6503 matches found
FancyBox for WordPress 3.0.0-3.0.2 - Stored Cross-Site Scripting (XSS)
The FancyBox for WordPress WordPress plugin was affected by a Stored Cross-Site Scripting XSS security vulnerability...
CVE-2015-0920
Cross-site request forgery CSRF vulnerability in the Banner Effect Header plugin 1.2.6 for WordPress allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks via the bannereffectemail parameter in the BannerEffectOptions pag...
EUVD-2014-8776
The iMember360 plugin 3.8.012 through 3.9.001 for WordPress allows remote authenticated administrators to execute arbitrary commands via shell metacharacters in the i4wtrace parameter. NOTE: this can be leveraged with CVE-2014-8948 to allow remote attackers to execute code. NOTE: it is not clear...
Lazyest Gallery 0.10.4.3 - Multiple File/Directory Insecure Permissions Local Content Manipulation
The Lazyest Gallery WordPress plugin was affected by a Multiple File/Directory Insecure Permissions Local Content Manipulation security vulnerability...
ShrimpTest 1.0b2 - admin/experiment-new.php Multiple Unspecified XSS
The shrimptest WordPress plugin was affected by an admin/experiment-new.php Multiple Unspecified XSS security vulnerability...
WebEngage 2.0.0 - renderer.php Multiple Parameter Reflected XSS
The WebEngage Feedback, Survey and Notification WordPress plugin was affected by a renderer.php Multiple Parameter Reflected XSS security vulnerability...
DZS Video Gallery 3.1.3 - Remote File Disclosure
The dzs-videogallery WordPress plugin was affected by a Remote File Disclosure security vulnerability...
Dexs PM System 1.0.1 - Private Message subject Parameter Stored XSS
The dexs-pm-system WordPress plugin was affected by a Private Message subject Parameter Stored XSS security vulnerability...
Sitemile Auctions 2.0.1.3 - wp-content/plugins/auctionPlugin/upload.php File Upload PHP Code Execution
The auctionPlugin WordPress plugin was affected by a wp-content/plugins/auctionPlugin/upload.php File Upload PHP Code Execution security vulnerability...
Image News Slider 3.1 - Multiple Unspecified Remote Issues
The wp-image-news-slider WordPress plugin was affected by a Multiple Unspecified Remote Issues security vulnerability...
Download Manager 0.2 - Arbitrary File Upload Exploit
The downloads-manager WordPress plugin was affected by an Arbitrary File Upload Exploit security vulnerability...
Simple:Press Wordpress Plugin 4.3.0 - SQL Injection Vulnerability
No description provided by source...
Wordpress Plugin CopySafe Web Protection Shell Upload (0day) Vulnerability
Exploit for php platform in category web applications Title : Wordpress Plugin CopySafe Web Protection Shell Upload Vulnerability Author : Aloulou Date : 01/06/2014 Facebook : http://www.facebook.com/Aloulou.TN Email: email protected Vendor : wordpress.org Google Dork :...
WordPress Plugin Global Flash Gallery - swfupload.php Arbitrary File Upload
WordPress Plugin Global Flash Gallery - swfupload.php Arbitrary File Upload source: https://www.securityfocus.com/bid/65060/info The Global Flash Gallery plugin for WordPress is prone to a vulnerability that lets attackers upload arbitrary files. The issue occurs because it fails to properly...
WordPress Booking System Plugin XSS Vulnerability
The WordPress plugin SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wordpress:wordpress"; ifdescription scripttagname:"impact",...
WordPress WP-Property PHP file upload vulnerability-vulnerability warning-the black bar safety net
WordPress WP-Property PHP file upload vulnerability This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...
WordPress Easy Contact Forms Exporter 1.1.0 File Disclosure
File disclosure vulnerability in WordPress Easy Contact Forms Exporter plugin Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...
CVE-2012-4332
The ShareYourCart plugin 1.7.1 for WordPress allows remote attackers to obtain the installation path via unspecified vectors related to the SDK...
WordPress UnGallery plugin <= 1.5.8 Local File Disclosure Vulnerability
Exploit for php platform in category web applications Exploit Title: WordPress UnGallery plugin = 1.5.8 Local File Disclosure Vulnerability Date: 2011-08-20 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/ungallery.1.5.8.zip...
