14653 matches found
LifterLMS <= 3.34.5 - Unauthenticated Options Import
Unauthenticated Options Import, which could lead to - Website Redirection - Administrator Account Creation - Content Injection - Stored XSS The issues have been reported as fixed in 3.35.0. However v3.35.1 added additional input sanitisation and filtering...
Event Tickets <= 4.10.7.1 - CSV Injection
The Event Tickets WordPress plugin was affected by a CSV Injection security vulnerability...
WP Fastest Cache <= 0.8.9.5 - Directory Traversal
The WP Fastest Cache WordPress plugin was affected by a Directory Traversal security vulnerability...
WPS Hide Login <= 1.5.2.2 - Multiples Issues
Protection Bypasses...
Ad Inserter <= 2.4.21 - Authenticated Remote Code Execution
The Ad Inserter – Ad Manager & AdSense Ads WordPress plugin was affected by an Authenticated Remote Code Execution security vulnerability. PoC The nonce aicheck in the final request can be obtained by querying the homepage with the AIWPDEBUGGING cookie set to 2. Then, use an account with a role a...
CP Contact Form with Paypal <= 1.3.01 - Multiple XSS
The CP Contact Form with PayPal WordPress plugin was affected by a Multiple XSS security vulnerability. PoC Version =1 fixed in 1.2.98...
Sina Extension For Elementor <= 2.2.0 - LFI
The Sina Extension for Elementor WordPress plugin was affected by a LFI security vulnerability...
Easy Digital Downloads <= 2.9.15 - Stored XSS
Stored XSS Cross Site Scripting via the IP addresses in logs...
Insert or Embed Articulate Content into WordPress <= 4.2998 - Authenticated RCE
Original issue fixed in 4.2998. However, it was also be possible to upload via articulateuploadajaxfile AJAX method which was lacking authorisation checks and has been fixed in 4.2999...
FV Flowplayer Video Player <= 7.3.14.727 - SQL Injection
Changelog states: "Security - fix for SQL injection vulnerability in email subscription"...
Form Maker by 10Web < 1.13.3 - Authenticated SQL Injection
The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder WordPress plugin was affected by an Authenticated SQL Injection security vulnerability...
WPGraphQL <= 0.2.3 - Multiple Vulnerabilities
Without authorisation, weak access controls allow us to: Create administrative users Post comments on articles bypassing article restrictions and global moderation Retrieve content of password-protected posts/articles/pages Retrieve full list of registered users in the platform Retrieve full list...
WooCommerce Checkout Manager <= 4.2.6 - Arbitrary File Upload
The Checkout Manager for WooCommerce WordPress plugin was affected by an Arbitrary File Upload security vulnerability...
Contact Form Builder <= 1.0.68 - CSRF to LFI
The WDContactFormBuilder WordPress plugin was affected by a CSRF to LFI security vulnerability...
WP Database Backup < 5.1.2 - XSS
The WP Database Backup WordPress plugin was affected by a XSS security vulnerability...
Ninja Forms File Uploads Extension <= 3.0.22 - Unauthenticated Arbitrary File Upload
The ninja-forms-uploads WordPress plugin was affected by an Unauthenticated Arbitrary File Upload security vulnerability...
WP Google Maps 7.11.00-7.11.17 - Unauthenticated SQL Injection
The includes/class.rest-api.php in the REST API does not sanitize field names before a SELECT statement, leading to an unauthenticated SQL injection issue. PoC curl -k --silent "http://example.com/index.php?restroute=3D/wpgmza/v1/markers/=3D%7B%7D&=fields=3D+from+wpusers+--+-"...
Google XML Sitemaps <= 4.0.9 - Authenticated Cross-Site Scripting (XSS)
According to the changelog: 4.1.0 2018-12-18 - Fixed security issue related to escaping external URLs - Fixed security issue related to option tags in forms...
WP Payeezy Pay < 2.98 - Local File Inclusion
The WP Payeezy Pay WordPress plugin was affected by a Local File Inclusion security vulnerability...
LoginPress <= 1.1.15 - Authenticated Blind SQL Injection
Blind time-based SQL injection, combined with lack of permission check resulted in an unauthorised attack which can be performed by any user on the site including subscriber profiles. 1. Lack of permission check in settings import Similar to our recent analysis, this vulnerability was also caused...
WPML <= 3.6.3 - Unauthenticated Stored Cross-Site Scripting (XSS)
The sitepress-multilingual-cms WordPress plugin was affected by an Unauthenticated Stored Cross-Site Scripting XSS security vulnerability. PoC POST /wp-admin/admin.php?page=sitepress-multilingual-cms-3.6.3%2Fmenu%2Ftheme-localization.php HTTP/1.1 Host: localhost User-Agent: Mozilla/5.0 Windows NT...
wpForo < 1.5.2 - Privilege Escalation
The wpForo Forum WordPress plugin was affected by a Privilege Escalation security vulnerability...
