Lucene search
+L
PatchstackMost viewed

49993 matches found

Patchstack
Patchstack
•added 2021/09/20 12:00 a.m.•30 views

WordPress SteamCast plugin <= 2.1 - Stored Cross-Site Scripting (XSS) vulnerability

Stored Cross-Site Scripting XSS vulnerability discovered by Michał Lipiński in WordPress SteamCast plugin versions = 2.1. Solution Update the WordPress SteamCast plugin to the latest available version at least 2.1.1...

5.4CVSS1.9AI score0.00581EPSS
SaveExploits1References3Affected Software1
Patchstack
Patchstack
•added 2021/09/20 12:00 a.m.•30 views

WordPress Gutenberg PDF Viewer Block plugin <= 1.0 - Stored Cross-Site Scripting (XSS) vulnerability

Stored Cross-Site Scripting XSS vulnerability discovered by apple502j in WordPress Gutenberg PDF Viewer Block plugin versions = 1.0. Solution Update the WordPress Gutenberg PDF Viewer Block plugin to the latest available version at least 1.0.1...

5.4CVSS2.5AI score0.0065EPSS
SaveExploits2References3Affected Software1
Patchstack
Patchstack
•added 2021/09/13 12:00 a.m.•30 views

WordPress Coming soon and Maintenance mode plugin <= 3.5.2 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by Asif Nawaz Minhas in WordPress Coming soon and Maintenance mode plugin versions = 3.5.2. Solution Update the WordPress Coming soon and Maintenance mode plugin to the latest available version at least 3.5.3...

5.4CVSS2.4AI score0.0062EPSS
SaveExploits2References3Affected Software1
Patchstack
Patchstack
•added 2021/09/09 12:00 a.m.•30 views

WordPress On Page SEO + Whatsapp Chat Button plugin <= 1.0.1 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability discovered by p7e4 in WordPress On Page SEO + Whatsapp Chat Button plugin versions = 1.0.1. Solution Update the WordPress On Page SEO + Whatsapp Chat Button plugin to the latest available version at least 1.0.2...

6.1CVSS1.7AI score0.00895EPSS
SaveExploits1References3Affected Software1
Patchstack
Patchstack
•added 2021/08/25 12:00 a.m.•30 views

WordPress Real Media Library Lite plugin <= 4.14.1 - Stored Cross-Site Scripting (XSS) vulnerability

Stored Cross-Site Scripting XSS vulnerability discovered by Thinkland Security Team in WordPress Real Media Library Lite plugin versions = 4.14.1. Solution Update the WordPress Real Media Library Lite plugin to the latest available version at least 4.14.2...

6.4CVSS2.8AI score0.0056EPSS
SaveExploits0References3Affected Software1
Patchstack
Patchstack
•added 2021/08/22 12:00 a.m.•30 views

WordPress MicroCopy plugin <= 1.1.0 - Authenticated SQL Injection (SQLi) vulnerability

Authenticated SQL Injection SQLi vulnerability discovered by Syed Sheeraz Ali in WordPress MicroCopy plugin versions = 1.1.0. Solution This plugin has been closed as of May 13, 2021 and is not available for download. Reason: Security Issue...

7.2CVSS3.2AI score0.01516EPSS
SaveExploits2References3Affected Software1
Patchstack
Patchstack
•added 2021/08/09 12:00 a.m.•30 views

WordPress Disable Image Right Click plugin <= 1.0 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability discovered by iohex in WordPress Disable Image Right Click plugin versions = 1.0. Solution Deactivate and delete. This plugin has been closed as of January 6, 2022 and is not available for download. This closure is temporary, pending a full review...

6.1CVSS1.7AI score0.01714EPSS
SaveExploits2References3Affected Software1
Patchstack
Patchstack
•added 2021/07/30 12:00 a.m.•30 views

WordPress Absolutely Glamorous Custom Admin plugin <= 6.8 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by Jörgson Patchstack Red Team in WordPress Absolutely Glamorous Custom Admin plugin versions = 6.8. Solution Update the WordPress Absolutely Glamorous Custom Admin plugin to the latest available version at least 6.9, addition...

