csgjusticecenter.org XSS vulnerability

Open Bug Bounty ID: OBB-616248 Description| Value ---|--- Affected Website:| csgjusticecenter.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Wordpress 4.2.3 Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

WordPress WP Symposium Plugin 15.1 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Wordpress Plugin wp-symposium Unauthenticated SQL Injection Vulnerability Date: 2015-07-30 Exploit Author: PizzaHatHacker Vendor Homepage: http://www.wpsymposium.com/ Version: ? = version = 15.5.1 Tested on: Apache / WordPress...

WordPress Plugin WP Symposium 15.1 - 'get_album_item.php' SQL Injection

Exploit Title: Wordpress Plugin wp-symposium Unauthenticated SQL Injection Vulnerability Date: 2015-07-30 Exploit Author: PizzaHatHacker Vendor Homepage: http://www.wpsymposium.com/ Version: ? = version = 15.5.1 Contact: PizzaHatHackeragmail.com Tested on: Apache / WordPress 4.2.3 / wp-symposium...

DEBIAN-CVE-2015-5623

WordPress before 4.2.3 does not properly verify the editposts capability, which allows remote authenticated users to bypass intended access restrictions and create drafts by leveraging the Subscriber role, as demonstrated by a post-quickdraft-save action to wp-admin/post.php...