Neosense Theme < 1.8 - Unrestricted File Upload

Neosense is a commercial WordPress theme by dynamicpress. Version 1.7 and possibly earlier includes in its theme directory a copy of the "qquploader" ajax file uploader, which does not verify user authorization. Using this uploader, an attacker can upload any file to the site. The uploaded file i...

ColorWay < 3.4.2 - Cross-Site Scripting (XSS)

The ColorWay WordPress theme was affected by a Cross-Site Scripting XSS security vulnerability...

PeepSo <= 1.6.0 - Authenticated Privilege Escalation

Unfiltered input allows a logged in user to escalate their permissions to that of an Administrator...

WordPress 4.2-4.5.1 - MediaElement.js Reflected Cross-Site Scripting (XSS)

...

WordPress 3.7-4.4.1 - Open Redirect

...

Connections <= 8.5.8 - Reflected Cross-Site Scripting (XSS)

Line 320 contains unfiltered user input for the search field being sent directly via echo back to the users browser via the ’s’ variable. In file includes/admin/pages/manage.php Line 320:...

Pie-Register <= 2.0.18 - Authenticated Blind SQL Injection

The Pie Register – User Registration Forms. Invitation based registrations, Custom Login, Payments WordPress plugin was affected by an Authenticated Blind SQL Injection security vulnerability...

Pie-Register <= 2.0.18 - Unauthenticated Reflected Cross-Site Scripting (XSS)

The Pie Register – User Registration Forms. Invitation based registrations, Custom Login, Payments WordPress plugin was affected by an Unauthenticated Reflected Cross-Site Scripting XSS security vulnerability...

Easy2Map <= 1.2.9 - Reflected Cross-Site Scripting (XSS)

The Easy2Map WordPress plugin was affected by a Reflected Cross-Site Scripting XSS security vulnerability...

CP Reservation Calendar <= 1.1.6 - Unauthenticated SQL Injection

The CP Reservation Calendar WordPress plugin was affected by an Unauthenticated SQL Injection security vulnerability...

Postmatic <= 1.4.5 - Cross-Site Scripting (XSS)

The Replyable – Subscribe to Comments and Reply by Email WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...

WP Limit Login Attempts <= 2.0.0 - Unauthenticated SQL Injection

The WP Limit Login Attempts WordPress plugin was affected by an Unauthenticated SQL Injection security vulnerability...

Easy Media Gallery <= 1.3.47 - Cross Site Scripting (XSS)

The Gallery – Photo Albums Plugin WordPress plugin was affected by a Cross Site Scripting XSS security vulnerability...

Anti-Spam by CleanTalk < 5.22 - Unauthenticated Reflected Cross-Site Scripting (XSS)

The Spam protection, AntiSpam, FireWall by CleanTalk WordPress plugin was affected by an Unauthenticated Reflected Cross-Site Scripting XSS security vulnerability...

Ultimate Member < 1.3.18 - Cross-Site Scripting (XSS)

The Ultimate Member – User Profile, User Registration, Login & Membership Plugin WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...

WP Symposium <= 15.5.1 - Unauthenticated SQL Injection

Wordpress plugin wp-symposium version 15.5.1 and probably all existing previous versions suffers from an unauthenticated SQL Injection in getalbumitem.php, parameter 'size'. The issue is exploitable even if the plugin is deactivated. PoC PoC URL :...

Job Manager <= 0.7.22 - Unauthenticated Stored Cross-Site Scripting (XSS)

The Job Manager WordPress plugin was affected by an Unauthenticated Stored Cross-Site Scripting XSS security vulnerability. PoC Go to the job listings page /index.php/jobs/apply/, then click on "send through your résumé", add the payload '" to the email field. The JavaScript will be executed on t...

Broken Link Manager <= 0.5.5 - Unauthenticated Stored Cross-Site Scripting (XSS)

The Broken Link Manager WordPress plugin was affected by an Unauthenticated Stored Cross-Site Scripting XSS security vulnerability...

Awesome Filterable Portfolio <= 1.8.6 - Authenticated Blind SQL Injection

The Awesome Filterable Portfolio WordPress plugin was affected by an Authenticated Blind SQL Injection security vulnerability...

ZoomSounds <= 2.0 - Remote File Upload

The dzs-zoomsounds WordPress plugin was affected by a Remote File Upload security vulnerability...

WP Fastest Cache < 0.8.3.5 - Multiple CSRF

The WP Fastest Cache WordPress plugin was affected by a Multiple CSRF security vulnerability...

NewStatPress 0.9.8 - XSS & SQL Injection

The NewStatPress WordPress plugin was affected by a XSS & SQL Injection security vulnerability...

GigPress <= 2.3.8 - Authenticated SQL Injection

The GigPress WordPress plugin was affected by an Authenticated SQL Injection security vulnerability...

Quota < 1.2.5 - Unspecified XSS

The quota WordPress theme was affected by an Unspecified XSS security vulnerability...

Feed Them Social < 1.7.0 - XSS & Arbitrary Shortcode Execution

The Feed Them Social – for Twitter feed, Youtube, Pinterest and more WordPress plugin was affected by a XSS & Arbitrary Shortcode Execution security vulnerability...

