Lucene search
K

9 matches found

Positive Technologies
Positive Technologies
•added 2026/03/11 12:0 a.m.•1 views

PT-2026-24585

🚨 CVE-2026-1867 The Guest posting / Frontend Posting / Front Editor WordPress plugin before 5.0.6 allows passing a URL parameter to regenerate a .json file based on demo data that it initially creates. If an administrator modifies the demo form and enables admin notifications in the Guest posting...

5.9CVSS5.8AI score0.00065EPSS
Exploits0References5
Positive Technologies
Positive Technologies
•added 2025/11/24 12:0 a.m.•4 views

PT-2025-47885

The Guest posting / Frontend Posting / Front Editor WordPress plugin before 5.0.0 does not validate a parameter before redirecting the user to its value, leading to an Open Redirect issue...

6.8AI score0.00029EPSS
Exploits0References2
RedhatCVE
RedhatCVE
•added 2025/05/22 1:33 a.m.•7 views

CVE-2012-5318

Unrestricted file upload vulnerability in uploadify/scripts/uploadify.php in the Kish Guest Posting plugin 1.2 for WordPress allows remote attackers to execute arbitrary code by uploading a file with a double extension, then accessing it via a direct request to the file in the directory specified...

6.8CVSS8.1AI score0.33316EPSS
Exploits1References1
Prion
Prion
•added 2012/10/08 5:55 p.m.•11 views

Unrestricted file upload

Unrestricted file upload vulnerability in uploadify/scripts/uploadify.php in the Kish Guest Posting plugin 1.2 for WordPress allows remote attackers to execute arbitrary code by uploading a file with a double extension, then accessing it via a direct request to the file in the directory specified...

6.8CVSS8.3AI score0.33316EPSS
Exploits1References2Affected Software1
Prion
Prion
•added 2012/10/08 5:55 p.m.•13 views

Unrestricted file upload

Unrestricted file upload vulnerability in uploadify/scripts/uploadify.php in the Kish Guest Posting plugin before 1.2 for WordPress allows remote attackers to execute arbitrary code by uploading a file with a PHP extension, then accessing it via a direct request to the file in the directory...

6.8CVSS8.1AI score0.33316EPSS
Exploits1References11Affected Software1
NVD
NVD
•added 2012/10/08 5:55 p.m.•13 views

CVE-2012-1125

Unrestricted file upload vulnerability in uploadify/scripts/uploadify.php in the Kish Guest Posting plugin before 1.2 for WordPress allows remote attackers to execute arbitrary code by uploading a file with a PHP extension, then accessing it via a direct request to the file in the directory...

6.8CVSS7.7AI score0.33316EPSS
Exploits1References11
CVE
CVE
•added 2012/10/08 5:0 p.m.•54 views

CVE-2012-5318

The CVE-2012-5318 entry is confirmed with concrete details: it affects the Kish Guest Posting WordPress plugin (version 1.2) via an Unrestricted file upload in uploadify/scripts/uploadify.php. The vulnerability allows remote attackers to execute arbitrary code by uploading a file with a double ex...

6.8CVSS7.9AI score0.1097EPSS
Exploits0References2Affected Software1
securityvulns
securityvulns
•added 2012/02/13 12:0 a.m.•94 views

Wordpress Kish Guest Posting Plugin 1.0 (uploadify.php) Unrestricted File Upload Vulnerability

-------------------------------------------------------------------------------- Wordpress Kish Guest Posting Plugin 1.0 uploadify.php Unrestricted File Upload -------------------------------------------------------------------------------- author............: Egidio Romano aka EgiX...

Exploits0
exploitpack
exploitpack
•added 2012/01/23 12:0 a.m.•16 views

WordPress Plugin Kish Guest Posting 1.0 - Arbitrary File Upload

WordPress Plugin Kish Guest Posting 1.0 - Arbitrary File Upload ?php / -------------------------------------------------------------------------------- Wordpress Kish Guest Posting Plugin 1.0 uploadify.php Unrestricted File Upload...

0.2AI score
Exploits0
Rows per page
Query Builder