Post Thumbnail Editor <= 2.4.8 - Sensitive Information Exposure

Description The Post Thumbnail Editor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.4.8. This makes it possible for unauthenticated attackers to extract sensitive user or configuration data...

WordPress Post Thumbnail Editor Plugin <= 2.4.8 is vulnerable to Sensitive Data Exposure

Software Post Thumbnail Editor Type Plugin Vulnerable versions = 2.4.8 Fixed in N/A OWASP Top 10 A9: Security Logging and Monitoring Failures Classification Sensitive Data Exposure CVE CVE-2024-24845 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 5dbd01959d8e Credits Josh...

CVE-2023-29171

Unauth. Reflected Cross-site Scripting XSS vulnerability in Magic Post Thumbnail plugin = 4.1.10 versions...

CVE-2023-29171

Unauth. Reflected Cross-site Scripting XSS vulnerability in Magic Post Thumbnail plugin = 4.1.10 versions...

Cross site scripting

Unauth. Reflected Cross-site Scripting XSS vulnerability in Magic Post Thumbnail plugin = 4.1.10 versions...

CVE-2023-29171

CVE-2023-29171: Unauthenticated Reflected Cross-Site Scripting in the WordPress plugin Magic Post Thumbnail (versions

WordPress plugin Magic Post Thumbnail 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

PT-2023-22185 · WordPress · Magic Post Thumbnail

Name of the Vulnerable Software and Affected Versions: Magic Post Thumbnail plugin versions prior to 4.1.10 Description: The issue is related to an Unauth. Reflected Cross-site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a website, potentially allowi...

Magic Post Thumbnail < 4.1.11 - Reflected XSS

The plugin does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

WordPress Auto Featured Image (Auto Post Thumbnail) Plugin < 3.9.16 is vulnerable to Arbitrary File Upload

Software Auto Featured Image Auto Post Thumbnail Type Plugin Vulnerable versions 3.9.16 Fixed in 3.9.16 OWASP Top 10 A1: Injection Classification Arbitrary File Upload CVE CVE-2023-0477 Patch priority High CVSS severity High 9.1 Developer Claim ownership PSID ad8cfc8bf738 Credits dc11 Required...

PluXml 跨站脚本漏洞

PluXml is a content management system that does not require a database to work.A cross-site scripting vulnerability exists in PluXML version 5.8.7. An attacker can exploit this vulnerability to execute arbitrary web script or HTML via a payload in the thumbnail path of a blog post...

WordPress Magic Post Thumbnail plugin < 3.3.11 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Magic Post Thumbnail plugin versions 3.3.11. Solution Update the WordPress Magic Post Thumbnail plugin to the latest available version at least 3.3.11...

CVE-2021-24932

The Auto Featured Image Auto Post Thumbnail WordPress plugin before 3.9.3 does not sanitise and escape the postid parameter before outputting back in an admin page within a JS block, leading to a Reflected Cross-Site Scripting issue...

CVE-2021-24932

The CVE-2021-24932 entry concerns the WordPress plugin Auto Featured Image (Auto Post Thumbnail) prior to version 3.9.3. The vulnerability is a Reflected Cross-Site Scripting (XSS) flaw caused by insufficient sanitisation/escaping of the post_id parameter in an admin page output within a JS block...

Magic Post Thumbnail < 3.3.7 - Reflected Cross-Site Scripting (XSS)

The plugin does not sanitise or escape its ids GET parameter before outputting it back in the bulk generation page, leading to a reflected Cross-Site Scripting issue PoC https://example.com/wp-admin/admin.php?page=magicpostthumbnail%2Finc%2Fadmin%2Fbulkgeneration.php=...

WordPress Hungred Post Thumbnail Plugin <= 2.1.9 - Remote Code Execution

This plugin is prone to hptfileupload.php file upload PHP code execution vulnerability. Solution Update the plugin...

WordPress Hungred Post Thumbnail Plugin <= 2.1.9 - Remote Code Execution

This plugin is prone to hptfileupload.php file upload PHP code execution vulnerability. Solution Update the plugin...

WordPress Hungred Post Thumbnail 2.1.9 Shell Upload

Description : Wordpress Plugins - Hungred Post Thumbnail Arbitrary File Upload Vulnerability Version : 2.1.9 Link : http://wordpress.org/extend/plugins/hungred-post-thumbnail/ Plugins : http://downloads.wordpress.org/plugin/hungred-post-thumbnail.zip Date : 31-05-2012 Google Dork :...

Wordpress Plugins - Hungred Post Thumbnail Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications Description : Wordpress Plugins - Hungred Post Thumbnail Arbitrary File Upload Vulnerability Version : 2.1.9 Link : http://wordpress.org/extend/plugins/hungred-post-thumbnail/ Plugins :...