CVE-2016-11002

The Elegant Themes Extra theme before 1.2.4 for WordPress has privilege escalation...

Privilege escalation

The Elegant Themes Monarch plugin before 1.2.7 for WordPress has privilege escalation...

Privilege escalation

The Elegant Themes Extra theme before 1.2.4 for WordPress has privilege escalation...

Privilege escalation

The Elegant Themes Bloom plugin before 1.1.1 for WordPress has privilege escalation...

CVE-2016-11004

The CVE-2016-11004 entry concerns the WordPress plugin Elegant Themes Monarch (before version 1.2.7) with a privilege escalation flaw. Affected software is the Monarch plugin for WordPress; root cause details are not provided in the available documents beyond the privilege escalation classificati...

CVE-2016-11004

The Elegant Themes Monarch plugin before 1.2.7 for WordPress has privilege escalation...

CVE-2016-11002

The CVE-2016-11002 entry affects the Elegant Themes Extra theme for WordPress, up to version 1.2.4 (pre-1.2.4). The vulnerability is a privilege escalation in the theme, enabling higher-privilege actions by users. Public references describe it as a privilege-escalation issue in Elegant Themes pro...

CVE-2016-11002

The Elegant Themes Extra theme before 1.2.4 for WordPress has privilege escalation...

CVE-2016-11003

The Bloom plugin for WordPress (Elegant Themes) is affected prior to version 1.1.1, with a privilege escalation vulnerability disclosed across multiple sources (NVD/Red Hat/WPVulnDB/PT Security). Impact described as privilege escalation for registered users, with remediation to upgrade to version...

CVE-2016-11003

The Elegant Themes Bloom plugin before 1.1.1 for WordPress has privilege escalation...

PT-2019-7796

Name of the Vulnerable Software and Affected Versions Elegant Themes Bloom plugin versions prior to 1.1.1 Description The issue allows for privilege escalation. Recommendations For versions prior to 1.1.1, update to version 1.1.1 or later to resolve the issue...

NewStart CGSL MAIN 4.05 : thunderbird Multiple Vulnerabilities (NS-SA-2019-0136)

The remote NewStart CGSL host, running version MAIN 4.05, has thunderbird packages installed that are affected by multiple vulnerabilities: - Using remote content in encrypted messages can lead to the disclosure of plaintext. This vulnerability affects Thunderbird ESR 52.8 and Thunderbird 52.8...

ND Shortcodes For Visual Composer < 6.0 - Unauthenticated WP Options Update

Privilege escalation vulnerability that could allow an unauthenticated user to modify the settings of WordPress and to take over the blog and its database. Please note that the vulnerability requires the blog to use one of the several themes from the author in order to exploit it, otherwise the...

WordPress Real Estate Theme 2.8.9 Cross Site Scripting

Exploit Title: Real Estate 7 - Real Estate WordPress Theme v2.8.9 Persistent XSS Injection Google Dork: inurl:"/wp-content/themes/realestate-7/" Date: 2019/07/20 Author: m0ze Vendor Homepage: https://contempothemes.com Software Link:...

WordPress Theme Real Estate 2.8.9 - Cross-Site Scripting

WordPress Theme Real Estate 2.8.9 - Cross-Site Scripting Exploit Title: Real Estate 7 - Real Estate WordPress Theme v2.8.9 Persistent XSS Injection Google Dork: inurl:"/wp-content/themes/realestate-7/" Date: 2019/07/20 Author: m0ze Vendor Homepage: https://contempothemes.com Software Link:...

WordPress Theme Real Estate 2.8.9 - Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: Real Estate 7 - Real Estate WordPress Theme v2.8.9 Persistent XSS Injection Google Dork: inurl:"/wp-content/themes/realestate-7/" Author: m0ze Vendor Homepage: https://contempothemes.com Software Link:...

WordPress WPS Child Themes Generator plugin <= 1.1 - Path Traversal vulnerability

Path Traversal vulnerability found by Julio Potier in WordPress WPS Child Themes Generator plugin versions = 1.1. Solution Update the WordPress WPS Child Themes Generator plugin to the latest available version at least 1.2...

WPS Child Themes Generator <= 1.1 - Path Traversal

The WPS Child Theme Generator WordPress plugin was affected by a Path Traversal security vulnerability...

Terminus - A Terminal For A More Modern Age

Terminus is a highly configurable terminal emulator for Windows, macOS and Linux Theming and color schemes Fully configurable shortcuts Split panes Remembers your tabs PowerShell and PS Core, WSL, Git-Bash, Cygwin, Cmder and CMD support Integrated SSH client and connection manager Full Unicode...

WordPress Antena_Ri Institute Themes Cross-Site Request Forgery Vulnerability

WordPress is a blogging platform based on the PHP language, which can be used to set up a website on a server that supports PHP and MySQL databases, and can also be used as a content management system CMS. A cross-site request forgery vulnerability exists in WordPress AntenaRi Institute Themes,...