Sina Extension For Elementor <= 2.2.0 - LFI

The Sina Extension for Elementor WordPress plugin was affected by a LFI security vulnerability...

Easy Digital Downloads <= 2.9.15 - Stored XSS

Stored XSS Cross Site Scripting via the IP addresses in logs...

Insert or Embed Articulate Content into WordPress <= 4.2998 - Authenticated RCE

Original issue fixed in 4.2998. However, it was also be possible to upload via articulateuploadajaxfile AJAX method which was lacking authorisation checks and has been fixed in 4.2999...

FV Flowplayer Video Player <= 7.3.14.727 - SQL Injection

Changelog states: "Security - fix for SQL injection vulnerability in email subscription"...

Form Maker by 10Web < 1.13.3 - Authenticated SQL Injection

The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder WordPress plugin was affected by an Authenticated SQL Injection security vulnerability...

WPGraphQL <= 0.2.3 - Multiple Vulnerabilities

Without authorisation, weak access controls allow us to: Create administrative users Post comments on articles bypassing article restrictions and global moderation Retrieve content of password-protected posts/articles/pages Retrieve full list of registered users in the platform Retrieve full list...

WooCommerce Checkout Manager <= 4.2.6 - Arbitrary File Upload

The Checkout Manager for WooCommerce WordPress plugin was affected by an Arbitrary File Upload security vulnerability...

Contact Form Builder <= 1.0.68 - CSRF to LFI

The WDContactFormBuilder WordPress plugin was affected by a CSRF to LFI security vulnerability...

WP Database Backup < 5.1.2 - XSS

The WP Database Backup WordPress plugin was affected by a XSS security vulnerability...

Ninja Forms File Uploads Extension <= 3.0.22 - Unauthenticated Arbitrary File Upload

The ninja-forms-uploads WordPress plugin was affected by an Unauthenticated Arbitrary File Upload security vulnerability...

WP Google Maps 7.11.00-7.11.17 - Unauthenticated SQL Injection

The includes/class.rest-api.php in the REST API does not sanitize field names before a SELECT statement, leading to an unauthenticated SQL injection issue. PoC curl -k --silent "http://example.com/index.php?restroute=3D/wpgmza/v1/markers/=3D%7B%7D&=fields=3D+from+wpusers+--+-"...

Google XML Sitemaps <= 4.0.9 - Authenticated Cross-Site Scripting (XSS)

According to the changelog: 4.1.0 2018-12-18 - Fixed security issue related to escaping external URLs - Fixed security issue related to option tags in forms...

WP Payeezy Pay < 2.98 - Local File Inclusion

The WP Payeezy Pay WordPress plugin was affected by a Local File Inclusion security vulnerability...

LoginPress <= 1.1.15 - Authenticated Blind SQL Injection

Blind time-based SQL injection, combined with lack of permission check resulted in an unauthorised attack which can be performed by any user on the site including subscriber profiles. 1. Lack of permission check in settings import Similar to our recent analysis, this vulnerability was also caused...

WPML <= 3.6.3 - Unauthenticated Stored Cross-Site Scripting (XSS)

The sitepress-multilingual-cms WordPress plugin was affected by an Unauthenticated Stored Cross-Site Scripting XSS security vulnerability. PoC POST /wp-admin/admin.php?page=sitepress-multilingual-cms-3.6.3%2Fmenu%2Ftheme-localization.php HTTP/1.1 Host: localhost User-Agent: Mozilla/5.0 Windows NT...

wpForo < 1.5.2 - Privilege Escalation

The wpForo Forum WordPress plugin was affected by a Privilege Escalation security vulnerability...

CF7 Invisible reCaptcha <= 1.3.1 - XSS

The CF7 Invisible reCAPTCHA WordPress plugin was affected by a XSS security vulnerability...

WP Live Chat Support < 8.0.08 - Cross-Site Scripting (XSS)

The 3CX Live Chat WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...

Tagregator <= 0.6 - Stored XSS

The Tagregator WordPress plugin was affected by a Stored XSS security vulnerability...

Newsletters Lite < 4.6.8.6 - PHP Object Injection

The Newsletters WordPress plugin was affected by a PHP Object Injection security vulnerability...

Ninja Forms < 3.2.15 - Parameter Tampering

The Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress WordPress plugin was affected by a Parameter Tampering security vulnerability...

WP Retina 2x <= 5.2.0 - Cross-Site Scripting (XSS)

The WP Retina 2x WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...

GD Rating System 2.3 - Multiple Vulnerabilities

The GD Rating System WordPress plugin was affected by a Multiple Vulnerabilities security vulnerability...

Qards - Stored Cross-Site Scripting (XSS)

Google Dork: inurl:"plugins/qards" Qards provides you easy option to drag and edit every part and element of your site in the front-end, you will never have to write any code to change the layout or to change any part of the site like the traditional WordPress way. PoC The vulnerable script...

