WordPress Theme Acento - 'view-pdf.php?File' Arbitrary File Download

+++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Title : WordPress acento theme Arbitrary File Download Vulnerability Author : alieye vondor : http://www.wpbyexample.com/detail/acentocultural.com Contact : [email protected] Risk : High Class: Remote Date: 01/09/2014...

LineNity 1.20 - download.php imgurl Parameter Remote Path Traversal File Access

The linenity WordPress theme was affected by a download.php imgurl Parameter Remote Path Traversal File Access security vulnerability...

Elegant Grunge 1.0.3 - s Parameter XSS

The Elegant Grunge WordPress theme was affected by a s Parameter XSS security vulnerability...

Love It - XSS / Content Spoofing / Path Disclosure

The iloveit WordPress theme was affected by a XSS / Content Spoofing / Path Disclosure security vulnerability...

Kiddo - remote shell upload

The kiddo WordPress theme was affected by a remote shell upload security vulnerability...

CStar Design 2.0 - flashmoXML.php id Parameter SQL Injection

The cstardesign WordPress theme was affected by a flashmoXML.php id Parameter SQL Injection security vulnerability...

DejaVu 2.4 - dl-skin.php _mysite_delete_skin_zip Parameter Absolute Path Traversal Remote Directory Deletion

The dejavu WordPress theme was affected by a dl-skin.php mysitedeleteskinzip Parameter Absolute Path Traversal Remote Directory Deletion security vulnerability...

DejaVu 2.4 - dl-skin.php _mysite_download_skin Parameter Absolute Path Traversal Remote File Download

The dejavu WordPress theme was affected by a dl-skin.php mysitedownloadskin Parameter Absolute Path Traversal Remote File Download security vulnerability...

Magnitudo - Arbitrary File Upload

The magnitudo WordPress theme was affected by an Arbitrary File Upload security vulnerability...

Blooog 1.1 - jplayer.swf Cross Site Scripting

The blooog WordPress theme was affected by a jplayer.swf Cross Site Scripting security vulnerability...

Folo - Cross Site Scripting

The folo WordPress theme was affected by a Cross Site Scripting security vulnerability...

Toolbox 1.4 - flyer.php mls Parameter SQL Injection

The toolbox WordPress theme was affected by a flyer.php mls Parameter SQL Injection security vulnerability...

ThisWay - remote shell upload

The thisway WordPress theme was affected by a remote shell upload security vulnerability...

WPLocalPlaces - File Upload Remote Code Execution

The wplocalplaces WordPress theme was affected by a File Upload Remote Code Execution security vulnerability...

Imperial Fairytale - Multiple Script Direct Request Path Disclosure

The imperial-fairytale WordPress theme was affected by a Multiple Script Direct Request Path Disclosure security vulnerability...

Feather12 - Multiple Script Direct Request Path Disclosure

The feather12 WordPress theme was affected by a Multiple Script Direct Request Path Disclosure security vulnerability...

Caulk - path disclosure

The caulk WordPress theme was affected by a path disclosure security vulnerability...

Multiple vulnerabilities in Chocolate WP theme for WordPress

The dt-chocolate WordPress theme was affected by security vulnerability...

Pinboard 1.0.6 - includes/theme-options.php tab Parameter XSS

The Pinboard WordPress theme was affected by an includes/theme-options.php tab Parameter XSS security vulnerability...

allure-real-estate-theme-for-real-estate <= 0.1.1 - XSS in ZeroClipboard.swf

The allure-real-estate-theme-for-real-estate WordPress theme was affected by a XSS in ZeroClipboard.swf security vulnerability...