Immunity Canvas: WPTOUCH_NONCE

Name| wptouchnonce ---|--- CVE| CWE-434 Exploit Pack| CANVAS Description| WPTouch Nonce Notes| CVE Name: CWE-434 VENDOR: BraveNewCode Changelog: https://wordpress.org/plugins/wptouch/changelog/ Notes: Vulnerable versions are 3.x = 3.4.2 This is a post authentication shell upload vulnerability in ...

Immunity Canvas: WPSYMPOSIUM_RCE

Name| wpsymposiumrce ---|--- CVE| CWE-434 Exploit Pack| CANVAS Description| WP-Symposium RCE Notes| CVE Name: CWE-434 VENDOR: www.wpsymposium.com Notes: WP-Symposium is a social networking plugin for WordPress with 150k downloads as of 12/12/2014. This is an exceptionally straight forward shell...