8.2CVSS1.6AI score0.00741EPSS
SaveExploits0References3Affected Software1
Patchstack
Patchstack
•added 2021/07/26 12:00 a.m.•30 views

WordPress GiveWP plugin <= 2.11.3 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by Asif Nawaz Minhas in WordPress GiveWP plugin versions = 2.11.3. Solution Update the WordPress GiveWP plugin to the latest available version at least 2.12.0...

4.8CVSS1.8AI score0.00617EPSS
SaveExploits2References3Affected Software1
Patchstack
Patchstack
•added 2021/06/29 12:00 a.m.•30 views

WordPress Secure Copy Content Protection and Content Locking plugin <= 2.6.6 - Authenticated Blind SQL Injection (SQLi) vulnerability

Authenticated Blind SQL Injection SQLi vulnerability discovered by To Quang Duong in WordPress Secure Copy Content Protection and Content Locking plugin versions = 2.6.6. Solution Update the WordPress Secure Copy Content Protection and Content Locking plugin to the latest available version at lea...

7.2CVSS3.2AI score0.01344EPSS
SaveExploits2References3Affected Software1
Patchstack
Patchstack
•added 2021/06/28 12:00 a.m.•30 views

WordPress Bookshelf plugin <= 2.0.4 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by ABISHEIK M in WordPress Bookshelf plugin versions = 2.0.4. Solution Deactivate and delete. This plugin has been closed as of May 25, 2021 and is not available for download. Reason: Security Issue...

5.4CVSS2.8AI score0.0062EPSS
SaveExploits2References3Affected Software1
Patchstack
Patchstack
•added 2021/06/28 12:00 a.m.•30 views

WordPress ProfilePress plugin <= 3.1.7 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by Vaibhav Koli in WordPress ProfilePress plugin versions = 3.1.7. Solution Update the WordPress ProfilePress plugin to the latest available version at least 3.1.8...

4.8CVSS1.6AI score0.00652EPSS
SaveExploits2References3Affected Software1
Patchstack
Patchstack
•added 2021/06/22 12:00 a.m.•30 views

WordPress CiviCRM plugin <= 5.24.2 - Authenticated Phar Deserialization vulnerability

Authenticated Phar Deserialization vulnerability discovered by Dennis Brinkrolf SonarSource in WordPress CiviCRM plugin versions = 5.24.2. Solution Update the WordPress CiviCRM plugin to the latest available version at least 5.24.3...

8.8CVSS3.4AI score0.01478EPSS
SaveExploits1References3Affected Software1
Patchstack
Patchstack
•added 2021/06/16 12:00 a.m.•30 views

WordPress WP Reset plugin <= 1.86 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by m0ze in WordPress WP Reset plugin versions = 1.86. Solution Update the WordPress WP Reset plugin to the latest available version at least 1.90...

5.4CVSS1.9AI score0.00629EPSS
SaveExploits2References3Affected Software1
Patchstack
Patchstack
•added 2021/06/11 12:00 a.m.•30 views

WordPress Welcart e-Commerce plugin <= 2.2.3 - Cross-Site Scripting (XSS) vulnerability

Cross-Site Scripting XSS vulnerability discovered by Yu Iwama in WordPress Welcart e-Commerce plugin versions = 2.2.3. Solution Update the WordPress Welcart e-Commerce plugin to the latest available version at least 2.2.4...

6.1CVSS2.3AI score0.01044EPSS
SaveExploits1References4Affected Software1
Patchstack
Patchstack
•added 2021/06/07 12:00 a.m.•30 views

WordPress Jannah premium theme <= 5.4.3 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability discovered by Truoc Phan in WordPress Jannah premium theme versions = 5.4.3. Solution Update the WordPress Jannah premium theme to the latest available version at least 5.4.4...

