14633 matches found
WP Live Chat Support < 8.0.27 - Unauthenticated Stored XSS
The 3CX Live Chat WordPress plugin was affected by an Unauthenticated Stored XSS security vulnerability...
Ninja Forms File Uploads Extension <= 3.0.22 - Unauthenticated Arbitrary File Upload
The ninja-forms-uploads WordPress plugin was affected by an Unauthenticated Arbitrary File Upload security vulnerability...
WP Google Maps 7.11.00-7.11.17 - Unauthenticated SQL Injection
The includes/class.rest-api.php in the REST API does not sanitize field names before a SELECT statement, leading to an unauthenticated SQL injection issue. PoC curl -k --silent "http://example.com/index.php?restroute=3D/wpgmza/v1/markers/=3D%7B%7D&=fields=3D+from+wpusers+--+-"...
Import users from CSV with meta <= 1.14.0.2 - XSS and CSRF
The Import and export users and customers WordPress plugin was affected by a XSS and CSRF security vulnerability...
WordPress <= 5.0 - User Activation Screen Search Engine Indexing
Description According to WordPress: "Team Yoast discovered that the user activation screen could be indexed by search engines in some uncommon configurations, leading to exposure of email addresses, and in some rare cases, default generated passwords."...
Social Sharing Plugin – Kiwi <= 2.0.10 - Update Any Option
The Social Sharing Plugin – Kiwi WordPress plugin was affected by an Update Any Option security vulnerability...
WPML <= 3.6.3 - Unauthenticated Stored Cross-Site Scripting (XSS)
The sitepress-multilingual-cms WordPress plugin was affected by an Unauthenticated Stored Cross-Site Scripting XSS security vulnerability. PoC POST /wp-admin/admin.php?page=sitepress-multilingual-cms-3.6.3%2Fmenu%2Ftheme-localization.php HTTP/1.1 Host: localhost User-Agent: Mozilla/5.0 Windows NT...
Wechat Broadcast <= 1.2.0 - Local/Remote File Inclusion
This bug was found in the file: /wechat-broadcast/wechat/Image.php echo filegetcontentsisset$GET"url" ? $GET"url" : ''; The parameter "url" it is not sanitized allowing include local or remote files To exploit the vulnerability only is needed use the version 1.0 of the HTTP protocol to interact...
Booking Calendar <= 2.2.2 - Parameters Tampering Allowing Arbitrary Prices Change
Note: It is unclear whether or not this issue has been remediated...
Form Maker by WD < 1.12.24 - CSV Injection
The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder WordPress plugin was affected by a CSV Injection security vulnerability...
WP Background Takeover <= 4.1.4 - Directory Traversal
Allows for an attacker to browse files via the download.php file PoC http://target.com/wp-content/plugins/wpsite-background-takeover/exports/download.php?filename=../../../../wp-config.php...
Newsletters Lite < 4.6.8.6 - PHP Object Injection
The Newsletters WordPress plugin was affected by a PHP Object Injection security vulnerability...
Ninja Forms < 3.2.15 - Parameter Tampering
The Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress WordPress plugin was affected by a Parameter Tampering security vulnerability...
WordPress 3.7-4.9 - 'newbloguser' Key Weak Hashing
...
Yoast SEO <= 5.7.1 - Authenticated Cross-Site Scripting (XSS)
Cross-site scripting XSS vulnerability in admin/googlesearchconsole/class-gsc-table.php in the Yoast SEO plugin before 5.8.0 for WordPress allows remote attackers to inject arbitrary web script or HTML...
Max Mega Menu <= 2.3.8 - Authenticated XSS
The Max Mega Menu WordPress plugin was affected by an Authenticated XSS security vulnerability...
Responsive Image Gallery, Gallery Album <= 1.2.0 - Authenticated SQL Injection
The Responsive Image Gallery, Gallery Album WordPress plugin was affected by an Authenticated SQL Injection security vulnerability...
BackupGuard < 1.1.47 - Authenticated Cross-Site Scripting (XSS)
The WordPress Backup and Migrate Plugin – Backup Guard WordPress plugin was affected by an Authenticated Cross-Site Scripting XSS security vulnerability...
Updraftplus < 1.13.5 - XSS
The UpdraftPlus WordPress Backup Plugin WordPress plugin was affected by a XSS security vulnerability...
rk-responsive-contact-form 1.0 - Authenticated Blind SQL Injection
The rk-responsive-contact-form WordPress plugin was affected by an Authenticated Blind SQL Injection security vulnerability...
Simple Custom CSS and JS <= 3.3 - Authenticated Cross-Site Scripting (XSS)
The Simple Custom CSS and JS WordPress plugin was affected by an Authenticated Cross-Site Scripting XSS security vulnerability...
wordpress-gallery-transformation 1.0 - Blind SQL Injection
The wordpress-gallery-transformation WordPress plugin was affected by a Blind SQL Injection security vulnerability...
Delightful Downloads <= 1.6.6 - Unauthenticated Path Traversal
Since no authentication or authorisation checks for direct access to the jqueryFileTree.php are made, the vulnerability allows for browsing the file system on a host out of an unauthenticated context. Even though no file content can be exfiltrated this way, "hidden" files e.g. in the web...
