WordPress Plugin Responsive Thumbnail Slider 1.0 - Arbitrary File Upload

WordPress Plugin Responsive Thumbnail Slider 1.0 - Arbitrary File Upload Exploit Title: Wordpress Responsive Thumbnail Slider Arbitrary File Upload Date: 2015/8/29 Exploit Author: Arash Khazaei Vendor Homepage: https://wordpress.org/plugins/wp-responsive-thumbnail-slider/ Software Link:...

WordPress Responsive Thumbnail Slider 1.0 Shell Upload

POC : For Exploiting This Vulnerability : Go To Add Image Section And Upload File By Self Plugin Uploader Then Upload File With Double Extension Image And By Using A BurpSuite Or Tamper Data Change The File Name From Shell.php.jpg To Shell.php And Shell Is Uploaded . :...

WordPress Plugin Responsive Thumbnail Slider 1.0 - Arbitrary File Upload

Exploit Title: Wordpress Responsive Thumbnail Slider Arbitrary File Upload Date: 2015/8/29 Exploit Author: Arash Khazaei Vendor Homepage: https://wordpress.org/plugins/wp-responsive-thumbnail-slider/ Software Link: https://downloads.wordpress.org/plugin/wp-responsive-thumbnail-slider.zip Version:...

WordPress Captain Slider 1.0.6 Cross Site Scripting

--e89a8ff1ccaefae749051e667db5 Content-Type: text/plain; charset=UTF-8 --e89a8ff1ccaefae749051e667db5 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Exploit Title: Wordpress Captain Slider St...

WordPress Responsive Thumbnail Slider Plugin 1.0 - XSS / Arbitrary File Upload Vulnerabilities

Exploit for php platform in category web applications " name="thumbnails" " style="width:50px" height="50px"/ input type="checkbox" val...

WordPress Responsive Thumbnail Slider Plugin <= 1.0 - Multiple Vulnerabilities

This plugin is prone to a cross site scripting and cross site request forgery vulnerabilities. Solution Update the plugin...

WordPress Smart Slider 2 Plugin <= 2.3.11 - Reflected XSS

Because of this vulnerability, authenticated administrators can inject HTML or JS code. Solution Update the plugin...

Smart Slider 2 <= 2.3.11 - Authenticated Reflected Cross-Site Scripting (XSS)

The smart-slider-2 WordPress plugin was affected by an Authenticated Reflected Cross-Site Scripting XSS security vulnerability...

Master Slider <= 2.5.1 - Authenticated Blind SQL Injection

The Master Slider – Responsive Touch Slider WordPress plugin was affected by an Authenticated Blind SQL Injection security vulnerability...

WordPress Master Slider Plugin <= 2.5.1 - Blind SQL Injection

Because of this vulnerability, authenticated users can execute arbitrary SQL commands. Solution Upgrade this plugin...

WordPress Slider Plugin <= 2.8.6 - Blind SQL Injection

Because of this vulnerability, authenticated users can execute arbitrary SQL commands. Solution Update the plugin...

Slider <= 2.8.6 - Authenticated Blind SQL Injection

The slider-image WordPress plugin was affected by an Authenticated Blind SQL Injection security vulnerability...

WordPress Smooth Slider Plugin <= 2.6.5 - SQL Injection

Because of this vulnerability, authenticated administrators can execute arbitrary SQL commands. Solution Update the plugin...

Smooth Slider <= 2.6.5 - Authenticated SQL Injection

The Smooth Slider WordPress plugin was affected by an Authenticated SQL Injection security vulnerability...

WordPress Slider Revolution Plugin Cross-Site Scripting Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports personal blog sites set up on servers with PHP and MySQL.Slider Revolution revslider is one of the slideshow plugin. A cross-site scripting vulnerability exists in...

WordPress ThemePunch Slider Revolution plugin and Showbiz Pro plugin have multiple vulnerabilities

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports in PHP and MySQL server set up a personal blog site.ThemePunch Slider Revolution revslider is one of the slideshow plugin.Showbiz Pro is one of the scrolling display...

WordPress Slider Revolution Plugin Directory Traversal Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports personal blog sites set up on servers with PHP and MySQL.Slider Revolution revslider is one of the slideshow plugin. A directory traversal vulnerability exists in...

CVE-2015-5151

Cross-site scripting XSS vulnerability in the Slider Revolution revslider plugin 4.2.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the clientaction parameter in a revsliderajaxaction action to wp-admin/admin-ajax.php...

CVE-2014-9735

The ThemePunch Slider Revolution revslider plugin before 3.0.96 for WordPress and Showbiz Pro plugin 1.7.1 and earlier for Wordpress does not properly restrict access to administrator AJAX functionality, which allows remote attackers to 1 upload and execute arbitrary files via an updateplugin...

Cross site scripting

Cross-site scripting XSS vulnerability in the Slider Revolution revslider plugin 4.2.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the clientaction parameter in a revsliderajaxaction action to wp-admin/admin-ajax.php...