CVE-2026-12165: Improper Privilege Management

The Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 30.0.2 via the RegistryUserRole parameter. This is due to the plugin's admin menu being registered at the editposts...

Wordpress Photocrati theme-ecomm-sizes.php文件prod_id参数-跨站脚本漏洞

No description provided by source...

CVE-2015-2216

SQL injection vulnerability in ecomm-sizes.php in the Photocrati theme 4.x for WordPress allows remote attackers to execute arbitrary SQL commands via the prodid parameter...

Sql injection

SQL injection vulnerability in ecomm-sizes.php in the Photocrati theme 4.x for WordPress allows remote attackers to execute arbitrary SQL commands via the prodid parameter...

CVE-2015-2216: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in ecomm-sizes.php in the Photocrati theme 4.x for WordPress allows remote attackers to execute arbitrary SQL commands via the prodid parameter...

Photocrati Theme 4.x.x - SQL Injection

http://www.example.com/wp-content/themes/photocrati-theme-path/ecomm-sizes.php?prodid=SQL...

CVE-2014-100016: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in photocrati-gallery/ecomm-sizes.php in the Photocrati theme for WordPress allows remote attackers to inject arbitrary web script or HTML via the prodid parameter...

WordPress Photocrati Cross Site Scripting

Exploit Title : Wordpress Photocrati-theme Cross Site Scripting Exploit Author : ACC3SS Vendor Homepage : http://www.photocrati.com Google Dork : inurl : inurl:wp-content/themes/photocrati-theme/photocrati-gallery Date : 2014-01-29 Tested on : Windows 7 Location :...