dagda - Custom Background Shell Upload

The dagda WordPress theme was affected by a Custom Background Shell Upload security vulnerability...

vithy - Arbitrary File Upload

The vithy WordPress theme was affected by an Arbitrary File Upload security vulnerability...

I Love It - VideoJS Cross-Site Scripting

The i-love-it WordPress theme was affected by a VideoJS Cross-Site Scripting security vulnerability...

Clockstone <= 1.2 - Arbitrary File Upload

The clockstone WordPress theme was affected by an upload.php Arbitrary File Upload security vulnerability...

WordPress Crius Theme - Cross Site Scripting

This WordPress theme is prone to a cross-site scripting XSS vulnerability. It allows remote attackers to inject arbitrary script or HTML. Solution Update the theme...

WordPress Theme Kernel - Remote File Upload Vulnerability

No description provided by source. Exploit Title: WordPress themekernel-theme Themes Remote File Upload Vulnerability Author: iskorpitx Date: 6/11/2013 Vendor Homepage: http://www.wikmag.com/ Themes Link: http://themeforest.net/item/kernel-premium-wordpress-blog-magazine-theme-/857077 Infected...

Wordpress Theme Infocus /dl-skin.php 任意文件下载漏洞

No description provided by source...

Wordpress Theme Awake Arbitrary File Download Vulnerability

This exploit allows attacker to download any writable file from the server Usage Info Put the path of the file in the file's field of the exploit ,then click "Download" button then you get the file directly Title : Wordpress Theme Awake Arbitrary File Download Vulnerability Author : Aloulou Date ...

Wordpress Theme Construct Arbitrary File Download Vulnerability

This exploit allows attacker to download any writable file from the server Usage Info Put the path of the file in the file's field of the exploit ,then click "Download" button then you get the file directly Title : Wordpress Theme Construct Arbitrary File Download Vulnerability Author : Aloulou...

Wordpress Theme Myriad Arbitrary File Download Vulnerability

This exploit allows attacker to download any writable file from the server Usage Info The exploit extension is .html Put the path of the file in the file's field of the exploit ,then click "Download" button then you get the file directly Title : Wordpress Theme Myriad Arbitrary File Download...

Wordpress Theme Method Arbitrary File Download Vulnerability

This exploit allows attacker to download any writable file from the server Usage Info Put the path of the file in the file's field of the exploit ,then click "Download" button then you get the file directly Title : Wordpress Theme Method Arbitrary File Download Vulnerability Author : Aloulou Date...

Prostore < 1.1.3 - Open Redirection

The prostore WordPress theme was affected by an Open Redirection security vulnerability. PoC /wp-content/themes/prostore/go.php?https://example.com...

WordPress Theme LineNity 1.20 - Local File Inclusion Vulnerability

Exploit for php platform in category web applications + Local File Inclusion in WordPress Theme LineNity + Date: 13/04/2014 + Risk: High + Author: Felipe Andrian Peixoto + Vendor Homepage: http://themeforest.net/item/linenity-clean-responsive-wordpress-magazine/4417803 + Contact: email protected ...

WordPress Theme LineNity 1.20 - Local File Inclusion

WordPress Theme LineNity 1.20 - Local File Inclusion + Local File Inclusion in WordPress Theme LineNity + Date: 13/04/2014 + Risk: High + Author: Felipe Andrian Peixoto + Vendor Homepage: http://themeforest.net/item/linenity-clean-responsive-wordpress-magazine/4417803 + Contact:...

WordPress Theme Persuasion 2.x - Arbitrary File Download File Deletion

WordPress Theme Persuasion 2.x - Arbitrary File Download File Deletion Exploit Title: Persuasion Wordpress Theme - Arbitrary File Download and File Deletion Exploit Date: 19 December 2013 Exploit Author: Interference Security Vendor Homepage: http://mysitemyway.com/ Software Link:...

WordPress Theme Persuasion 2.x - Arbitrary File Download / File Deletion

Exploit Title: Persuasion Wordpress Theme - Arbitrary File Download and File Deletion Exploit Date: 19 December 2013 Exploit Author: Interference Security Vendor Homepage: http://mysitemyway.com/ Software Link: http://mysitemyway.com/theme/persuasion-wordpress-theme/ Version: Tested on 2.0 and 2....

WordPress Theme Suco - themify-ajax.php Arbitrary File Upload

WordPress Theme Suco - themify-ajax.php Arbitrary File Upload source: https://www.securityfocus.com/bid/63836/info The Suco themes for WordPress is prone to a vulnerability that lets attackers upload arbitrary files. The issue occurs because the application fails to adequately sanitize...

WordPress Theme Highlight Premium - Cross-Site Request Forgery / Arbitrary File Upload

Title : Wordpress Highlight Premium Themes CSRF File Upload Vulnerability Author : DevilScreaM Date : 11/10/2013 - 10 November 2013 Category : Web Applications Type : PHP Vendor : http://themeforest.net Download : http://themeforest.net/item/highlight-powerful-premium-wordpress-theme/168424 Greet...

WordPress Theme Think Responsive 1.0 - Arbitrary File Upload

. . . \ \ | / \ \ \ | || / \ / / \ / |/ \ / | / \ / / /| | |/ \ \ \ // \ / / | \ /\ / | \ \ \ / \ //\ |\ | /\ // | /|\ / / / / / / / Exploit Title: WordPress Think Responsive Themes Arbitrary File Upload Vulnerability Author: Byakuya Date: 11/01/2013 Vendor Homepage:...

WordPress Theme Think Responsive 1.0 - Arbitrary File Upload

WordPress Theme Think Responsive 1.0 - Arbitrary File Upload . . . \ \ | / \ \ \ | || / \ / / \ / |/ \ / | / \ / / /| | |/ \ \ \ // \ / / | \ /\ / | \ \ \ / \ //\ |\ | /\ // | /|\ / / / / / / / Exploit Title: WordPress Think Responsive Themes Arbitrary File Upload Vulnerability...