HawkEye Credential Theft Malware Distributed in Recent Phishing Campaign

A wide variety of threat actors began distributing HawkEye malware through high-volume email campaigns after it became available for purchase via a public-facing website. The actors behind the phishing campaigns typically used email themes based on current events and media reports that would piqu...

WordPress Themes Awake Cross-Site Scripting Vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in WordPress Themes Awake. A remote attacker can exploit this vulnerability to...

WordPress Themes U-design File Upload Vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A file upload vulnerability exists in WordPress Themes U-design, which can be exploited by an attacker to upload arbitrary...

Wordpress Themes rehber file upload vulnerability

WordPress is a blogging platform developed using the PHP language that allows users to set up their weblogs on servers that support PHP and MySQL databases. A file upload vulnerability exists in Wordpress Themes rehber, which can be exploited by remote attackers to upload arbitrary files...

Multiple Vulnerabilities in Wordpress Themes Ebs

WordPress is a blogging platform developed using the PHP language that allows users to set up their weblogs on servers that support PHP and MySQL databases. A file upload and cross-site request forgery vulnerability exists in Wordpress Themes Ebs, which can be exploited by remote attackers to...

WordPress Easy WP SMTP Cross-Site Scripting Vulnerability

WordPress is a blogging platform developed using the PHP language that allows users to set up their own websites on servers that support PHP and MySQL databases. WordPress can also be used as a content management system CMS. A cross-site scripting vulnerability exists in WordPress Easy WP SMTP...

CVE-2017-8101

There is CSRF in Serendipity 2.0.5, allowing attackers to install any themes via a GET request...

s9y Serendipity Cross Site Request Forgery Vulnerability

Exploit for php platform in category web applications Details ====== Software: s9y Serendipity Version: Mitigations ======= update to Serendipity v2.1.x ======== FIX: ========== https://github.com/s9y/Serendipity/issues/452 Best regards, Zhiyang Zeng of Tencent security platform department...

WordPress Elegant Themes Divi Theme Directory Traversal Nmap NSE Script

local http = require "http" local shortport = require "shortport" local stdnse = require "stdnse" local string = require "string" local vulns = require "vulns" local nmap = require "nmap" description = Directory traversal vulnerability in the Elegant Themes Divi theme for WordPress allows remote...

Wordpress Multimedia1 Themes CSRF Vulnerability

Exploit for php platform in category web applications Wordpress Themes Multimedia1 Shell Upload Vulnerability | CSRF Author : Berandal Google Dork: inurl:/wp-content/themes/multimedia1/ Tested on: Win 7, Linux Blog : http://www.maxteroit.com/ +-+-+-+-+-+-+-+-+ |B|e|r|a|n|d|a|l| +-+-+-+-+-+-+-+-+ ...

Exploit for Path Traversal in Elegantthemes Divi

CVE-2015-1579 - WP Revslider AFD Exploit: Wordpress Slider Re...

DEBIAN-CVE-2017-5611

SQL injection vulnerability in wp-includes/class-wp-query.php in WPQuery in WordPress before 4.7.2 allows remote attackers to execute arbitrary SQL commands by leveraging the presence of an affected plugin or theme that mishandles a crafted post type name...

CSS injection in themes

PMASA-2017-4 Announcement-ID: PMASA-2017-4 Date: 2017-01-24 Summary CSS injection in themes Description It was possible to cause CSS injection in themes by crafted cookie parameters. Severity We consider this to be non critical. Affected Versions All 4.6.x versions prior to 4.6.6, 4.4.x versions...

phpMyAdmin -- Multiple vulnerabilities

The phpMyAdmin development team reports: Open redirect php-gettext code execution DOS vulnerability in table editing CSS injection in themes Cookie attribute injection attack SSRF in replication DOS in replication status...

WordPress Slider Templatic Tevolution < 2.3.6 - Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications Exploit Title: WordPress Templatic = 2.3.6 Tevolution File Upload Vulnerability Date: 30-12-2016 Software Link: Permium plugin Vendor Homepage: https://templatic.com/wordpress-plugins/tevolution Exploit Author: r3m1ck Website:...

WordPress Templatic 2.3.6 File Upload

Exploit Title: WordPress Templatic = 2.3.6 Tevolution File Upload Vulnerability Date: 30-12-2016 Software Link: Permium plugin Vendor Homepage: https://templatic.com/wordpress-plugins/tevolution Exploit Author: r3m1ck Website: https://www.r3m1ck.us/ Category: webapps Google Dork:...

WordPress Plugin Slider Templatic Tevolution < 2.3.6 - Arbitrary File Upload

Exploit Title: WordPress Templatic = 2.3.6 Tevolution File Upload Vulnerability Date: 30-12-2016 Software Link: Permium plugin Vendor Homepage: https://templatic.com/wordpress-plugins/tevolution Exploit Author: r3m1ck Website: https://www.r3m1ck.us/ Category: webapps Google Dork:...

Via WordPress Auto Update feature disposable invasion Internet 2 7%site-vulnerability warning-the black bar safety net

Recently, we are still constantly trying to find the WordPress community in a third-party plug-ins and themes in the presence of security vulnerabilities. During the study, we are also on WordPress core, and the associated wordpress. org system were detected. In the beginning of the year, we...

Wordpress Multi Themes Arbitrary File Download Vulnerability

Exploit for php platform in category web applications Exploit Title : Wordpress Multi Themes Arbitrary File Download Vulnerability Exploit Author : xBADGIRL21 Dork : wp-content/themes/ /lib/scripts/ Tested on: BackBox skype:xbadgirl21 Date: 22/08/2016 video Proof : https://youtu.be/DFtF14ShHk...

WordPress Directory Themes Arbitrary Shell Upload Vulnerability

Exploit for php platform in category web applications Exploit Title : Wordpress Theme Directory Arbitrary Shell Upload Vulnerability Exploit Author : xBADGIRL21 Dork : inurl:/wp-content/themes/Directory/ Vendor Homepage : https://templatic.com/ version : 2.0.16 - 2.0.14 & maybe high or lower Test...