CF7 Invisible reCaptcha <= 1.3.1 - XSS
The CF7 Invisible reCAPTCHA WordPress plugin was affected by a XSS security vulnerability...
WP Live Chat Support < 8.0.08 - Cross-Site Scripting (XSS)
The 3CX Live Chat WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...
Tagregator <= 0.6 - Stored XSS
The Tagregator WordPress plugin was affected by a Stored XSS security vulnerability...
Newsletters Lite < 4.6.8.6 - PHP Object Injection
The Newsletters WordPress plugin was affected by a PHP Object Injection security vulnerability...
Ninja Forms < 3.2.15 - Parameter Tampering
The Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress WordPress plugin was affected by a Parameter Tampering security vulnerability...
WP Retina 2x <= 5.2.0 - Cross-Site Scripting (XSS)
The WP Retina 2x WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...
GD Rating System 2.3 - Multiple Vulnerabilities
The GD Rating System WordPress plugin was affected by a Multiple Vulnerabilities security vulnerability...
Qards - Stored Cross-Site Scripting (XSS)
Google Dork: inurl:"plugins/qards" Qards provides you easy option to drag and edit every part and element of your site in the front-end, you will never have to write any code to change the layout or to change any part of the site like the traditional WordPress way. PoC The vulnerable script...
Content Audit <= 1.9.1 - Cross-Site Scripting (XSS) & CSRF
The Content Audit WordPress plugin was affected by a Cross-Site Scripting XSS & CSRF security vulnerability...
Content Timeline <= 4.4.2 - Multiple Blind SQL Injection
Multiple Blind SQL injections in the premium 'Content Timeline' Plugin. One unauthenticated and two authenticated injections. Contacted the author twice without any response. History: 09-16-2017 Contacted the author 09-16-2017 Requested CVE-ID 09-18-2017 CVE-ID Received 09-18-2017 Contacted the...
Responsive Image Gallery, Gallery Album <= 1.2.0 - Authenticated SQL Injection
The Responsive Image Gallery, Gallery Album WordPress plugin was affected by an Authenticated SQL Injection security vulnerability...
Post Pay Counter < 2.731 - PHP Obj Injection & Access Control Issues
The Post Pay Counter WordPress plugin was affected by a PHP Obj Injection & Access Control Issues security vulnerability...
MailChimp for WordPress <= 4.1.6 - Authenticated Cross-Site Scripting (XSS)
Usage of the output of addqueryarg without escaping in various places in the WordPress Backend leads to reflected XSS vulnerability. PoC URL/wp-admin/admin.php?page=mailchimp-for-wp-integrations&"...
BackWPup <= 3.4.1 - Backup File Download
The BackWPup – WordPress Backup Plugin WordPress plugin was affected by a Backup File Download security vulnerability...
WP Live Chat Support < 7.1.05 - Cross-Site Scripting (XSS)
WP Live Chat Support is vulnerable by sending XSS payloads through chat. PoC...
WordPress Plugin IBPS Online Exam <= 1.0 - Authenticated SQL Injection / Cross-Site Scripting
Exploit Author: 8bitsec Contact Author: https://twitter.com/8bitsec Stored XSS on exam input textfields and Blind SQL Injection on 'examappUserResult' page 'id' parameter. PoC Authenticated Stored XSS: Logged as a student: Write the payload in the input textfields while attempting an exam. The...
Shortcodes Ultimate <= 4.9.9 - Authenticated Directory Traversal
The WordPress Shortcodes Plugin — Shortcodes Ultimate WordPress plugin was affected by an Authenticated Directory Traversal security vulnerability...
WP Jobs <= 1.4 - Authenticated SQL Injection
The WP Jobs WordPress plugin was affected by an Authenticated SQL Injection security vulnerability...
WordPress 3.3-4.7.4 - Large File Upload Error XSS
...
Dtracker <= 1.5 - Unauthorised Contract Creation
Plugin is still affected and has been closed...
Wp2android 1.1.4 - Unauthenticated File Upload
Plugin is still affected and has been closed...
WordPress 4.2-4.7.2 - Press This CSRF DoS
...
rockhoist-badges 1.2.2 - Authenticated Stored Cross-Site Scripting (XSS)
The rockhoist-badges WordPress plugin was affected by an Authenticated Stored Cross-Site Scripting XSS security vulnerability...
WordPress 4.3.0-4.7.1 - Cross-Site Scripting (XSS) in posts list table
...
Google Document Embedder < 2.6.1 - XSS
The Google Doc Embedder WordPress plugin was affected by a XSS security vulnerability...
WP Live Chat Support < 6.2.02 - Stored Cross-Site Scripting
The 3CX Live Chat WordPress plugin was affected by a Stored Cross-Site Scripting security vulnerability...