6.1CVSS1.7AI score0.01975EPSS
SaveExploits2References3Affected Software1
Patchstack
Patchstack
•added 2021/05/31 12:00 a.m.•30 views

WordPress Quiz And Survey Master plugin <= 7.1.17 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability discovered by renniepak in WordPress Quiz And Survey Master plugin versions = 7.1.17. Solution Update the WordPress Quiz And Survey Master plugin to the latest available version at least 7.1.18...

6.1CVSS2.2AI score0.00827EPSS
SaveExploits2References2Affected Software1
Patchstack
Patchstack
•added 2021/05/19 12:00 a.m.•30 views

WordPress JobSearch premium plugin <= 1.7.3 - Authenticated Persistent Cross-Site Scripting (XSS) vulnerability

Authenticated Persistent Cross-Site Scripting XSS vulnerability discovered by m0ze in WordPress JobSearch premium plugin versions = 1.7.3. Solution Update the WordPress JobSearch premium plugin to the latest available version at least 1.7.4...

5.4CVSS2AI score0.00633EPSS
SaveExploits2References3Affected Software1
Patchstack
Patchstack
•added 2021/04/27 12:00 a.m.•30 views

WordPress Pods plugin <= 2.7.26 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by WhiteSource in WordPress Pods plugin versions = 2.7.26. Solution Update the WordPress Pods plugin to the latest available version at least 2.7.27...

5.4CVSS1.8AI score0.0076EPSS
SaveExploits1References3Affected Software1
Patchstack
Patchstack
•added 2021/04/08 12:00 a.m.•30 views

WordPress Stop Spammers plugin <= 2021.8 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability discovered by Hoseinvita in WordPress Stop Spammers plugin versions = 2021.8. Solution Update the WordPress Stop Spammers plugin to the latest available version at least 2021.9...

6.1CVSS1.9AI score0.05721EPSS
SaveExploits5References3Affected Software1
Patchstack
Patchstack
•added 2021/03/23 12:00 a.m.•30 views

WordPress GiveWP plugin <= 2.9.7 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability discovered by Austin Bentley in WordPress GiveWP plugin versions = 2.9.7. Solution Update the WordPress GiveWP plugin to the latest available version at least 2.10.0...

6.1CVSS2.1AI score0.0137EPSS
SaveExploits4References3Affected Software1
Patchstack
Patchstack
•added 2020/12/15 12:00 a.m.•30 views

WordPress Redux Framework plugin <= 4.1.20 - CSRF Nonce Validation Bypass vulnerability

CSRF Nonce Validation Bypass vulnerability discovered by Lenon Leite in WordPress Redux Framework plugin versions = 4.1.20. Solution Update the WordPress Redux Framework plugin to the latest available version at least 4.1.21...

2.7AI score
SaveExploits0References2Affected Software1
Patchstack
Patchstack
•added 2020/10/29 12:00 a.m.•30 views

WordPress <= 5.5.1 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability found by Erwan LR in WordPress versions = 5.5.1. Solution Update the WordPress to the latest available version at least 5.5.2...

4.3CVSS3.6AI score0.01081EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
•added 2020/09/21 12:00 a.m.•30 views

WordPress 15zine premium theme <= 3.2.2 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability discovered by Fariq Fadillah Gusti Insani in WordPress 15zine premium theme versions = 3.2.2. Solution Update the WordPress 15zine premium theme to the latest available version at least 3.3.0...

6.1CVSS2AI score0.0259EPSS
SaveExploits2References3Affected Software1
Patchstack
Patchstack
•added 2020/07/09 12:00 a.m.•30 views

WordPress KingComposer plugin <= 2.9.4 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability discovered by WordFence in WordPress KingComposer plugin versions = 2.9.4. Solution Update the WordPress KingComposer plugin to the latest available version at least 2.9.5...

