212 matches found
WordPress Community by PeepSo Plugin <= 6.0.2.0 is vulnerable to Cross Site Request Forgery (CSRF)
Software Community by PeepSo Type Plugin Vulnerable versions = 6.0.2.0 Fixed in 6.0.3.0 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2022-41633 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 748f2251b3db Credits István Márt...
CVE-2016-10968
The peepso-core plugin before 1.6.1 for WordPress has PeepSoProfilePreferencesAjax-save privilege escalation...
Privilege escalation
The peepso-core plugin before 1.6.1 for WordPress has PeepSoProfilePreferencesAjax-save privilege escalation...
CVE-2016-10968
The peepso-core plugin before 1.6.1 for WordPress has PeepSoProfilePreferencesAjax-save privilege escalation...
CVE-2016-10968
CVE-2016-10968 affects the peepso-core plugin for WordPress prior to 1.6.1. The issue is a privilege escalation via PeepSoProfilePreferencesAjax->save(), allowing an authenticated user to elevate privileges (to Administrator) due to the underlying flaw in the saved preferences handling. The NV...
WordPress plugin PeepSo cross-site scripting vulnerability
WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in WordPress plugin PeepSo v1.11.2, which can be exploited by an attacker to...
WordPress PeepSo 1.11.2 XSS / SQL Injection Vulnerabilities
Exploit for php platform in category web applications WordPress PeepSo 1.11.2 XSS / SQL Injection Vulnerabilities Author: Socket0x03 Alvaro J. Gene Software Link: https://wordpress.org/plugins/peepso-core/ Plugin: PeepSo Version: 1.11.2 File: Members Parameter: query Language: This application is...
WordPress PeepSo 1.11.2 Cross Site Scripting
=================================================================================== PeepSo v1.11.2 WordPress Plugin - Cross-Site Scripting Vulnerability in Members" =================================================================================== Exploit Title: PeepSo v1.11.2 WordPress Plugin -...
WordPress PeepSo 1.11.2 SQL Injection
============================================================ PeepSo v1.11.2 WordPress Plugin - Time-Based SQL Injection ============================================================ Exploit Title: PeepSo v1.11.2 WordPress Plugin - Time-Based SQL Injection Date: 11-09-2018 Category: Webapps Author:...
peepso.com XSS vulnerability
Vulnerable URL: https://www.peepso.com/search/%22%3E%3Csvg%20onload%3Dalert%22OPENBUGBOUNTY%22%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 24.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 255420 VIP website status:| No...
WordPress PeepSo Plugin <= 1.6.0 - Privilege Escalation
This plugin is prone to a privilege escalation vulnerability. It allows a logged in user to upgrade their account to be an administrator. Solution Update the plugin...
