5642 matches found
WordPress Royal Slider Plugin <= 3.2.6 - Cross Site Scripting
This WordPress plugin is prone to a cross-site scripting XSS vulnerability. It allows remote attackers to inject arbitrary script or HTML in browser in context of the vulnerable website. Solution Update the plugin...
Royal Slider <= 3.2.6 - Authenticated Cross-Site Scripting (XSS)
The vulnerability exists due to insufficient sanitation of user-supplied data in "rstype" HTTP GET parameter when creating / editing a slider. A remote attacker can trick a logged-in administrator to open a specially crafted link and execute arbitrary HTML and script code in browser in context of...
WordPress Plugin Slider Revolution <= 4.1.4 任意文件下载漏洞
所涉及文件：/incphp/framework/baseadmin.class.php //if not inside plugin don't continue if$this-isInsidePlugin == true self::addActionself::ACTIONADDSCRIPTS, "addCommonScripts"; self::addActionself::ACTIONADDSCRIPTS, "onAddScripts"; //a must event for any admin. call onActivate function...
WordPress Testimonial Slider Plugin <= 1.2.1 - Multiple Vulnerabilities
This plugin is prone to an authenticated stored cross site scripting and cross site request forgery vulnerabilities. Solution Update the plugin...
Testimonial Slider <= 1.2.1 - Authenticated Stored Cross-Site Scripting (XSS) & CSRF
This vulnerability needs administrator privileges to exploit. Editor and author roles do not have the necessary permissions to create new sliders, contrary to what the original advisory says. However, this vulnerability can be exploited by a malicious actor by combining the XSS with CSRF to...
WordPress Testimonial Slider Plugin <= 1.2.1 - Multiple Vulnerabilities
This plugin is prone to an authenticated stored cross site scripting and cross site request forgery vulnerabilities. Solution Update the plugin...
WordPress Testimonial Slider 1.2.1 Cross Site Scripting
GhostMail Exploit : For Exploiting This Vulnerability Install Testimonial Slider Plugin Then Create New Slider In Slider Name Input Place Your JavaScript Code After Creating Slider JavaScript Code Will Be Executed . Image POC : Vulnerable Code : Slider ID = For Patching : Slider ID = This...
Captain Slider 1.0.6 - Cross-Site Scripting (XSS)
The captain-slider WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...
WordPress Captain Slider Plugin <= 1.0.6 - Cross Site Scripting (XSS)
Because of this vulnerability, the attackers can inject arbitrary web script or HTML. Solution Update the plugin...
WordPress Captain Slider Plugin <= 1.0.6 - Cross Site Scripting (XSS)
Because of this vulnerability, the attackers can inject arbitrary web script or HTML. Solution Update the plugin...
Thumbnail Carousel Slider < 1.0.1 - Stored Cross-Site Scripting (XSS) & CSRF
The original advisory states that this vulnerability is exploitable with editor and author roles but this is incorrect. Only the administrator role by default can trigger this vulnerability. However, CSRF on the image upload form makes this exploitable by a malicious actor...
WordPress Responsive Thumbnail Slider 1.0 Shell Upload
POC : For Exploiting This Vulnerability : Go To Add Image Section And Upload File By Self Plugin Uploader Then Upload File With Double Extension Image And By Using A BurpSuite Or Tamper Data Change The File Name From Shell.php.jpg To Shell.php And Shell Is Uploaded . :...
WordPress Captain Slider 1.0.6 Cross Site Scripting
--e89a8ff1ccaefae749051e667db5 Content-Type: text/plain; charset=UTF-8 --e89a8ff1ccaefae749051e667db5 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Exploit Title: Wordpress Captain Slider St...
WordPress Responsive Thumbnail Slider Plugin <= 1.0 - Multiple Vulnerabilities
This plugin is prone to a cross site scripting and cross site request forgery vulnerabilities. Solution Update the plugin...
WordPress Plugin Responsive Thumbnail Slider 1.0 - Arbitrary File Upload
WordPress Plugin Responsive Thumbnail Slider 1.0 - Arbitrary File Upload Exploit Title: Wordpress Responsive Thumbnail Slider Arbitrary File Upload Date: 2015/8/29 Exploit Author: Arash Khazaei Vendor Homepage: https://wordpress.org/plugins/wp-responsive-thumbnail-slider/ Software Link:...
WordPress Responsive Thumbnail Slider Plugin 1.0 - XSS / Arbitrary File Upload Vulnerabilities
Exploit for php platform in category web applications " name="thumbnails" " style="width:50px" height="50px"/ input type="checkbox" val...
WordPress Plugin Responsive Thumbnail Slider 1.0 - Arbitrary File Upload
Exploit Title: Wordpress Responsive Thumbnail Slider Arbitrary File Upload Date: 2015/8/29 Exploit Author: Arash Khazaei Vendor Homepage: https://wordpress.org/plugins/wp-responsive-thumbnail-slider/ Software Link: https://downloads.wordpress.org/plugin/wp-responsive-thumbnail-slider.zip Version:...
WordPress Responsive Thumbnail Slider Arbitrary File Upload
This module exploits an arbitrary file upload vulnerability in Responsive Thumbnail Slider Plugin v1.0 for WordPress post authentication. Module Options msf use exploit/multi/http/wp/responsivethumbnailsliderupload msf undefinedresponsivethumbnailsliderupload show actions ...actions... msf...
Smart Slider 2 <= 2.3.11 - Authenticated Reflected Cross-Site Scripting (XSS)
The smart-slider-2 WordPress plugin was affected by an Authenticated Reflected Cross-Site Scripting XSS security vulnerability...