14608 matches found
Popup-Maker < 1.8.12 - Multiple Vulnerabilities
An attacker can partially control the arguments of the doaction, during the initialization of the PUMSite . Because of this, an attacker can call any method which contains an action starting from popmake or pum . This will lead to successful execution of functions which do not require arguments...
WordPress 5.0-5.2.2 - Authenticated Stored XSS in Shortcode Previews
Description According to the WordPress release notes: "Props to Zhouyuan Yang of Fortinet’s FortiGuard Labs who disclosed a vulnerability for cross-site scripting XSS in shortcode previews."...
Slick Popup <= 1.7.1 - Privilege Escalation
Subscriber users are able to create an administrator account with hardcoded login credentials. PoC Hardcoded username "slickpopupteam" and its password is OmakPass13...
WP Database Backup < 5.1.2 - XSS
The WP Database Backup WordPress plugin was affected by a XSS security vulnerability...
Better Search 2.2.2 - Unauthenticated SQL Injection
The Better Search WordPress plugin was affected by an Unauthenticated SQL Injection security vulnerability...
LoginPress <= 1.1.15 - Authenticated Blind SQL Injection
Blind time-based SQL injection, combined with lack of permission check resulted in an unauthorised attack which can be performed by any user on the site including subscriber profiles. 1. Lack of permission check in settings import Similar to our recent analysis, this vulnerability was also caused...
Social Sharing Plugin – Kiwi <= 2.0.10 - Update Any Option
The Social Sharing Plugin – Kiwi WordPress plugin was affected by an Update Any Option security vulnerability...
WPML <= 3.6.3 - Unauthenticated Stored Cross-Site Scripting (XSS)
The sitepress-multilingual-cms WordPress plugin was affected by an Unauthenticated Stored Cross-Site Scripting XSS security vulnerability. PoC POST /wp-admin/admin.php?page=sitepress-multilingual-cms-3.6.3%2Fmenu%2Ftheme-localization.php HTTP/1.1 Host: localhost User-Agent: Mozilla/5.0 Windows NT...
Contact Form 7 <= 5.0.3 - register_post_type() Privilege Escalation
According to the official release: "A privilege escalation vulnerability has been found in Contact Form 7 5.0.3 and older versions. Utilizing this vulnerability, a logged-in user in the Contributor role can potentially edit contact forms, which only Administrator and Editor-role users are allowed...
Ajax BootModal Login <= 1.4.3 - Captcha Reuse
The Ajax BootModal Login WordPress plugin was affected by a Captcha Reuse security vulnerability...
Chained Quiz <= 1.0.8 - Unauthenticated SQL Injection
WordPress Plugin Plugin Chained Quiz before 1.0.9 allows remote unauthenticated users to execute arbitrary SQL commands via the 'answer' and 'answers' parameters. Technical details: Chained Quiz appears to be vulnerable to time-based SQL-Injection. The issue lies on the "$answer" backend variable...
Geo Mashup <= 1.10.3 - Unspecified Cross-Site Scripting (XSS)
The Geo Mashup WordPress plugin was affected by an Unspecified Cross-Site Scripting XSS security vulnerability...
Ninja Forms <= 3.2.13 - Cross-Site Scripting (XSS)
The Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...
Enfold Theme < 4.2.1 - Rewrite Portfolio Permalink Structure & Information Disclosure
The changelog describes two security fixes: - fixed: security issue that would allow an attacker to export your enfold theme settings - fixed: security issue that allowed an attacker to rewrite the portfolio permalink structure...
WordPress Concours <= 1.1 - Authenticated Cross-Site Scripting (XSS)
The wp-concours WordPress plugin was affected by an Authenticated Cross-Site Scripting XSS security vulnerability...
Elementor Page Builder <= 1.7.12 - Authenticated Unrestricted Editing
Many AJAX actions are unsecured, allowing logged in users unrestricted access to the internal Elementor functions...
Yoast SEO <= 5.7.1 - Authenticated Cross-Site Scripting (XSS)
Cross-site scripting XSS vulnerability in admin/googlesearchconsole/class-gsc-table.php in the Yoast SEO plugin before 5.8.0 for WordPress allows remote attackers to inject arbitrary web script or HTML...
Max Mega Menu <= 2.3.8 - Authenticated XSS
The Max Mega Menu WordPress plugin was affected by an Authenticated XSS security vulnerability...
Simple Login Log <= 1.1.0 - Authenticated SQL Injection
The Simple Login Log WordPress plugin was affected by an Authenticated SQL Injection security vulnerability...
2kb Amazon Affiliates Store <= 2.1.0 - Authenticated Cross-Site Scripting (XSS)
Description The 2kb Amazon Affiliates Store WordPress plugin was affected by an Authenticated Cross-Site Scripting XSS security vulnerability...
rk-responsive-contact-form 1.0 - Authenticated Blind SQL Injection
The rk-responsive-contact-form WordPress plugin was affected by an Authenticated Blind SQL Injection security vulnerability...
wordpress-gallery-transformation 1.0 - Blind SQL Injection
The wordpress-gallery-transformation WordPress plugin was affected by a Blind SQL Injection security vulnerability...
