WordPress Ajax Load More Plugin SQL Injection

An SQL injection vulnerability exists in the WordPress Ajax Load More Plugin. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Wordpress Plugin Ajax Load More '#1' SQL Injection Vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A SQL injection vulnerability exists in Wordpress plugin Ajax Load More '1'. An attacker can exploit the vulnerability to...

Wordpress Ajax Load More 5.3.1 Plugin - (#1) Authenticated SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Wordpress Plugin Ajax Load More 5.3.1 - '1' Authenticated SQL Injection Exploit Author: SunCSR Sun Cyber Security Research - Nguyen Khang Vendor Homepage: https://connekthq.com/plugins/ajax-load-more/ Software Link:...

Ajax Load More < 5.3.2 - Authenticated SQL Injection

The Ajax Load More WordPress plugin was vulnerable to SQL Injection in POST /wp-admin/admin-ajax.php with param repeater=' or sleep5=test. The attacker needs to be authenticated with the editthemeoptions capability, which only administrators have by default. PoC...

Ajax Load More < 5.3.2 - Authenticated SQL Injection

The Ajax Load More WordPress plugin was vulnerable to SQL Injection in POST /wp-admin/admin-ajax.php with param repeater=' or sleep5=test. The attacker needs to be authenticated with the editthemeoptions capability, which only administrators have by default...

WordPress Ajax Load More plugin <= 5.3.1 - Authenticated SQL Injection (SQLi) vulnerability

Authenticated SQL Injection SQLi vulnerability found by Nguyen Khanh in WordPress Ajax Load More plugin versions = 5.3.1. Solution Update the WordPress Ajax Load More plugin to the latest available version at least 5.3.2...

WordPress Ajax Load More 5.3.1 SQL Injection

Exploit Title: Wordpress Plugin Ajax Load More 5.3.1 - '1' Authenticated SQL Injection Exploit Author: SunCSR Sun Cyber Security Research - Nguyen Khang Google Dork: N/A Date: 2020-05-18 Vendor Homepage: https://connekthq.com/plugins/ajax-load-more/ Software Link:...

WordPress Plugin Ajax Load More 5.3.1 - '#1' Authenticated SQL Injection

Exploit Title: Wordpress Plugin Ajax Load More 5.3.1 - '1' Authenticated SQL Injection Exploit Author: SunCSR Sun Cyber Security Research - Nguyen Khang Google Dork: N/A Date: 2020-05-18 Vendor Homepage: https://connekthq.com/plugins/ajax-load-more/ Software Link:...

WordPress feed-them-social plugin cross-site scripting vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the Facebook Feeds Load More button in versions of the WordPress...

CVE-2015-9351: Improper Input Validation

The feed-them-social plugin before 1.7.0 for WordPress has possible shortcode execution in the Facebook Feeds load more button...

CVE-2015-9350: Improper Neutralization of Input During Web Page Generation

The feed-them-social plugin before 1.7.0 for WordPress has reflected XSS in the Facebook Feeds load more button...

WordPress Ajax Load More 2.11.1 Local File Inclusion

------------------------------------------------------------------------ Ajax Load More Local File Inclusion vulnerability ------------------------------------------------------------------------ Burak Kelebek, July 2016 ------------------------------------------------------------------------...

Ajax Load More <= 2.11.1 - Local File Inclusion (LFI)

NOTE: The victim should have the paid add-on Custom Repeater or Unlimited installed...

WordPress Ajax Load More Plugin <= 2.11.1 - Local File Inclusion

Because of this vulnerability, attackers can run arbitrary PHP code. Solution Upgrade the plugin...

WordPress Ajax Load More PHP Upload

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Wordpress Ajax Load More PHP Upload Vulnerability', 'Description' = %q This module exploits an arbitrary file upload in the WordPres...

WordPress Ajax Load More Plugin 2.8.1.1 - PHP Upload

Ajax Load More plugin is prone to a PHP upload vulnerability that allows to get remote code execution. Solution Upgrade the plugin...

WordPress Plugin Ajax Load More 2.8.1.1 - PHP Upload (Metasploit)

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Wordpress Ajax Load More PHP Upload Vulnerability', 'Description' = %q This module exploits an arbitrary file upload in the WordPres...

Wordpress Ajax Load More Plugin < 2.8.2 - File Upload Vulnerability

Exploit for php platform in category web applications This module requires Metasploit: http://www.metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'WordPress Plugin ajax-load-more Authenticated Arbitrary File Upload',...

WordPress Plugin Ajax Load More < 2.8.2 - Arbitrary File Upload

This module requires Metasploit: http://www.metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'WordPress Plugin ajax-load-more Authenticated Arbitrary File Upload', 'Description' = %q This module exploits an authenticated...

Ajax Load More <= 2.8.1.1 - Authenticated File Upload & Deletion

Authenticated file upload in file ajax-load-more/admin/admin.php file, in the function almsaverepeater. The variable $f is set to a predictable PHP file path, and then the content of the variable $c is written into that file. The following code proves that this second variable is also set from...