Content Audit <= 1.9.1 - Cross-Site Scripting (XSS) & CSRF

The Content Audit WordPress plugin was affected by a Cross-Site Scripting XSS & CSRF security vulnerability...

Content Timeline <= 4.4.2 - Multiple Blind SQL Injection

Multiple Blind SQL injections in the premium 'Content Timeline' Plugin. One unauthenticated and two authenticated injections. Contacted the author twice without any response. History: 09-16-2017 Contacted the author 09-16-2017 Requested CVE-ID 09-18-2017 CVE-ID Received 09-18-2017 Contacted the...

Responsive Image Gallery, Gallery Album <= 1.2.0 - Authenticated SQL Injection

The Responsive Image Gallery, Gallery Album WordPress plugin was affected by an Authenticated SQL Injection security vulnerability...

Post Pay Counter < 2.731 - PHP Obj Injection & Access Control Issues

The Post Pay Counter WordPress plugin was affected by a PHP Obj Injection & Access Control Issues security vulnerability...

MailChimp for WordPress <= 4.1.6 - Authenticated Cross-Site Scripting (XSS)

Usage of the output of addqueryarg without escaping in various places in the WordPress Backend leads to reflected XSS vulnerability. PoC URL/wp-admin/admin.php?page=mailchimp-for-wp-integrations&"...

BackWPup <= 3.4.1 - Backup File Download

The BackWPup – WordPress Backup Plugin WordPress plugin was affected by a Backup File Download security vulnerability...

WP Live Chat Support < 7.1.05 - Cross-Site Scripting (XSS)

WP Live Chat Support is vulnerable by sending XSS payloads through chat. PoC...

WordPress Plugin IBPS Online Exam <= 1.0 - Authenticated SQL Injection / Cross-Site Scripting

Exploit Author: 8bitsec Contact Author: https://twitter.com/8bitsec Stored XSS on exam input textfields and Blind SQL Injection on 'examappUserResult' page 'id' parameter. PoC Authenticated Stored XSS: Logged as a student: Write the payload in the input textfields while attempting an exam. The...

Shortcodes Ultimate <= 4.9.9 - Authenticated Directory Traversal

The WordPress Shortcodes Plugin — Shortcodes Ultimate WordPress plugin was affected by an Authenticated Directory Traversal security vulnerability...

WP Jobs <= 1.4 - Authenticated SQL Injection

The WP Jobs WordPress plugin was affected by an Authenticated SQL Injection security vulnerability...

WordPress 3.3-4.7.4 - Large File Upload Error XSS

...

Dtracker <= 1.5 - Unauthorised Contract Creation

Plugin is still affected and has been closed...

Wp2android 1.1.4 - Unauthenticated File Upload

Plugin is still affected and has been closed...

WordPress 4.2-4.7.2 - Press This CSRF DoS

...

rockhoist-badges 1.2.2 - Authenticated Stored Cross-Site Scripting (XSS)

The rockhoist-badges WordPress plugin was affected by an Authenticated Stored Cross-Site Scripting XSS security vulnerability...

WordPress 4.3.0-4.7.1 - Cross-Site Scripting (XSS) in posts list table

...

Google Document Embedder < 2.6.1 - XSS

The Google Doc Embedder WordPress plugin was affected by a XSS security vulnerability...

WP Live Chat Support < 6.2.02 - Stored Cross-Site Scripting

The 3CX Live Chat WordPress plugin was affected by a Stored Cross-Site Scripting security vulnerability...

Activity Log <= 2.3.1 - Stored Cross-Site Scripting (XSS)

The Activity Log WordPress plugin was affected by a Stored Cross-Site Scripting XSS security vulnerability...

WordPress 2.6.0-4.5.2 - Unauthorized Category Removal from Post

...

WordPress 4.5.2 - Redirect Bypass

...

Fluid Responsive Slideshow < 2.2.7 - CSRF & XSS

The Fluid Responsive Slideshow WordPress plugin was affected by a CSRF & XSS security vulnerability...

safe-editor <= 1.1 - Unauthenticated CSS/JS-injection

When saving JS/CSS in this plugin then both private and public ajax-hooks are being used. Because of this anyone can post JS/CSS that are saved to the db and printed to the head and footer portion of the page. PoC In the file "index.php" in root folder on line 188 and 189 you can see that both...

Ghost Plugin <= 0.5.5 - Unrestricted Export Download

The Ghost WordPress plugin was affected by an Unrestricted Export Download security vulnerability...

Gnucommerce < 0.5.7-beta - XSS

The GNUCommerce WordPress plugin was affected by a XSS security vulnerability...

WPSOLR <= 8.6 - Unauthenticated Reflected Cross-Site Scripting (XSS)

The WPSOLR - Elasticsearch and Solr search WordPress plugin was affected by an Unauthenticated Reflected Cross-Site Scripting XSS security vulnerability. PoC...