4356 matches found
RokBox <= 2.13 - thumb.php src Parameter Malformed Input Path Disclosure
The wprokbox WordPress plugin was affected by a thumb.php src Parameter Malformed Input Path Disclosure security vulnerability...
grou-r&om-image-widget - Full Path Disclosure
The grou-random-image-widget WordPress plugin was affected by a Full Path Disclosure security vulnerability...
sintic_gallery - Path Disclosure
The sinticgallery WordPress plugin was affected by a Path Disclosure security vulnerability...
Sahifa 2.4.0 - Multiple Full Path Disclosure
The sahifa WordPress theme was affected by a Multiple Full Path Disclosure security vulnerability...
WordPress Sahifa Theme <= 2.4.0 - Multiple Vulnerabilities
This theme is prone to a cross site request forgery and full path disclosure vulnerabilities. Because of CSRF you can lost your site settings. Because of full path disclosure, the attackers can obtain sensitive information via an invalid upload request. Solution Update the theme...
WordPress Photocrati Theme - Full Path Disclosure
Because of this vulnerability, the attackers can obtain sensitive information via an invalid upload request. Solution Update the theme...
WordPress 3.5.2 - Media Library Multiple Function Path Disclosure
...
WordPress MoneyMasters Theme - Full Path Disclosure
Because of this vulnerability, the attackers can obtain sensitive information via an invalid upload request. Solution Update the theme...
WordPress Vithy Theme - Full Path Disclosure
Because of this vulnerabilitity, attackers can obtain the installation path via a direct request to various files. Solution Update the theme...
WordPress Slash Themes - Multiple Vulnerabilities
All versions of this theme are prone to full path disclosure in "index.php" and others php files vulnerability, also, to a cross site scripting and shell upload vulnerabilities. Solution There are no information about fixing these vulnerabilities...
WordPress Shotzz Theme - Full Path Disclosure
Because of this vulnerability, the attackers can obtain sensitive information via an invalid upload request. Solution Update the theme...
WordPress Caulk Theme - Full Path Disclosure
Because of this vulnerability, the attackers can obtain sensitive information via an invalid upload request. Solution Update the theme...
WordPress Dewplayer Plugin <= 1.2 - Full Path Disclosure
This plugin is prone to a direct rquest path disclosure weakness in dewplayer.php. Solution Update the plugin...
WordPress Advanced Dewplayer Plugin <= 1.2 - Full Path Disclosure
This plugin is prone to a direct request full path disclosure in dewplayer.php. Solution Update the plugin...
WordPress One Page Website Theme - Full Path Disclosure
Because of this vulnerability, the attackers can obtain sensitive information via an invalid upload request. Solution Update the theme...
WordPress Starbox Voting Plugin - Full Path Disclosure
Because of this vulnerability, remote users can determine the full path to the web root directory and other potentially sensitive information. Solution Update the plugin...
WordPress Appius Theme - Full Path Disclosure
Because of this vulnerability, the attackers can obtain sensitive information via an invalid upload request. Solution Update the theme...
WordPress Feather12 Theme - Multiple Vulnerabilities
The attack vector requires separate vulnerability at target site to conduct CS and XSS attacks with using of jPlayer. Also, there are a full path disclosure vulnerability in this theme. Solution Update the theme...