Easy Fancybox < 1.8.18 - Authenticated Stored XSS

The Easy FancyBox WordPress plugin was affected by an Authenticated Stored XSS security vulnerability...

WordPress 5.2.2 - Potential Open Redirect

Description According to the WordPress release notes: "Props to Tim Coen for disclosing an issue where validation and sanitization of a URL could lead to an open redirect. "...

WPS Limit Login <= 1.4.5 - Multiple Issues

Protection Bypass, Stored XSS...

LiveChat <= 3.7.2 - Unauthenticated Option Update/Reset and Stored XSS

The lack of proper CSRF and Authorisation checks could allow an unauthenticated attacker to update or reset the plugin's settings. Furthermore, when updating the livechatemail option, no sanitisation is performed, leading to a Stored XSS issue in the plugin's settings page. CSRF and XSS fixed in...

Facebook for WooCommerce <= 1.9.12 - CSRF allowing Option Update

The original issue has been fixed via 1.9.14. However, as additional CSRF checks have been implemented in 1.9.15, the fixed in has been set to 1.9.15...

Photo Gallery by 10Web <= 1.5.24 - Authenticated LFI

The Photo Gallery by 10Web – Mobile-Friendly Image Gallery WordPress plugin was affected by an Authenticated LFI security vulnerability...

Form Maker by 10Web < 1.13.3 - Authenticated SQL Injection

The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder WordPress plugin was affected by an Authenticated SQL Injection security vulnerability...

W3 Total Cache <= 0.9.7.3 - Cross-Site Scripting (XSS)

The W3 Total Cache WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability. PoC...

SG Optimizer <= 5.0.12 - Unauthenticated File Upload

According to the original researchers: "A successful attack on the SiteGround Optimizer would allow bad actors to store backdoors on vulnerable sites."...

WordPress <= 5.0 - Authenticated File Delete

Description According to WordPress: "Karim El Ouerghemmi discovered that authors could alter meta data to delete files that they weren’t authorized to."...

TablePress <= 1.8 - Authenticated XML External Entity (XXE)

The TablePress WordPress plugin was affected by an Authenticated XML External Entity XXE security vulnerability...

Simple Membership < 3.5.7 - XSS

The Simple Membership WordPress plugin was affected by a XSS security vulnerability...

Mailchimp For WP < 4.1.8 - XSS

The MC4WP: Mailchimp for WordPress WordPress plugin was affected by a XSS security vulnerability...

MailChimp for WordPress <= 4.1.6 - Authenticated Cross-Site Scripting (XSS)

Usage of the output of addqueryarg without escaping in various places in the WordPress Backend leads to reflected XSS vulnerability. PoC URL/wp-admin/admin.php?page=mailchimp-for-wp-integrations&"...

Photo Gallery by WD <= 1.3.50 - Authenticated SQL Injection

The Photo Gallery by 10Web – Mobile-Friendly Image Gallery WordPress plugin was affected by an Authenticated SQL Injection security vulnerability...

Bridge Theme <= 11.1 - DOM Cross-Site Scripting (XSS)

The bridge WordPress theme was affected by a DOM Cross-Site Scripting XSS security vulnerability...

All In One Schema.org Rich Snippets <= 1.4.4 - Authenticated Cross-Site Scripting (XSS)

The Schema – All In One Schema Rich Snippets WordPress plugin was affected by an Authenticated Cross-Site Scripting XSS security vulnerability. PoC http://vulnerablesite.com/wp-admin/admin.php?page=richsnippetdashboardforcesend=truesendlabel=...

WordPress 3.3-4.7.4 - Large File Upload Error XSS

...

Clean Login <= 1.7.12 - Change Redirect URL CSRF

The Clean Login WordPress plugin was affected by a Change Redirect URL CSRF security vulnerability. PoC...

AnyVar 0.1.1 - Stored Cross-Site Scripting (XSS)

The anyvar WordPress plugin was affected by a Stored Cross-Site Scripting XSS security vulnerability...

Nelio Ab Testing < 4.5.11 - SSRF

The Nelio AB Testing WordPress plugin was affected by a SSRF security vulnerability...

Icegram <= 1.9.18 - Cross-Site Request Forgery (CSRF) & XSS

The Popups, Welcome Bar, Optins and Lead Generation Plugin – Icegram WordPress plugin was affected by a Cross-Site Request Forgery CSRF & XSS security vulnerability...

WordPress 4.5.2 - Redirect Bypass

...

WordPress 4.2-4.5.2 - Authenticated Attachment Name Stored XSS

...

Ninja Forms 2.9.36 to 2.9.42 - Multiple Vulnerabilities

The Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress WordPress plugin was affected by a Multiple Vulnerabilities security vulnerability...

