4356 matches found
XSS, FPD and RCE vulnerabilities in DZS Video Gallery for WordPress
Hello 3APA3A! These are Cross-Site Scripting, Full path disclosure and OS Commanding vulnerabilities in plugin DZS Video Gallery for WordPress. Earlier I've disclosed Content Spoofing and Cross-Site Scripting vulnerabilities in this plugin http://securityvulns.ru/docs30871.html...
Love It - XSS / Content Spoofing / Path Disclosure
The iloveit WordPress theme was affected by a XSS / Content Spoofing / Path Disclosure security vulnerability...
Studio Zen - Multiple Script Direct Request Path Disclosure
The studiozen WordPress theme was affected by a Multiple Script Direct Request Path Disclosure security vulnerability...
Feather12 - Multiple Script Direct Request Path Disclosure
The feather12 WordPress theme was affected by a Multiple Script Direct Request Path Disclosure security vulnerability...
Caulk - path disclosure
The caulk WordPress theme was affected by a path disclosure security vulnerability...
yvora - Full Path Disclosure
The yvora WordPress theme was affected by a Full Path Disclosure security vulnerability...
appius - Full Path Disclosure
The appius WordPress theme was affected by a Full Path Disclosure security vulnerability...
Shotzz - Full Path Disclosure
The shotzz WordPress theme was affected by a Full Path Disclosure security vulnerability...
moneymasters - Full Path Disclosure
The moneymasters WordPress theme was affected by a Full Path Disclosure security vulnerability...
onepagewebsite - Full Path Disclosure
The onepagewebsite WordPress theme was affected by a Full Path Disclosure security vulnerability...
Starbox Voting - ajax.php Full Path Disclosure
The Starbox Voting WordPress plugin was affected by an ajax.php Full Path Disclosure security vulnerability...
Activity Log - Full Path Disclosure
The Activity Log WordPress plugin was affected by a Full Path Disclosure security vulnerability...
Dewplayer <= 1.2 - dewplayer.php Direct Request Path Disclosure Weakness
The dewplayer-flash-mp3-player WordPress plugin was affected by a dewplayer.php Direct Request Path Disclosure Weakness security vulnerability...
Meta Slider 2.1.6 - Multiple Full Path Disclosure
The Responsive Slider by MetaSlider – Slider and Carousel Plugin for WordPress WordPress plugin was affected by a Multiple Full Path Disclosure security vulnerability...
Spam Free Plugin 1.9.2 - Multiple Script Direct Request Path Disclosure
The Spam Free WordPress WordPress plugin was affected by a Multiple Script Direct Request Path Disclosure security vulnerability...
AntiVirus 1.0 - uninstall.php Direct Request Path Disclosure
The AntiVirus WordPress plugin was affected by an uninstall.php Direct Request Path Disclosure security vulnerability...
search-&-share 0.9.3 - SearchAndShare.php Direct Request Path Disclosure
The search-and-share WordPress plugin was affected by a SearchAndShare.php Direct Request Path Disclosure security vulnerability...
WP Photo Album Plus - Full Path Disclosure
The WP Photo Album Plus WordPress plugin was affected by a Full Path Disclosure security vulnerability...