14623 matches found
Facebook for WooCommerce <= 1.9.12 - CSRF allowing Option Update
The original issue has been fixed via 1.9.14. However, as additional CSRF checks have been implemented in 1.9.15, the fixed in has been set to 1.9.15...
SG Optimizer <= 5.0.12 - Unauthenticated File Upload
According to the original researchers: "A successful attack on the SiteGround Optimizer would allow bad actors to store backdoors on vulnerable sites."...
The Events Calendar < 4.8.2 - XSS
The The Events Calendar WordPress plugin was affected by a XSS security vulnerability...
Blog2Social <= 5.0.2 - Authenticated Cross-Site Scripting (XSS)
The Blog2Social: Social Media Auto Post & Scheduler WordPress plugin was affected by an Authenticated Cross-Site Scripting XSS security vulnerability. PoC http://example.com/wp-admin/admin.php?page=blog2social-ship=70&b2s;action=1&b2s;updatepublishdate='"...
Elementor Page Builder <= 1.7.12 - Authenticated Unrestricted Editing
Many AJAX actions are unsecured, allowing logged in users unrestricted access to the internal Elementor functions...
TablePress <= 1.8 - Authenticated XML External Entity (XXE)
The TablePress WordPress plugin was affected by an Authenticated XML External Entity XXE security vulnerability...
Simple Membership < 3.5.7 - XSS
The Simple Membership WordPress plugin was affected by a XSS security vulnerability...
WP Live Chat Support < 7.1.03 - XSS
The 3CX Live Chat WordPress plugin was affected by a XSS security vulnerability...
All In One Schema.org Rich Snippets <= 1.4.4 - Authenticated Cross-Site Scripting (XSS)
The Schema – All In One Schema Rich Snippets WordPress plugin was affected by an Authenticated Cross-Site Scripting XSS security vulnerability. PoC http://vulnerablesite.com/wp-admin/admin.php?page=richsnippetdashboardforcesend=truesendlabel=...
Clean Login <= 1.7.12 - Change Redirect URL CSRF
The Clean Login WordPress plugin was affected by a Change Redirect URL CSRF security vulnerability. PoC...
NextGEN Gallery <= 2.1.56 - Authenticated Local File Inclusion (LFI) & SQLi
The WordPress Gallery Plugin – NextGEN Gallery WordPress plugin was affected by an Authenticated Local File Inclusion LFI & SQLi security vulnerability...
WordPress 2.8-4.6 - Path Traversal in Upgrade Package Uploader
...
WordPress 4.5.2 - oEmbed Denial of Service (DoS)
...
Ninja Forms 2.9.36 to 2.9.42 - Multiple Vulnerabilities
The Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress WordPress plugin was affected by a Multiple Vulnerabilities security vulnerability...
WP-Invoice <= 4.1.0 - Multiple Vulnerabilities
WP-Invoice plugin = 4.1.0 contains multiple security vulnerabilities that include information disclosure, unauthorised updating of meta data, and privilege escalation...
WordPress <= 4.3 - User List Table Cross-Site Scripting (XSS)
...
SEO Redirection < 2.9 - Authenticated Reflected Cross-Site Scripting (XSS)
The plugin was affected by an Authenticated Reflected Cross-Site Scripting XSS security vulnerability in its settings page, via the search GET parameter PoC https://example.com/wp-admin/options-general.php?page=seo-redirection.php=posts=%22+onmouseover%3Dalert%281%29+%3E...
WordPress <= 4.2.3 - Nav Menu Title Cross-Site Scripting (XSS)
...
Count Per Day 3.4 - SQL Injection
The Count per Day WordPress plugin was affected by a SQL Injection security vulnerability...
Slideshow 2.2.8-2.2.21 - Option Value Disclosure
The SlideshowPluginSlideshowStylesheet::loadStylesheetByAJAX function, accessible by unauthenticated users as an AJAX action, can be abused to force the disclosure of arbitrary Wordpress option values...
ChurcHope Theme <= 2.1 - Local File Inclusion (LFI)
The vulnerability is caused by improper filtration of user-supplied input passed via the 'file' HTTP GET parameter to the '/lib/downloadlink.php' script, which is publicly accessible. PoC http://www.example.com/wp-content/themes/churchope/lib/downloadlink.php?file=../../../../wp-config.php...
WP-DBManager < 2.7.2 - Authenticated Command Injection
The WP-DBManager WordPress plugin was affected by an Authenticated Command Injection security vulnerability...
wpcb 2.4.8 - facture.php id Parameter Reflected XSS
The wpcb WordPress plugin was affected by a facture.php id Parameter Reflected XSS security vulnerability...
GTranslate 1.0.12 - gtranslate.php Widget Code Editing CSRF
The Translate WordPress with GTranslate WordPress plugin was affected by a gtranslate.php Widget Code Editing CSRF security vulnerability...
Cart66 Lite - admin.php cart66-products Page Multiple Field Stored XSS
The cart66-lite WordPress plugin was affected by an admin.php cart66-products Page Multiple Field Stored XSS security vulnerability...