Calendar by WD <= 1.5.51 - Authenticated Blind SQL Injection
The SpiderCalendar WordPress plugin was affected by an Authenticated Blind SQL Injection security vulnerability...
Mobile App Native <= 3.0 - Remote File Upload
The code in file ./zen-mobile-app-native/server/images.php doesn't require authentication or check that the user is allowed to upload content. It also doesn't sanitize the file upload against executable code. PoC $ curl -F "file=@/var/www/shell.php"...
Democracy Poll < 5.4 - CSRF & XSS
The Democracy Poll WordPress plugin was affected by a CSRF & XSS security vulnerability...
Time Sheets < 1.5.2 - Multiple XSS
The Time Sheets WordPress plugin was affected by a Multiple XSS security vulnerability...
Jetpack <= 4.0.3 - Multiple Vulnerabilities
Jetpack 4.0.4 fixes 3 security bugs: Private feedback form entries were made available publicly via the REST API Post By Email settings could be changed The Likes module was vulnerable to XSS...
WordPress 4.2-4.5.1 - MediaElement.js Reflected Cross-Site Scripting (XSS)
...
Ghost Plugin <= 0.5.5 - Unrestricted Export Download
The Ghost WordPress plugin was affected by an Unrestricted Export Download security vulnerability...
OptinMonster <= 1.1.4.5 - Execution of Arbitrary Shortcodes
Unauthenticated users are able to execute arbitrary WordPress shortcodes via a simple HTTP GET request. While the command is protected by a nonce, the nonce is leaked on every page load...
404 to 301 <= 2.0.2 - Authenticated Blind SQL Injection
Description The 404 to 301 – Redirect, Log and Notify 404 Errors WordPress plugin was affected by an Authenticated Blind SQL Injection security vulnerability...
Support Ticket System <= 1.2 - Unauthenticated SQL Injection
The Support Ticket System WordPress plugin was affected by an Unauthenticated SQL Injection security vulnerability...
Easy Media Gallery <= 1.3.47 - Cross Site Scripting (XSS)
The Gallery – Photo Albums Plugin WordPress plugin was affected by a Cross Site Scripting XSS security vulnerability...
Ultimate Member < 1.3.18 - Cross-Site Scripting (XSS)
The Ultimate Member – User Profile, User Registration, Login & Membership Plugin WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...
WP Symposium <= 15.5.1 - Unauthenticated SQL Injection
Wordpress plugin wp-symposium version 15.5.1 and probably all existing previous versions suffers from an unauthenticated SQL Injection in getalbumitem.php, parameter 'size'. The issue is exploitable even if the plugin is deactivated. PoC PoC URL :...
Job Manager <= 0.7.22 - Unauthenticated Stored Cross-Site Scripting (XSS)
The Job Manager WordPress plugin was affected by an Unauthenticated Stored Cross-Site Scripting XSS security vulnerability. PoC Go to the job listings page /index.php/jobs/apply/, then click on "send through your résumé", add the payload '" to the email field. The JavaScript will be executed on t...
Broken Link Manager <= 0.5.5 - Unauthenticated Stored Cross-Site Scripting (XSS)
The Broken Link Manager WordPress plugin was affected by an Unauthenticated Stored Cross-Site Scripting XSS security vulnerability...
NEX-Forms <= 4.0 - Unauthenticated Blind SQL Injection
The NEX-Forms – Ultimate Form Builder – Contact forms and much more WordPress plugin was affected by an Unauthenticated Blind SQL Injection security vulnerability...
ZoomSounds <= 2.0 - Remote File Upload
The dzs-zoomsounds WordPress plugin was affected by a Remote File Upload security vulnerability...
NewStatPress 0.9.8 - XSS & SQL Injection
The NewStatPress WordPress plugin was affected by a XSS & SQL Injection security vulnerability...
Showbiz Pro <= 1.7.1 - Shell Upload
The showbizpro WordPress plugin was affected by a Shell Upload security vulnerability...
WooCommerce <= 2.2.10 - Cross-Site Scripting (XSS)
The WooCommerce WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...
Huge IT Slider <= 2.6.8 - SQL Injection
The slider-image WordPress plugin was affected by a SQL Injection security vulnerability...
Pods <= 2.4.3 - Authenticated XSS & CSRF
The Pods – Custom Content Types and Fields WordPress plugin was affected by an Authenticated XSS & CSRF security vulnerability...
XCloner - Backup and Restore < 3.1.2 - Multiple Vulnerabilities (RCE & LFI)
The Backup, Restore and Migrate WordPress Sites With the XCloner Plugin WordPress plugin was affected by a Backup and Restore 3.1.2 - Multiple Vulnerabilities RCE & LFI security vulnerability...
MaxButtons 1.26.0 - Cross Site Scripting (XSS)
The WordPress Button Plugin MaxButtons WordPress plugin was affected by a Cross Site Scripting XSS security vulnerability...
WordPress 3.4.2 - 3.9.2 Does Not Invalidate Sessions Upon Logout
...