17 matches found
CVE-2026-13609
The Frontend Admin by DynamiApps WordPress plugin before 3.29.9 decodes HTML entities in a submitted form field value after sanitizing it, which restores HTML tags that the sanitizer had neutralized. A double-encoded payload submitted by an unauthenticated visitor is therefore stored as a live ta...
EUVD-2015-9319
Malware in sbrugna...
CVE-2015-9479
The ACF-Frontend-Display plugin through 2015-07-03 for WordPress has arbitrary file upload via an action=upload request to js/blueimp-jQuery-File-Upload-d45deb1/server/php/index.php...
Complianz (Free < 6.3.4, Premium < 6.3.6) - Translator SQLi
The plugins allow a translators to inject arbitrary SQL through an unsanitized translation. SQL can be injected through an infected translation file, or by a user with a translator role through translation plugins such as Loco Translate or WPML. 1. Install Complianz and set the following options ...
WordPress ACF-Frontend-Display Plugin File Upload Vulnerability
WordPress is a set of blogging platform developed by WordPress Foundation using PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers.ACF-Frontend-Display is a plugin used to display ACF forms on the front end of the site. A file upload vulnerability exists i...
CVE-2015-9479
The ACF-Frontend-Display plugin through 2015-07-03 for WordPress has arbitrary file upload via an action=upload request to js/blueimp-jQuery-File-Upload-d45deb1/server/php/index.php...
Design/Logic Flaw
The ACF-Frontend-Display plugin through 2015-07-03 for WordPress has arbitrary file upload via an action=upload request to js/blueimp-jQuery-File-Upload-d45deb1/server/php/index.php...
CVE-2015-9479
The ACF-Frontend-Display plugin through 2015-07-03 for WordPress has arbitrary file upload via an action=upload request to js/blueimp-jQuery-File-Upload-d45deb1/server/php/index.php...
CVE-2015-9479
The CVE-2015-9479 issue affects the WordPress ACF-Frontend-Display plugin (versions up to 2015-07-03): it allows arbitrary file upload through an action=upload request to js/blueimp-jQuery-File-Upload-d45deb1/server/php/index.php. Connected documents confirm the vulnerability description; no expl...
CVE-2015-9479: Unrestricted Upload of File with Dangerous Type
The ACF-Frontend-Display plugin through 2015-07-03 for WordPress has arbitrary file upload via an action=upload request to js/blueimp-jQuery-File-Upload-d45deb1/server/php/index.php...
WordPress ACF Frontend Display Plugin Arbitrary File Upload
An Arbitrary File Upload vulnerability exists in WordPress Advanced custom Fields ACF Frontend Display Plugin. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
WordPress ACF Frontend Display Plugin Arbitrary File Upload Vulnerability
WordPress is a set of blogging platform using PHP language development, the platform supports in PHP and MySQL server set up personal blog site.ACF Frontend Display is a plugin to add the type of navigation menu fields. A security vulnerability in the WordPress ACF Frontend Display file upload...
WordPress ACF Frontend Display Plugin 2.0.5 - File Upload Vulnerability
Exploit for php platform in category web applications +---------------------------------------------------------------------------+ + Author: TUNISIAN CYBER + Title: WP Plugin Free ACF Frontend Display File Upload Vulnerability + Date: 3-07-2015 + Type: WebAPP + Download Plugin:...
WordPress Plugin ACF Frontend Display 2.0.5 - Arbitrary File Upload
+---------------------------------------------------------------------------+ + Author: TUNISIAN CYBER + Title: WP Plugin Free ACF Frontend Display File Upload Vulnerability + Date: 3-07-2015 + Type: WebAPP + Download Plugin: https://downloads.wordpress.org/plugin/acf-frontend-display.2.0.5.zip +...
WordPress Plugin ACF Frontend Display 2.0.5 - Arbitrary File Upload
WordPress Plugin ACF Frontend Display 2.0.5 - Arbitrary File Upload +---------------------------------------------------------------------------+ + Author: TUNISIAN CYBER + Title: WP Plugin Free ACF Frontend Display File Upload Vulnerability + Date: 3-07-2015 + Type: WebAPP + Download Plugin:...
WordPress ACF Frontend Display Shell Upload
+---------------------------------------------------------------------------+ + Author: TUNISIAN CYBER + Title: WP Plugin Free ACF Frontend Display File Upload Vulnerability + Date: 3-07-2015 + Type: WebAPP + Tested on: KaliLinux + Friendly Sites: sec4ever.com + Twitter: @TCYB3R...
