CVE-2015-5057

Cross-site scripting XSS vulnerability exists in the Wordpress admin panel when the Broken Link Checker plugin before 1.10.9 is installed...

CVE-2015-5057: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability exists in the Wordpress admin panel when the Broken Link Checker plugin before 1.10.9 is installed...

PT-2017-6809

Name of the Vulnerable Software and Affected Versions Wordpress Broken Link Checker plugin versions prior to 1.10.9 Description A cross-site scripting XSS issue exists in the Wordpress admin panel. This occurs when the Broken Link Checker plugin is installed. Recommendations For Wordpress Broken...

DEBIAN-CVE-2017-6816

In WordPress before 4.7.3 wp-admin/plugins.php, unintended files can be deleted by administrators using the plugin deletion functionality...

CVE-2017-6575

A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta aka mail-masta plugin 1.0 for WordPress. This affects ./inc/lists/editmember.php with the GET Parameter: memberid...

CVE-2017-6576

A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta aka mail-masta plugin 1.0 for WordPress. This affects ./inc/campaign/campaign-delete.php with the GET Parameter: id...

CVE-2017-6575

A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta aka mail-masta plugin 1.0 for WordPress. This affects ./inc/lists/editmember.php with the GET Parameter: memberid...

CVE-2017-6576

A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta aka mail-masta plugin 1.0 for WordPress. This affects ./inc/campaign/campaign-delete.php with the GET Parameter: id...

PT-2017-17168

Name of the Vulnerable Software and Affected Versions Mail Masta plugin version 1.0 Description A SQL injection issue is present, which can be exploited with WordPress admin access. This issue affects the ./inc/lists/edit member.php file, specifically with the member id GET parameter...

CVE-2017-6575: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta aka mail-masta plugin 1.0 for WordPress. This affects ./inc/lists/editmember.php with the GET Parameter: memberid...

PT-2017-17164

Name of the Vulnerable Software and Affected Versions Mail Masta plugin version 1.0 Description A SQL injection issue is present, which can be exploited with WordPress admin access. This issue affects the ./inc/campaign/view-campaign.php file, specifically the id GET parameter. Recommendations Fo...

PT-2017-17169

Name of the Vulnerable Software and Affected Versions Mail Masta plugin version 1.0 Description A SQL injection issue is present, which can be exploited with WordPress admin access. This issue affects the ./inc/campaign/campaign-delete.php file, specifically the id GET parameter. Recommendations...

WordPress Core 4.5.3 - Directory Traversal / Denial of Service

Path traversal vulnerability in WordPress Core Ajax handlers Abstract A path traversal vulnerability was found in the Core Ajax handlers of the WordPress Admin API. This issue can potentially be used by an authenticated user Subscriber to create a denial of service condition of an affected...

WordPress Admin Shell Upload

This module requires Metasploit: http://www.metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'rex/zip' class Metasploit3 'WordPress Admin Shell Upload', 'Description' = %q This module will generate a plugin, pack the payload into it...

VulnCheck KEV: CVE-2014-9734

Directory traversal vulnerability in the Slider Revolution revslider plugin before 4.2 for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the img parameter in a revslidershowimage action to wp-admin/admin-ajax.php...

WordPress Count-Per-Day plugin 3.2.5. Type-1 (reflected) Cross Site Scripting (XSS)

------------------ WordPress Count-Per-Day plugin 3.2.5. Type-1 reflected Cross Site Scripting XSS affected versions = 3.2.5. tested on 3.2.5, 3.2.3 impact: - code execution in browser context author: alejandr0.m0f0 1/ navigate to the page: /wordpress/wp-admin/?page=cpdmetaboxes 2/ bottom of the...

PT-2008-2242 · Dmssoftware · Dmsguestbook

Name of the Vulnerable Software and Affected Versions: DMSGuestbook version 1.7.0 Description: The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the "file" parameter to "wp-admin/admin.php", the "messagefield" parameter in the guestbook page, or th...