6.1CVSS1.9AI score0.4696EPSS
SaveExploits1References3Affected Software1
Patchstack
Patchstack
•added 2020/03/12 12:00 a.m.•30 views

WordPress Appointment Booking Calendar <= 1.3.34 - CSV Injection vulnerability

CSV Injection vulnerability discovered by Daniel Monzon in WordPress Appointment Booking Calendar plugin versions = 1.3.34. Solution Update the WordPress Appointment Booking Calendar to the latest available version at least 1.3.35...

7.8CVSS3.1AI score0.08612EPSS
SaveExploits5References3Affected Software1
Patchstack
Patchstack
•added 2020/01/28 12:00 a.m.•30 views

WordPress SAML SP Single Sign On plugin <= 4.8.83 - Cross-Site Scripting (XSS) vulnerability

Cross-Site Scripting XSS vulnerability discovered by Zeroauth in WordPress SAML SP Single Sign On plugin versions = 4.8.83. Solution Update the WordPress SAML SP Single Sign On plugin to the latest available version at least 4.8.84...

6.1CVSS1.6AI score0.01376EPSS
SaveExploits1References3Affected Software1
Patchstack
Patchstack
•added 2020/01/21 12:00 a.m.•30 views

WordPress Chatbot with IBM Watson plugin <= 0.8.20 - DOM Cross-Site Scripting (XSS) vulnerability

DOM Cross-Site Scripting XSS vulnerability found by Hooper Labs in WordPress Chatbot with IBM Watson plugin versions = 0.8.20. Solution Update the WordPress Chatbot with IBM Watson plugin to the latest available version at least 0.8.21...

6.1CVSS1.6AI score0.01371EPSS
SaveExploits1References1Affected Software1
Patchstack
Patchstack
•added 2020/01/10 12:00 a.m.•30 views

WordPress EasyBook premium theme <= 1.2.1 - Unauthenticated Reflected Cross-Site Scripting (XSS) vulnerability

Unauthenticated Reflected Cross-Site Scripting XSS vulnerability discovered by m0ze in WordPress EasyBook premium theme versions = 1.2.1. Solution Update the WordPress EasyBook premium theme to the latest available version at least 1.2.2...

6.1CVSS2.3AI score0.03243EPSS
SaveExploits4References2Affected Software1
Patchstack
Patchstack
•added 2019/11/26 12:00 a.m.•30 views

WordPress WP Spell Check plugin <= 7.1.9 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability found by Takuya Yamaguchi in WordPress WP Spell Check plugin versions = 7.1.9. Solution Update the WordPress WP Spell Check plugin to the latest available version at least 7.1.10...

8.8CVSS3AI score0.00678EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
•added 2019/10/31 12:00 a.m.•30 views

WordPress YITH Color and Label Variations for WooCommerce plugin <=1.8.12 - Authenticated Settings Change (YITH Plugin Framework <=3.3.8) vulnerability

Authenticated Settings Change YITH Plugin Framework =3.3.8 vulnerability found by Jerome Bruandet in WordPress YITH Color and Label Variations for WooCommerce plugin versions =1.8.12. Solution Update the WordPress YITH Color and Label Variations for WooCommerce plugin to the latest available...

4.3CVSS3.8AI score0.00948EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
•added 2019/07/19 12:00 a.m.•30 views

WordPress Everest Forms plugin <= 1.4.9 - SQL Injection (SQLi) vulnerability

SQL Injection SQLi vulnerability found by Tin Duong in WordPress Everest Forms plugin versions = 1.4.9. Solution Update the WordPress Everest Forms plugin to the latest available version at least 1.5.0...

9.8CVSS3AI score0.02581EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
•added 2019/05/27 12:00 a.m.•30 views

WordPress Virim plugin <= 0.4 - Unauthenticated Object Injection vulnerability

Unauthenticated Object Injection vulnerability found by Magnus K. Stubman in WordPress Virim plugin versions = 0.4. Solution 27 May 2019 - This plugin was closed and is no longer available for download...

