WordPress JobSearch premium plugin <= 1.5.2 - Unauthenticated Reflected Cross-Site Scripting (XSS) vulnerability

Unauthenticated Reflected Cross-Site Scripting XSS vulnerability discovered by m0ze in WordPress JobSearch premium plugin versions = 1.5.2. Solution Update the WordPress JobSearch premium plugin to the latest available version at least 1.5.3...

WordPress CarrerUp premium theme <= 2.3.0 - Unauthenticated Reflected Cross-Site Scripting (XSS) vulnerability

Unauthenticated Reflected Cross-Site Scripting XSS vulnerability discovered by m0ze in WordPress CarrerUp premium theme versions = 2.3.0. Solution Update the WordPress CarrerUp premium theme to the latest available version at least 2.3.1...

WordPress Nexos premium theme <= 1.7 - SQL Injection (SQLi) vulnerability

SQL Injection SQLi vulnerability discovered by m0ze in WordPress Nexos premium theme versions = 1.7. Solution Update the WordPress Nexos premium theme to the latest available version at least 1.8...

WordPress Reality theme <= 2.5.1 - Unauthenticated Reflected Cross-Site Scripting (XSS) vulnerability

Unauthenticated Reflected Cross-Site Scripting XSS vulnerability found by m0ze in WordPress Reality premium theme versions = 2.5.1. Solution 2020 February 7 - the theme is no more available on Theme forest, we were unable to find information about the patched version...

WordPress Houzez theme <= 1.8.3 - Unauthenticated Cross-Site Scripting (XSS) vulnerability

Unauthenticated Cross-Site Scripting XSS vulnerability found by m0ze in WordPress Houzez theme versions = 1.8.3. Solution Update the WordPress Houzez theme to the latest available version at least 1.8.4...

WordPress CarSpot premium theme <= 2.2.2 - Authenticated Persistent Cross-Site Scripting (XSS) vulnerability (ad post)

Authenticated Persistent Cross-Site Scripting XSS vulnerability ad post vulnerability discovered by m0ze in WordPress CarSpot premium theme versions = 2.2.2. Solution Update the WordPress CarSpot premium theme to the latest available version at least 2.2.3...

WordPress CarSpot premium theme <= 2.2.2 - Authenticated Persistent Cross-Site Scripting (XSS) vulnerability (registration form & user profile)

Authenticated Persistent Cross-Site Scripting XSS vulnerability discovered by m0ze in WordPress CarSpot premium theme versions = 2.2.2. Solution Update the WordPress CarSpot premium theme to the latest available version at least 2.2.3...

WordPress CarSpot theme <= 2.2.0 - Multiple Vulnerabilities (Authenticated Persistent XSS & IDOR)

Multiple Vulnerabilities Authenticated Persistent XSS & IDOR found by m0ze in WordPress CarSpot theme versions = 2.2.0. Solution Update the WordPress CarSpot theme to the latest available version at least 2.2.1...

WordPress Real Estate 7 premium theme <= 2.9.4 - Persistent Self Cross-Site Scripting (XSS) vulnerability

Persistent Self Cross-Site Scripting XSS vulnerability discovered by m0ze in WordPress Real Estate 7 premium theme versions = 2.9.4. Solution Update the WordPress Real Estate 7 premium theme to the latest available version at least 2.9.5...

WordPress Travel Booking theme <= 2.7.8.5 - Reflected & Persistent Cross-Site Scripting (XSS) vulnerabilities

Reflected & Persistent Cross-Site Scripting XSS vulnerabilities found by m0ze in WordPress Travel Booking theme versions = 2.7.8.5. Solution Update the WordPress Travel Booking theme to the latest available version at least 2.7.8.6...

WordPress EasyBook premium theme <= 1.2.1 - Unauthenticated Reflected Cross-Site Scripting (XSS) vulnerability

Unauthenticated Reflected Cross-Site Scripting XSS vulnerability discovered by m0ze in WordPress EasyBook premium theme versions = 1.2.1. Solution Update the WordPress EasyBook premium theme to the latest available version at least 1.2.2...

WordPress CityBook theme <= 2.3.3 - Multiple vulnerabilities (Reflected XSS, Persistent XSS & IDOR)

Multiple vulnerabilities Reflected XSS, Persistent XSS & IDOR found by m0ze in WordPress CityBook theme versions = 2.3.3. Solution Update the WordPress CityBook theme to the latest available version at least 2.3.4...

WordPress TownHub premium theme <= 1.0.5 - Unauthenticated Cross-Site Scripting (XSS) vulnerability

Unauthenticated Cross-Site Scripting XSS vulnerability found by m0ze in WordPress TownHub premium theme versions = 1.0.5. Solution Update the WordPress TownHub premium theme to the latest available version at least 1.0.6...

GigToDo 1.3 - Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: GigToDo - Freelance Marketplace Script v1.3 Persistent XSS Injection Author: m0ze Vendor Homepage: https://www.gigtodoscript.com Software Link: https://codecanyon.net/item/gigtodo-freelance-marketplace-script/23855397 Version: =...

WordPress iLive premium plugin <= 1.0.4 - Stored Cross-Site Scripting (XSS) vulnerability

Stored Cross-Site Scripting XSS vulnerability found by m0ze in WordPress iLive premium plugin versions = 1.0.4. Solution 09 July 2019 - we were unable to find a patched version of this plugin...

WordPress Support Board premium plugin <= 1.2.8 - Stored Cross-Site Scripting (XSS) vulnerability

Stored Cross-Site Scripting XSS vulnerability found by m0ze in WordPress Support Board premium plugin versions = 1.2.8. Solution Update the WordPress Support Board premium plugin to the latest available version at least 1.2.9...