39 matches found
CVE-2020-35749
Directory traversal vulnerability in class-simplejobboardresumedownloadhandler.php in the Simple Board Job plugin 2.9.3 and earlier for WordPress allows remote attackers to read arbitrary files via the sjbfile parameter to wp-admin/post.php...
CVE-2020-35582: Improper Neutralization of Input During Web Page Generation
A stored cross-site scripting XSS issue in Envira Gallery Lite before 1.8.3.3 allows remote attackers to inject arbitrary JavaScript/HTML code via a POST /wp-admin/post.php request with the posttitle parameter...
CVE-2020-35749: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in class-simplejobboardresumedownloadhandler.php in the Simple Board Job plugin 2.9.3 and earlier for WordPress allows remote attackers to read arbitrary files via the sjbfile parameter to wp-admin/post.php...
PT-2021-11843
Name of the Vulnerable Software and Affected Versions: Simple Board Job plugin versions 2.9.3 and earlier Description: A directory traversal issue allows remote attackers to read arbitrary files via the sjb file parameter to "wp-admin/post.php". Recommendations: For Simple Board Job plugin versio...
PT-2021-11809
Name of the Vulnerable Software and Affected Versions: Envira Gallery Lite versions prior to 1.8.3.3 Description: A stored cross-site scripting XSS issue allows remote attackers to inject arbitrary JavaScript/HTML code via a POST "/wp-admin/post.php" request with the post title parameter...
PT-2020-16483
Name of the Vulnerable Software and Affected Versions Testimonial Rotator Wordpress Plugin version 3.0.2 Description The issue concerns a Cross Site Scripting XSS problem. Specifically, it involves the /wp-admin/post.php endpoint. If a user intercepts a request and inserts a payload in the cite...
CVE-2020-26672: Improper Neutralization of Input During Web Page Generation
Testimonial Rotator Wordpress Plugin 3.0.2 is affected by Cross Site Scripting XSS in /wp-admin/post.php. If a user intercepts a request and inserts a payload in "cite" parameter, the payload will be stored in the database...
CVE-2020-14959: Improper Neutralization of Input During Web Page Generation
Multiple XSS vulnerabilities in the Easy Testimonials plugin before 3.6 for WordPress allow remote attackers to inject arbitrary web script or HTML via the wp-admin/post.php Client Name, Position, Web Address, Other, Location Reviewed, Product Reviewed, Item Reviewed, or Rating parameter...
PT-2020-6781
Name of the Vulnerable Software and Affected Versions Easy Testimonials plugin versions prior to 3.6 for WordPress Description The issue allows remote attackers to inject arbitrary web script or HTML via certain parameters in the wp-admin/post.php file, including Client Name, Position, Web Addres...
WordPress_4.9.8_RCE_POC
Summary A simple PoC for WordPress RCE author priviledge, re...
CVE-2018-19564
Stored XSS was discovered in the Easy Testimonials plugin 3.2 for WordPress. Three wp-admin/post.php parameters ikcfclient and ikcfposition and ikcfother have Cross-Site Scripting...
CVE-2018-19564: Improper Neutralization of Input During Web Page Generation
Stored XSS was discovered in the Easy Testimonials plugin 3.2 for WordPress. Three wp-admin/post.php parameters ikcfclient and ikcfposition and ikcfother have Cross-Site Scripting...
PT-2018-15008
Name of the Vulnerable Software and Affected Versions Easy Testimonials plugin version 3.2 for WordPress Description A Stored XSS issue was found, allowing for Cross-Site Scripting through the ikcf client, ikcf position, and ikcf other parameters in the wp-admin/post.php endpoint. Recommendations...
CVE-2018-12895
WordPress through 4.9.6 allows Author users to execute arbitrary code by leveraging directory traversal in the wp-admin/post.php thumb parameter, which is passed to the PHP unlink function and can delete the wp-config.php file. This is related to missing filename validation in the...
PT-2018-11457
Name of the Vulnerable Software and Affected Versions WordPress versions prior to 4.9.7 Description The issue allows Author users to execute arbitrary code by leveraging directory traversal in the "wp-admin/post.php" endpoint, specifically the thumb parameter, which is passed to the PHP unlink...
CVE-2018-12895: Improper Limitation of a Pathname to a Restricted Directory
WordPress through 4.9.6 allows Author users to execute arbitrary code by leveraging directory traversal in the wp-admin/post.php thumb parameter, which is passed to the PHP unlink function and can delete the wp-config.php file. This is related to missing filename validation in the...
CVE-2018-5312: Improper Neutralization of Input During Web Page Generation
The tabs-responsive plugin 1.8.0 for WordPress has XSS via the posttitle parameter to wp-admin/post.php...
PT-2018-16889
Name of the Vulnerable Software and Affected Versions tabs-responsive plugin version 1.8.0 Description The issue concerns a security problem where an attacker can exploit the post title parameter in the wp-admin/post.php endpoint to execute malicious scripts. Recommendations For tabs-responsive...