9.8CVSS4.3AI score0.02417EPSS
SaveExploits1References1Affected Software1
Patchstack
Patchstack
•added 2019/04/11 12:00 a.m.•30 views

WordPress Ninja Forms File Uploads Extension premium plugin <= 3.0.22 - Unauthenticated Arbitrary File Upload vulnerability

Unauthenticated Arbitrary File Upload vulnerability discovered by Jasper Weijts Onvio in WordPress Ninja Forms File Uploads Extension premium plugin versions = 3.0.22. Solution Update the WordPress Ninja Forms File Uploads Extension premium plugin to the latest available version at least 3.0.23...

8.1CVSS3.3AI score0.07994EPSS
SaveExploits1References3Affected Software1
Patchstack
Patchstack
•added 2019/03/12 12:00 a.m.•30 views

WordPress Blog2Social plugin <= 5.0.2 - Authenticated Cross-Site Scripting (XSS) vulnerability

Authenticated Cross-Site Scripting XSS vulnerability found by Tim Coen in WordPress Blog2Social plugin versions = 5.0.2. Solution Update the WordPress Blog2Social plugin to the latest available version at least 5.0.3...

6.1CVSS2AI score0.01408EPSS
SaveExploits2References2Affected Software1
Patchstack
Patchstack
•added 2019/01/25 12:00 a.m.•30 views

WordPress Wise Chat plugin <= 2.6.3 - Reverse Tabnabbing vulnerability

Reverse Tabnabbing vulnerability found by MTK in WordPress Wise Chat plugin versions = 2.6.3. Solution Update the WordPress Wise Chat plugin to the latest available version at least 2.7...

6.1CVSS2.8AI score0.04924EPSS
SaveExploits5References1Affected Software1
Patchstack
Patchstack
•added 2018/04/29 12:00 a.m.•30 views

WordPress Cookie Consent plugin <=2.3.9 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated Stored Cross-Site Scripting XSS vulnerability found in WordPress Cookie Consent plugin versions =2.3.9. Solution Update the WordPress Cookie Consent plugin to the latest available version at least 2.3.10...

5.4CVSS2.3AI score0.03814EPSS
SaveExploits5References1Affected Software1
Patchstack
Patchstack
•added 2018/02/07 12:00 a.m.•30 views

WordPress flickrRSS plugin <=5.3.1 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability found by AntsKnows in WordPress flickrRSS plugin versions = 5.3.1. Solution 2/7/2018 - Last time updated four years ago. No patched version is available at the moment...

8.8CVSS4.3AI score0.00589EPSS
SaveExploits1References1Affected Software1
Patchstack
Patchstack
•added 2018/01/09 12:00 a.m.•30 views

WordPress GD Rating System plugin 2.3 - Directory Traversal vulnerability (2)

A second Directory Traversal vulnerability found by d4wner in WordPress GD Rating System plugin version 2.3. Directory Traversal in the wp-admin/admin.php panel parameter for the gd-rating-system-information page. Solution 1/9/2018 - we were unable to find a patched version of this plugin...

7.5CVSS2.9AI score0.03699EPSS
SaveExploits1References1Affected Software1
Patchstack
Patchstack
•added 2018/01/08 12:00 a.m.•30 views

WordPress Affiliate Ads for Clickbank Products plugin <= 1.6 - Stored Cross-Site Scripting (XSS) vulnerability

Stored Cross-Site Scripting XSS vulnerability found by Neorichi in WordPress Affiliate Ads for Clickbank Products plugin versions = 1.6. It is vulnerable to a Cross-Site Scripting XSS vulnerability via the textadsajax.php bordercolor parameter. Solution Update the WordPress Affiliate Ads for...

6.1CVSS3.1AI score0.01561EPSS
SaveExploits1References1Affected Software1
Patchstack
Patchstack
•added 2017/09/06 12:00 a.m.•30 views

WordPress Participants Database plugin <=1.7.5.9 - Cross-Site Scripting (XSS) vulnerability

Cross-Site Scripting XSS vulnerability found by Benjamin Lim in WordPress Participants Database plugin version 1.7.5.9 and earlier versions. Data of the text input field of the plugin passed without escaping HTML special characters thus allows an attacker to insert javascript. Solution Update the...