Cart66 Lite 1.5.1.14 - admin.php cart66-products Page Product Manipulation CSRF
The cart66-lite WordPress plugin was affected by an admin.php cart66-products Page Product Manipulation CSRF security vulnerability...
Complete Gallery Manager 3.3.3 - Arbitrary File Upload
The complete-gallery-manager WordPress plugin was affected by an Arbitrary File Upload security vulnerability...
uk-cookie - Cross-Site Request Forgery (CSRF)
The uk-cookie WordPress plugin was affected by a Cross-Site Request Forgery CSRF security vulnerability...
jaspreetchahals-coupons-lite <= 2.1 - XSS in ZeroClipboard
The JC Coupon WordPress plugin was affected by a XSS in ZeroClipboard security vulnerability...
Mingle Forum 1.0.33.3 - wpf.class.php Multiple Parameter SQL Injection
The mingle-forum WordPress plugin was affected by a wpf.class.php Multiple Parameter SQL Injection security vulnerability...
NextGEN Gallery 1.9.12 - Arbitrary File Upload
The WordPress Gallery Plugin – NextGEN Gallery WordPress plugin was affected by an Arbitrary File Upload security vulnerability...
WP Symposium 13.04 - Unvalidated Redirect
The wp-symposium WordPress plugin was affected by an Unvalidated Redirect security vulnerability...
Social Discussions - Multiple Path Disclosure
The Social Discussions WordPress plugin was affected by a Multiple Path Disclosure security vulnerability...
WP125 <= 1.4.9 - CSRF
The WP125 WordPress plugin was affected by a CSRF security vulnerability...
WordPress 2.1.1 - Command Execution Backdoor
PoC http://www.example.com/wp-includes/feed.php?ix=phpinfo; http://www.example.com/wp-includes/theme.php?iz=cat /etc/passwd...
WordPress 3.6 - HTML File Upload Cross-Site Scripting (XSS)
...
portable-phpMyAdmin < 1.3.1 - Authentication Bypass
The portable-phpmyadmin WordPress plugin was affected by an Authentication Bypass security vulnerability...
WordPress 3.5-3.5.1 oEmbed Unspecified XML External Entity (XXE)
...
Limit Login Attempts < 1.7.1 - Auth Cookies Brute Force Bypass
From the changelog of the plugin: "Auth cookies" are special cookies set at login that authenticating you to the system. It is how WordPress "remembers" that you are logged in between page loads. During lockout these are supposed to be cleared, but a change in 1.6.2 broke this. It allowed an...
WP Cumulus < 1.22 - XSS
The wp-cumulus WordPress plugin was affected by a XSS security vulnerability...
Dextaz Ping <= 0.65 - Admin+ RCE
Description The plugin is vulnerable to Remote Code Execution, allowing authenticated attackers, with administrator-level access and above, to execute code on the server...
Greenshift – animation and page builder blocks < 8.9.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Description The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's social share block in all versions up to, and including, 8.9.3 due to insufficient input sanitization and output escaping on user supplied attributes...
HTML5 Video Player < 2.5.27 - Unauthenticated SQLi
Description The plugin does not sanitize and escape a parameter from a REST route before using it in a SQL statement, allowing unauthenticated users to perform SQL injection attacks PoC % time curl "https://example.com/?restroute=/h5vp/v1/video/1=1'+OR+SELECT+1+FROM+SELECTSLEEP5xyz--+-"...
WP-ViperGB < 1.6.2 - Cross-Site Request Forgery
Description The WP-ViperGB plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.6.1. This is due to missing or incorrect nonce validation when saving plugin settings. This makes it possible for unauthenticated attackers to change the plugin's...
LuckyWP Table of Contents <= 2.1.4 - Authenticated(Administrator+) Cross-Site Scripting
Description The LuckyWP Table of Contents plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘Header Title' field in all versions up to and including 2.1.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...
Form Maker by 10Web < 1.15.25 - Authenticated (Administrator+) Stored Cross-Site Scripting
Description The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.15.24 due to insufficient input sanitization and output escaping. This makes it...
AWSOM News Announcement <= 1.6.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Description The AWSOM News Announcement plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.6.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...
Tutor LMS Pro < 2.7.1 - Missing Authorization
Description The Tutor LMS Pro plugin for WordPress is vulnerable to unauthorized access of data, modification of data, loss of data due to a missing capability check on multiple functions in all versions up to, and including, 2.7.0. This makes it possible for unauthenticated attackers to add,...
RegistrationMagic < 5.3.2.1 - Reflected Cross-Site Scripting
Description The RegistrationMagic – User Registration Plugin with Custom Registration Forms plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in all versions up to, and including, 5.3.2.0 due to insufficient input sanitization and output escaping. This makes it possible for...
Media Cleaner: Clean your WordPress! < 6.7.3 - Unauthenticated Information Exposure
Description The Media Cleaner: Clean your WordPress! plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 6.7.2 through publicly exposed log files. This makes it possible for unauthenticated attackers to view potentially sensitive information...