WordPress Plugin WPTF Image Gallery 1.03 - Arbitrary File Download

WordPress Plugin WPTF Image Gallery 1.03 - Arbitrary File Download Title: Remote file download vulnerability in wptf-image-gallery v1.03 Author: Larry W. Cashdollar, @larry0 Date: 2015-07-17 Download Site: https://wordpress.org/plugins/wptf-image-gallery Vendor:...

WordPress Plugin Simple Image Manipulator 1.0 - Arbitrary File Download

Title: Remote file download in simple-image-manipulator v1.0 wordpress plugin Author: Larry W. Cashdollar, @larry0 Date: 2015-07-16 Download Site: https://wordpress.org/plugins/simple-image-manipulator Vendor: https://profiles.wordpress.org/kevartpatel/ Vendor Notified: 2015-07-16 Vendor Contact:...

WordPress qTranslate 2.5.39 Cross Site Scripting Vulnerability

WordPress qTranslate plugin version 2.5.39 suffers from a cross site scripting vulnerability. Product: qTranslate WordPress plugin Vendor: Qian Qin Vulnerable Versions: 2.5.39 and probably prior Tested Version: 2.5.39 Advisory Publication: July 1, 2015 without technical details Vendor Notificatio...

WordPress ThemePunch Slider Revolution plugin and Showbiz Pro plugin have multiple vulnerabilities

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports in PHP and MySQL server set up a personal blog site.ThemePunch Slider Revolution revslider is one of the slideshow plugin.Showbiz Pro is one of the scrolling display...

Wordpress Simple Ads Manager Plugin - Multiple SQL Injection Vulnerability

Exploit for php platform in category web applications Vulnerability title: Wordpress plugin Simple Ads Manager - SQL Injection Product: Wordpress plugin Simple Ads Manager Vendor: https://profiles.wordpress.org/minimus/ Affected version: Simple Ads Manager 2.5.94 and 2.5.96 Download link:...

FancyBox for WordPress 3.0.0-3.0.2 - Stored Cross-Site Scripting (XSS)

The FancyBox for WordPress WordPress plugin was affected by a Stored Cross-Site Scripting XSS security vulnerability...

CVE-2015-0920

Cross-site request forgery CSRF vulnerability in the Banner Effect Header plugin 1.2.6 for WordPress allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks via the bannereffectemail parameter in the BannerEffectOptions pag...

EUVD-2014-8776

The iMember360 plugin 3.8.012 through 3.9.001 for WordPress allows remote authenticated administrators to execute arbitrary commands via shell metacharacters in the i4wtrace parameter. NOTE: this can be leveraged with CVE-2014-8948 to allow remote attackers to execute code. NOTE: it is not clear...

Lazyest Gallery 0.10.4.3 - Multiple File/Directory Insecure Permissions Local Content Manipulation

The Lazyest Gallery WordPress plugin was affected by a Multiple File/Directory Insecure Permissions Local Content Manipulation security vulnerability...

ShrimpTest 1.0b2 - admin/experiment-new.php Multiple Unspecified XSS

The shrimptest WordPress plugin was affected by an admin/experiment-new.php Multiple Unspecified XSS security vulnerability...

WebEngage 2.0.0 - renderer.php Multiple Parameter Reflected XSS

The WebEngage Feedback, Survey and Notification WordPress plugin was affected by a renderer.php Multiple Parameter Reflected XSS security vulnerability...

DZS Video Gallery 3.1.3 - Remote File Disclosure

The dzs-videogallery WordPress plugin was affected by a Remote File Disclosure security vulnerability...

Dexs PM System 1.0.1 - Private Message subject Parameter Stored XSS

The dexs-pm-system WordPress plugin was affected by a Private Message subject Parameter Stored XSS security vulnerability...

Sitemile Auctions 2.0.1.3 - wp-content/plugins/auctionPlugin/upload.php File Upload PHP Code Execution

The auctionPlugin WordPress plugin was affected by a wp-content/plugins/auctionPlugin/upload.php File Upload PHP Code Execution security vulnerability...

Image News Slider 3.1 - Multiple Unspecified Remote Issues

The wp-image-news-slider WordPress plugin was affected by a Multiple Unspecified Remote Issues security vulnerability...

Download Manager 0.2 - Arbitrary File Upload Exploit

The downloads-manager WordPress plugin was affected by an Arbitrary File Upload Exploit security vulnerability...

Simple:Press Wordpress Plugin 4.3.0 - SQL Injection Vulnerability

No description provided by source...

Wordpress Plugin CopySafe Web Protection Shell Upload (0day) Vulnerability

Exploit for php platform in category web applications Title : Wordpress Plugin CopySafe Web Protection Shell Upload Vulnerability Author : Aloulou Date : 01/06/2014 Facebook : http://www.facebook.com/Aloulou.TN Email: email protected Vendor : wordpress.org Google Dork :...

WordPress Plugin Global Flash Gallery - swfupload.php Arbitrary File Upload

WordPress Plugin Global Flash Gallery - swfupload.php Arbitrary File Upload source: https://www.securityfocus.com/bid/65060/info The Global Flash Gallery plugin for WordPress is prone to a vulnerability that lets attackers upload arbitrary files. The issue occurs because it fails to properly...

WordPress Booking System Plugin XSS Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wordpress:wordpress"; ifdescription scripttagname:"impact",...