Admin Font Editor <= 1.8 - Unauthenticated Reflected Cross-Site Scripting (XSS)

The admin-font-editor WordPress plugin was affected by an Unauthenticated Reflected Cross-Site Scripting XSS security vulnerability. PoC http://www.example.com/wp-content/plugins/admin-font-editor/css.php?size=""...

WordPress 3.7-4.4 - Authenticated Cross-Site Scripting (XSS)

PoC http://www.example.com/wp-admin/customize.php?theme= source: https://twitter.com/brutelogic/status/685105483397619713...

WordPress <= 4.3 - User List Table Cross-Site Scripting (XSS)

...

SEO Redirection < 2.9 - Authenticated Reflected Cross-Site Scripting (XSS)

The plugin was affected by an Authenticated Reflected Cross-Site Scripting XSS security vulnerability in its settings page, via the search GET parameter PoC https://example.com/wp-admin/options-general.php?page=seo-redirection.php=posts=%22+onmouseover%3Dalert%281%29+%3E...

Clean Login < 1.5.1 - Reflected XSS

The Clean Login WordPress plugin was affected by a Reflected XSS security vulnerability...

Count Per Day 3.4 - SQL Injection

The Count per Day WordPress plugin was affected by a SQL Injection security vulnerability...

Nextend Facebook Connect <= 1.5.4 - Reflected Cross-Site Scripting (XSS)

The Nextend Social Login and Register WordPress plugin was affected by a Reflected Cross-Site Scripting XSS security vulnerability...

Nextend Twitter Connect <= 1.5.1 - Reflected Cross-Site Scripting (XSS)

The nextend-twitter-connect WordPress plugin was affected by a Reflected Cross-Site Scripting XSS security vulnerability...

Easy2Map <= 1.24 - SQL Injection

The Function.php file uses sprintf to format queries being sent to the database, this doesn't provide proper sanitisation of user input or properly parameterises the query. PoC $ sqlmap -u 'http://www.example.com/wp-admin/admin-ajax.php' --data="mapID=11='+or+1%3D%3D1%3B=e2mimgsavemapname"...

WordPress <= 4.2 - Unauthenticated Stored Cross-Site Scripting (XSS)

...

Simple Ads Manager <= 2.5.94 - Arbitrary File Upload & SQL Injection

The simple-ads-manager WordPress plugin was affected by an Arbitrary File Upload & SQL Injection security vulnerability...

ChurcHope Theme <= 2.1 - Local File Inclusion (LFI)

The vulnerability is caused by improper filtration of user-supplied input passed via the 'file' HTTP GET parameter to the '/lib/downloadlink.php' script, which is publicly accessible. PoC http://www.example.com/wp-content/themes/churchope/lib/downloadlink.php?file=../../../../wp-config.php...

Ad Manager <= 1.1.2 - Open Redirection

The wordpress-admanager WordPress plugin was affected by an Open Redirection security vulnerability...

wpcb 2.4.8 - facture.php id Parameter Reflected XSS

The wpcb WordPress plugin was affected by a facture.php id Parameter Reflected XSS security vulnerability...

Cart66 Lite - admin.php cart66-products Page Multiple Field Stored XSS

The cart66-lite WordPress plugin was affected by an admin.php cart66-products Page Multiple Field Stored XSS security vulnerability...

seo-spy-google - ofc_upload_image.php Arbitrary File Upload

The seo-spy-google-wordpress-plugin WordPress plugin was affected by an ofcuploadimage.php Arbitrary File Upload security vulnerability...

php-analytics - ofc_upload_image.php Arbitrary File Upload

The php-analytics WordPress plugin was affected by an ofcuploadimage.php Arbitrary File Upload security vulnerability...

geshi-source-colorer <= 0.13 - XSS in ZeroClipboard

The geshi-source-colorer WordPress plugin was affected by a XSS in ZeroClipboard security vulnerability...

GD Star Rating 1.9.22 - SQL Injection

The gd-star-rating WordPress plugin was affected by a SQL Injection security vulnerability...

WP Symposium 13.04 - Unvalidated Redirect

The wp-symposium WordPress plugin was affected by an Unvalidated Redirect security vulnerability...

bbPress - forum.php page Parameter SQL Injection

The bbPress WordPress plugin was affected by a forum.php page Parameter SQL Injection security vulnerability...

WP125 <= 1.4.9 - CSRF

The WP125 WordPress plugin was affected by a CSRF security vulnerability...

WordPress 3.6 - SWF/EXE File Upload Cross-Site Scripting (XSS)

...

st_newsletter - (stnl_iframe.php) SQL Injection

The stnewsletter WordPress plugin was affected by a stnliframe.php SQL Injection security vulnerability...

VideoWhisper Live Streaming Integration 4.29.6 - videowhisper_streaming.php Multiple Parameter XSS

The Broadcast Live Video – Live Streaming : HTML5, WebRTC, HLS, RTSP, RTMP WordPress plugin was affected by a videowhisperstreaming.php Multiple Parameter XSS security vulnerability...