PT-2019-7322

Name of the Vulnerable Software and Affected Versions iThemes Exchange versions prior to 1.12.0 Description The issue is related to cross-site scripting XSS and involves the functions add query arg and remove query arg. Recommendations For versions prior to 1.12.0, update to version 1.12.0 or lat...

PT-2019-7328

Name of the Vulnerable Software and Affected Versions Easy US Sales Taxes Add-on for iThemes Exchange versions prior to 1.1.0 Description The issue concerns a problem with the Easy US Sales Taxes Add-on for iThemes Exchange, where there is a potential for XSS Cross-Site Scripting attacks. This is...

CVE-2015-9374: Improper Neutralization of Input During Web Page Generation

Stripe Add-on for iThemes Exchange before 1.2.0 for WordPress has XSS via addqueryarg and removequeryarg...

CVE-2015-9370: Improper Neutralization of Input During Web Page Generation

Invoices Add-on for iThemes Exchange before 1.4.0 for WordPress has XSS via addqueryarg and removequeryarg...

CVE-2015-9371: Improper Neutralization of Input During Web Page Generation

Manual Purchases Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via addqueryarg and removequeryarg...

CVE-2015-9363: Improper Neutralization of Input During Web Page Generation

iThemes Exchange before 1.12.0 for WordPress has XSS via addqueryarg and removequeryarg...

WordPress Plugin Ithemes-BackupBuddy Amazon WP-S3 Information Disclosure Vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. An information disclosure vulnerability exists in the WordPress plugin Ithemes-BackupBuddy Amazon WP-S3. An attacker can...

WordPress Ithemes-BackupBuddy Amazon WP-S3 2.9 Database Disclosure

Exploit Title : WordPress Ithemes-BackupBuddy Amazon WP-S3 Plugins 2.9 Database Backup Disclosure Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 17/12/2018 Vendor Homepage : ithemes.com/purchase/backupbuddy/ wordpress.org/plugins/wp-s3/ Software Download Link :...

WordPress iThemes Security Plugin SQL Injection (CVE-2018-12636)

A SQL injection vulnerability exists in WordPress iThemes Security Plugin . Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

iThemes Security SQL Injection Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform using PHP language development, the platform supports in PHP and MySQL servers to set up a personal blog site. iThemes Security better-wp-security plugin is used in one of the intrusion of a website for protection of the...

WordPress iThemes Security plugin <= 7.0.2 - Authenticated SQL Injection (SQLi) vulnerability

Authenticated SQL Injection SQLi vulnerability found by Çlirim Emini in WordPress iThemes Security plugin versions = 7.0.2. Solution Update the WordPress iThemes Security plugin to the latest available version at least 7.0.3...

WordPress iThemes Security Plugin < 7.0.3 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: WordPress Plugin iThemes Securitybetter-wp-security = 7.0.2 - Authenticated SQL Injection Exploit Author: Çlirim Emini Website: https://www.sentry.co.com/ Vendor Homepage: https://ithemes.com/ Software Link:...

WordPress iThemes Security SQL Injection

Exploit Title: WordPress Plugin iThemes Securitybetter-wp-security = 7.0.2 - Authenticated SQL Injection Date: 2018-06-25 Exploit Author: Alirim Emini Website: https://www.sentry.co.com/ Vendor Homepage: https://ithemes.com/ Software Link: https://wordpress.org/plugins/better-wp-security/...

WordPress Plugin iThemes Security 7.0.3 - SQL Injection

WordPress Plugin iThemes Security 7.0.3 - SQL Injection Exploit Title: WordPress Plugin iThemes Securitybetter-wp-security = 7.0.2 - Authenticated SQL Injection Date: 2018-06-25 Exploit Author: Çlirim Emini Website: https://www.sentry.co.com/ Vendor Homepage: https://ithemes.com/ Software Link:...

WordPress Plugin iThemes Security < 7.0.3 - SQL Injection

Exploit Title: WordPress Plugin iThemes Securitybetter-wp-security = 7.0.2 - Authenticated SQL Injection Date: 2018-06-25 Exploit Author: Çlirim Emini Website: https://www.sentry.co.com/ Vendor Homepage: https://ithemes.com/ Software Link: https://wordpress.org/plugins/better-wp-security/...

Sql injection

The iThemes Security better-wp-security plugin before 7.0.3 for WordPress allows SQL Injection by attackers with Admin privileges via the logs page...

CVE-2018-12636

The iThemes Security better-wp-security plugin before 7.0.3 for WordPress allows SQL Injection by attackers with Admin privileges via the logs page...

CVE-2018-12636

The iThemes Security better-wp-security plugin before 7.0.3 for WordPress allows SQL Injection by attackers with Admin privileges via the logs page...

CVE-2018-12636

The CVE concerns WordPress iThemes Security (better-wp-security) plugin, prior to version 7.0.3. An authenticated admin can exploit an SQL injection via the itsec-logs page (log-orderby parameter) due to improper handling of the ORDER BY clause, enabling arbitrary SQL execution. Remediation: upgr...

CVE-2018-12636

The iThemes Security better-wp-security plugin before 7.0.3 for WordPress allows SQL Injection by attackers with Admin privileges via the logs page...