Stored XSS in WP Photo Album Plus WordPress Plugin

Advisory ID: HTB23257 Product: WP Photo Album Plus WordPress Plugin Vendor: J.N. Breetvelt Vulnerable Versions: 6.1.2 and probably prior Tested Version: 6.1.2 Advisory Publication: April 29, 2015 without technical details Vendor Notification: April 29, 2015 Vendor Patch: April 29, 2015 Public...

CVE-2015-0986

Multiple stack-based buffer overflows in Moxa VPort ActiveX SDK Plus before 2.8 allow remote attackers to insert assembly-code lines via vectors involving a regkey 1 set or 2 get command...

CVE-2015-3647

Multiple cross-site scripting XSS vulnerabilities in wppa-ajax-front.php in the WP Photo Album Plus aka WPPA plugin before 6.1.3 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 comemail or 2 comname parameter in a wppa do-comment action...

WordPress WP Photo Album Plus 6.1.2 Cross Site Scripting Vulnerability

WordPress WP Photo Album Plus plugin version 6.1.2 suffers from a cross site scripting vulnerability. Product: WP Photo Album Plus WordPress Plugin Vendor: J.N. Breetvelt Vulnerable Versions: 6.1.2 and probably prior Tested Version: 6.1.2 Advisory Publication: April 29, 2015 without technical...

WordPress WP Photo Album Plus 6.1.2 Cross Site Scripting

Advisory ID: HTB23257 Product: WP Photo Album Plus WordPress Plugin Vendor: J.N. Breetvelt Vulnerable Versions: 6.1.2 and probably prior Tested Version: 6.1.2 Advisory Publication: April 29, 2015 without technical details Vendor Notification: April 29, 2015 Vendor Patch: April 29, 2015 Public...

WordPress Backup Plus Backup Disclosure

WordPress 'WP Backup Plus' Plugin Exposure Backup File to Unauthorized Control CWE: CWE-530 Risk: High Author: Hugo Santiago dos Santos Contact: [email protected] Date: 15/05/2015 Vendor Homepage: http://wpbackupplus.com/ Google Dork: inurl:/wp-content/uploads/wp-backup-plus/ PoC :...

WordPress WP Photo Album Plus Plugin <= 5.0.10 - XSS

This plugin is prone to wp-admin/admin.php editid parameter cross site scripting vulnerability. Solution Update the plugin...

WordPress WP Photo Album Plus Plugin <= 5.4.17 Reflected XSS

Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update the plugin...

WordPress Backup Plus Plugin - Backup Disclosure

This plugin is prone to exposure backup file to unauthorized control vulnerability. Solution Update the plugin...

WordPress WP Photo Album Plus Plugin <= 5.4.8 - Stored XSS

This plugin is prone to a stored cross site scripting vulnerability. Solution Update the plugin...

WordPress Register Plus Redux Plugin <= 3.8.3 - Cross Site Scripting

Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update the plugin...

WordPress CSS Plus Plugin <= 1.3.1 - Unspecified Vulnerabilities

This plugin is prone to unspecified vulnerabilities. Solution Update the plugin...

WordPress fGallery Plus Plugin - Reflected Cross Site Scripting

This plugin is prone to a cross site scripting vulnerability via fimrss.php album parameter. Solution Update the plugin...

WordPress fGallery Plus Plugin - Reflected Cross Site Scripting

This plugin is prone to a cross site scripting vulnerability via fimrss.php album parameter. Solution Update the plugin...

WordPress Embed Plus Plugin <= 5.3 - Cross Site Scripting

Because of this vulnerability, the attackers can inject arbitrary web script or HTML. Solution Update the plugin...

ManageEngine Multiple Products Multiple Directory Traversal (CVE-2014-7866)

A directory traversal vulnerability exists in ManageEngine OpManager, Social IT Plus and IT360. The vulnerability is due to lack of authentication and insufficient input validation in HTTP requests. A remote unauthenticated attacker can exploit this vulnerability by uploading arbitrary files to...

WordPress WP Photo Album Plus Cross-Site Scripting Vulnerability

WordPress is a set of blogging platform developed by WordPress Software Foundation using PHP language, which supports setting up personal blog sites on servers with PHP and MySQL.WP Photo Album Plus is a plugin for managing and displaying photo albums and slideshows. A cross-site scripting...

WordPress WP Photo Album Plus Plugin <= 6.1.2 - Multiple XSS

Because of these vulnerabilities in wppa-ajax-front.php, the attackers can inject arbitrary web script or HTML via the "comemail" or "comname" parameters. Solution Update the plugin...

WordPress 3.5.1 Lightbox Plus RCE

Remote Code Execution in the Wordpress core using maybeunserialize and the simplehtmldomnode class Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

The vulnerability of the Red Hat Enterprise Linux operating system allows malicious actors to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the gcc-c++-4.1.2 package of the Red Hat Enterprise Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited locally...