Delightful Downloads <= 1.6.6 - Unauthenticated Path Traversal
Since no authentication or authorisation checks for direct access to the jqueryFileTree.php are made, the vulnerability allows for browsing the file system on a host out of an unauthenticated context. Even though no file content can be exfiltrated this way, "hidden" files e.g. in the web...
Corner Ad < 1.0.8 - XSS
The Corner Ad WordPress plugin was affected by a XSS security vulnerability...
ColorWay < 3.4.2 - Cross-Site Scripting (XSS)
The ColorWay WordPress theme was affected by a Cross-Site Scripting XSS security vulnerability...
WordPress 2.6.0-4.5.2 - Unauthorized Category Removal from Post
...
WordPress 4.2-4.5.1 - MediaElement.js Reflected Cross-Site Scripting (XSS)
...
Music Store <= 1.0.41 - Cross-Site Scripting (XSS)
The Music Store – WordPress eCommerce WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...
WordPress 3.7-4.4.1 - Open Redirect
...
Connections <= 8.5.8 - Reflected Cross-Site Scripting (XSS)
Line 320 contains unfiltered user input for the search field being sent directly via echo back to the users browser via the ’s’ variable. In file includes/admin/pages/manage.php Line 320:...
Pie-Register <= 2.0.18 - Authenticated Blind SQL Injection
The Pie Register – User Registration Forms. Invitation based registrations, Custom Login, Payments WordPress plugin was affected by an Authenticated Blind SQL Injection security vulnerability...
Pie-Register <= 2.0.18 - Unauthenticated Reflected Cross-Site Scripting (XSS)
The Pie Register – User Registration Forms. Invitation based registrations, Custom Login, Payments WordPress plugin was affected by an Unauthenticated Reflected Cross-Site Scripting XSS security vulnerability...
Easy2Map <= 1.2.9 - Reflected Cross-Site Scripting (XSS)
The Easy2Map WordPress plugin was affected by a Reflected Cross-Site Scripting XSS security vulnerability...
Easy Media Gallery <= 1.3.47 - Cross Site Scripting (XSS)
The Gallery – Photo Albums Plugin WordPress plugin was affected by a Cross Site Scripting XSS security vulnerability...
Events Manager < 5.6 - Cross-Site Scripting (XSS) & Code Injection
The Events Manager WordPress plugin was affected by a Cross-Site Scripting XSS & Code Injection security vulnerability...
WP Symposium <= 15.5.1 - Unauthenticated SQL Injection
Wordpress plugin wp-symposium version 15.5.1 and probably all existing previous versions suffers from an unauthenticated SQL Injection in getalbumitem.php, parameter 'size'. The issue is exploitable even if the plugin is deactivated. PoC PoC URL :...
Job Manager <= 0.7.22 - Unauthenticated Stored Cross-Site Scripting (XSS)
The Job Manager WordPress plugin was affected by an Unauthenticated Stored Cross-Site Scripting XSS security vulnerability. PoC Go to the job listings page /index.php/jobs/apply/, then click on "send through your résumé", add the payload '" to the email field. The JavaScript will be executed on t...
S3Bubble <= 0.7 - Directory Traversal leading to Arbitrary File Access
The last time it was checked the plugin was still affected and had been closed...
Powerplay Gallery - Arbitrary File Upload & SQL Injection
The wp-powerplaygallery WordPress plugin was affected by an Arbitrary File Upload & SQL Injection security vulnerability...
WP Fastest Cache < 0.8.3.5 - Multiple CSRF
The WP Fastest Cache WordPress plugin was affected by a Multiple CSRF security vulnerability...
NewStatPress 0.9.8 - XSS & SQL Injection
The NewStatPress WordPress plugin was affected by a XSS & SQL Injection security vulnerability...
GigPress <= 2.3.8 - Authenticated SQL Injection
The GigPress WordPress plugin was affected by an Authenticated SQL Injection security vulnerability...
Lattice < 1.1.4 - Unspecified XSS
The lattice WordPress theme was affected by an Unspecified XSS security vulnerability...
Live Forms - Visual Form Builder 3.0.1 - Blind SQL Injection
The AJAX action ‘getreqlist’ is available to all logged in users. The parameter ‘ipp’ sent to this action is vulnerable to Blind MySQL Injection. This can be leveraged by detecting how long a query takes to return...
Wpml < 3.1.9 - XSS
The wpml WordPress plugin was affected by a XSS security vulnerability...
Google Doc Embedder <= 2.5.18 - Cross-Site Scripting (XSS)
The Google Doc Embedder WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...
WooCommerce <= 2.2.10 - Cross-Site Scripting (XSS)
The WooCommerce WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...
Cart66 Lite <= 1.5.3 - SQL Injection
The QSA named ‘q’ for the ‘promotionProductSearch’ AJAX call is not being sanitized, which allows for MySQL injection utilizing a UNION. The user must be logged in for this to be applicable. The output is JSON encoded, however is a pure representation of the data returned from a MySQL query...