6.1CVSS1AI score0.02302EPSS
SaveExploits4References1Affected Software1
Patchstack
Patchstack
•added 2017/01/03 12:00 a.m.•30 views

WordPress WooCommerce Plugin <= 2.6.8 - Cross Site Scripting

This plugin is prone to a cross site scripting vulnerability. It allows remote authenticated administrators to inject arbitrary code by manipulating tax-rate table values in CSV format. Solution Update the plugin...

4.8CVSS4.4AI score0.00904EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
•added 2016/07/20 12:00 a.m.•30 views

WordPress Indexisto Plugin <= 1.0.5 - Reflected XSS

This plugin is prone to a cross site scripting vulnerability. Solution Upgrade the plugin...

6.1CVSS1.9AI score0.03432EPSS
SaveExploits2References1Affected Software1
Patchstack
Patchstack
•added 2015/08/20 12:00 a.m.•30 views

WordPress YouTube Embed Plugin <= 3.3.2 - XSS

The vulnerability exists in includes/options-profiles.php. It allows remote administrator to inject arbitrary web script or HTML via the Profile name field. Solution Update the plugin...

3.5CVSS1.8AI score0.01277EPSS
SaveExploits2References1Affected Software1
Patchstack
Patchstack
•added 2015/08/04 12:00 a.m.•30 views

WordPress <= 4.2.3 - CSRF

This vulnerability is in wp-admin/post.php. It allows an attacker to hijack the authentication of administrators for requests which lock a post. And then an attacker consequently cause a denial of service via a get-post-lock action. Solution Update the plugin...

6.8CVSS5.4AI score0.03357EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
•added 2015/07/10 12:00 a.m.•30 views

WordPress IBS Mappro Plugin <= 0.9 - Absolute Path Traversal

This vulnerability is in lib/download.php. It allows an attacker to read arbitrary files via a full pathname in the "file" parameter. Solution Update the plugin...

7.8CVSS5.7AI score0.03263EPSS
SaveExploits2References1Affected Software1
Patchstack
Patchstack
•added 2015/07/08 12:00 a.m.•30 views

WordPress StageShow Plugin <= 5.0.8 - Open redirect

This vulnerability is in stageshowredirect.php in the "Redirect" function. It allows an attacker to redirect users to arbitrary web sites and conduct phishing attacks in the "url" parameter. Solution Update the plugin...

6.4CVSS4.8AI score0.06283EPSS
SaveExploits2References1Affected Software1
Patchstack
Patchstack
•added 2015/06/30 12:00 a.m.•30 views

WordPress Slider Revolution Plugin <= 4.2.2 - XSS

This vulnerability allows an attacker to inject arbitrary web script or HTML via the "clientaction" parameter. Solution Update the plugin...

4.3CVSS2.1AI score0.01693EPSS
SaveExploits1References1Affected Software1
Patchstack
Patchstack
•added 2015/04/01 12:00 a.m.•30 views

WordPress Simple Ads Manager Plugin <= 2.5.95 - Unrestricted File Upload

This vulnerability exists in sam-ajax-admin.php and allows an attacker to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in the directory specified by the "path" parameter. Solution Update the plugin...

7.5CVSS4.8AI score0.14352EPSS
SaveExploits6References1Affected Software1
Patchstack
Patchstack
•added 2015/03/05 12:00 a.m.•30 views

WordPress <= 4.2.3 - SQL Injection

Because of this vulnerability, an attacker can execute arbitrary SQL commands via a comment that is mishandled after retrieval from the trash. Solution Update WordPress...

7.5CVSS4.8AI score0.09665EPSS
SaveExploits0References1Affected Software1
Total number of security vulnerabilities5000