XCloner - Backup and Restore < 3.1.2 - Multiple Vulnerabilities (RCE & LFI)

The Backup, Restore and Migrate WordPress Sites With the XCloner Plugin WordPress plugin was affected by a Backup and Restore 3.1.2 - Multiple Vulnerabilities RCE & LFI security vulnerability...

Google Calendar Events < 2.0.4 - XSS

The Simple Calendar – Google Calendar Plugin WordPress plugin was affected by a XSS security vulnerability...

WordPress 3.0 - 3.9.1 Authenticated Cross-Site Scripting (XSS) in Multisite

...

bib2html 0.9.3 - /OSBiB/create/index.php styleShortName Parameter XSS

The bib2html WordPress plugin was affected by a /OSBiB/create/index.php styleShortName Parameter XSS security vulnerability...

Lazyest Gallery <= 1.1.20 - EXIF Script Insertion

The Lazyest Gallery WordPress plugin was affected by an EXIF Script Insertion security vulnerability...

mTouch Quiz 3.0.6 - question.php quiz Parameter Reflected XSS

The mTouch Quiz WordPress plugin was affected by a question.php quiz Parameter Reflected XSS security vulnerability...

ShareThis 7.0.3 - Setting Manipulation CSRF

The share-this WordPress plugin was affected by a Setting Manipulation CSRF security vulnerability...

click-to-copy-grab-box <= 0.1.1 - XSS in ZeroClipboard

The click-to-copy-grab-box WordPress plugin was affected by a XSS in ZeroClipboard security vulnerability...

ed2k-link-selector <= 1.1.7 - XSS in ZeroClipboard

The ed2k-link-selector WordPress plugin was affected by a XSS in ZeroClipboard security vulnerability...

Zopim Live Chat <= 1.2.5 - XSS in ZeroClipboard

The Zendesk Chat WordPress plugin was affected by a XSS in ZeroClipboard security vulnerability...

WP Forum Server <= 1.7.3 - fs-admin/wpf-add-forum.php groupid Parameter XSS

The WP Forum Server WordPress plugin was affected by a fs-admin/wpf-add-forum.php groupid Parameter XSS security vulnerability...

Age Verification <= 0.4 - Open Redirect

The age-verification WordPress plugin was affected by an Open Redirect security vulnerability...

MF Gig Calendar 0.9.4.1 - URL Cross-Site Scripting

The MF Gig Calendar WordPress plugin was affected by an URL Cross-Site Scripting security vulnerability...

Events Manager < 5.5 - Cross-Site Scripting (XSS)

The Events Manager WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...

Download Monitor < 3.3.6.2 - Multiple XSS

The Download Monitor WordPress plugin was affected by a Multiple XSS security vulnerability...

Zingiri Web Shop < 2.4.0 - Multiple Unspecified Issues

The zingiri-web-shop WordPress plugin was affected by a Multiple Unspecified Issues security vulnerability...

Another WordPress Classifieds <= 1.8.9.4 - Unspecified Image Upload

The WordPress Classifieds Plugin – Ad Directory & Listings by AWP Classifieds WordPress plugin was affected by an Unspecified Image Upload security vulnerability...

WP Postratings < 1.62 - Authenticated SQL Injection

The WP-PostRatings WordPress plugin was affected by a SQL Injection security vulnerability allowing authenticated users author+ to execute SQL commands via the id attribute of the ratings shortcode when creating a post...

012 PS Multi Languages <= 1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting

Description The 012 Ps Multi Languages plugin for WordPress is vulnerable to Stored Cross-Site Scripting via translated titles in all versions up to, and including, 1.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

Music Store - WordPress eCommerce < 1.1.14 - Authenticated (Admin+) SQL Injection

Description The Music Store – WordPress eCommerce plugin for WordPress is vulnerable to SQL Injection in all versions up to, and including, 1.1.13 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...

Tickera < 3.5.2.9 - Missing Authorization to Authenticated (Susbcriber+) Ticket Deletion

Description The Tickera – WordPress Event Ticketing plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the tcdldeletetickets AJAX action in all versions up to, and including, 3.5.2.8. This makes it possible for authenticated attackers, with...

Master Slider – Responsive Touch Slider <= 3.9.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via ms_layer Shortcode

Description The Master Slider – Responsive Touch Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'mslayer' shortcode in all versions up to, and including, 3.9.10 due to insufficient input sanitization and output escaping on the 'cssid' user supplied...

Easy WP SMTP by SendLayer < 2.3.1 - Exposure of Sensitive Information via the UI

Description The Easy WP SMTP by SendLayer – WordPress SMTP and Email Log Plugin plugin for WordPress is vulnerable to information exposure in all versions up to, and including, 2.3.0. This is due to plugin providing the SMTP password in the SMTP Password field when viewing the settings. This make...

GP Premium < 2.4.1 - Reflected Cross-Site Scripting

Description The GP Premium plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the message parameter in all versions up to, and including, 2.4.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrar...

Cowidgets – Elementor Addons <= 1.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via heading_tag Parameter

Description The Cowidgets – Elementor Addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘headingtag’ parameter in all versions up to, and including, 1.1.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers,...