist Software Link : www.wordpress.org Tested on: Windows , Linux Date: 2013/10/14 Exploit : Cross site scripting Location1:...

WordPress Finalist SQL Injection

++++++++++++++++++++++++++++++++++++++++++ ++++++++++++++++++++++++++ ++++++++++++++++ Exploit Title: wordpress finalist plugins SQL injection Vulnerability Exploit Author: Ashiyane Digital Security Team Home : www.Ashiyane.org Vendor Homepage: www.thefaceshop.com.sg Software Link:...