1359 matches found
WordPress WPGlobus plugin cross-site scripting vulnerability (CNVD-2018-01277)
WordPress is the WordPress Software Foundation's set of blogging platform using PHP language development, the platform supports in PHP and MySQL server set up a personal blog site.WPGlobus plugin is used in one of the plugin used to create a multi-language blog. A cross-site scripting vulnerabili...
WordPress responsive-coming-soon-page plugin cross-site request forgery vulnerability
WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language , the platform supports PHP and MySQL servers to set up a personal blog site . responsive-coming-soon-page plugin is used in one of the test system maintenance plugin . A cross-site request...
WordPress read-and-understood plugin cross-site request forgery vulnerability
WordPress is the WordPress Software Foundation of a set of PHP language development of the blogging platform, the platform supports PHP and MySQL server set up a personal blog site. read-and-understood plugin is the use of one of the use of the document reading plugin . A cross-site request forge...
PT-2018-6624
Name of the Vulnerable Software and Affected Versions: WordPress download-manager plugin versions prior to 2.9.52 Description: The issue concerns a security problem where an attacker can exploit the id parameter in a wpdm generate password action to wp-admin/admin-ajax.php API endpoint, leading t...
CVE-2017-18032: Improper Neutralization of Input During Web Page Generation
The download-manager plugin before 2.9.52 for WordPress has XSS via the id parameter in a wpdmgeneratepassword action to wp-admin/admin-ajax.php...
Sql injection
The WpJobBoard plugin 4.4.4 for WordPress allows SQL injection via the order or sort parameter to the wpjb-job or wpjb-alerts module, with a request to wp-admin/admin.php...
CVE-2018-5695
The WpJobBoard plugin 4.4.4 for WordPress allows SQL injection via the order or sort parameter to the wpjb-job or wpjb-alerts module, with a request to wp-admin/admin.php...
CVE-2018-5695
The CVE refers to WPJobBoard plugin for WordPress, version 4.4.4, where SQL injection is possible via the order or sort parameter passed to the wpjb-job or wpjb-alerts modules, triggered by a request to wp-admin/admin.php. This aligns with CNVD-2018-01254 and NVD details, which describe a paramet...
CVE-2018-5651
An issue was discovered in the dark-mode plugin 1.6 for WordPress. XSS exists via the wp-admin/profile.php darkmodestart parameter...
Design/Logic Flaw
An issue was discovered in the weblizar-pinterest-feeds plugin 1.1.1 for WordPress. XSS exists via the wp-admin/admin-ajax.php weblizarpffreesettingssaveget-users parameter...
Design/Logic Flaw
An issue was discovered in the responsive-coming-soon-page plugin 1.1.18 for WordPress. XSS exists via the wp-admin/admin.php countertitle parameter...
Cross site request forgery (csrf)
An issue was discovered in the read-and-understood plugin 2.1 for WordPress. CSRF exists via wp-admin/options-general.php...
CVE-2018-5652
An issue was discovered in the dark-mode plugin 1.6 for WordPress. XSS exists via the wp-admin/profile.php darkmodeend parameter...
PT-2018-17056
Name of the Vulnerable Software and Affected Versions responsive-coming-soon-page plugin version 1.1.18 Description A security issue was found in the responsive-coming-soon-page plugin for WordPress. This issue allows for cross-site scripting XSS attacks through the counter title icon parameter i...
CVE-2018-5652: Improper Neutralization of Input During Web Page Generation
An issue was discovered in the dark-mode plugin 1.6 for WordPress. XSS exists via the wp-admin/profile.php darkmodeend parameter...
CVE-2018-5655: Improper Neutralization of Input During Web Page Generation
An issue was discovered in the weblizar-pinterest-feeds plugin 1.1.1 for WordPress. XSS exists via the wp-admin/admin-ajax.php security parameter...
CVE-2018-5659: Improper Neutralization of Input During Web Page Generation
An issue was discovered in the responsive-coming-soon-page plugin 1.1.18 for WordPress. XSS exists via the wp-admin/admin.php coming-soontitle parameter...
CVE-2018-5660: Improper Neutralization of Input During Web Page Generation
An issue was discovered in the responsive-coming-soon-page plugin 1.1.18 for WordPress. XSS exists via the wp-admin/admin.php coming-soonsubtitle parameter...
CVE-2018-5667: Improper Neutralization of Input During Web Page Generation
An issue was discovered in the read-and-understood plugin 2.1 for WordPress. XSS exists via the wp-admin/options-general.php rnuusernamevalidationpattern parameter...