WordPress 3.7-4.4 - Authenticated Cross-Site Scripting (XSS)

PoC http://www.example.com/wp-admin/customize.php?theme= source: https://twitter.com/brutelogic/status/685105483397619713...

neuvoo-jobroll <= 2.0 - Unauthenticated Reflected Cross-Site Scripting (XSS)

The neuvoo-jobroll WordPress plugin was affected by an Unauthenticated Reflected Cross-Site Scripting XSS security vulnerability...

Anti-Spam by CleanTalk < 5.22 - Unauthenticated Reflected Cross-Site Scripting (XSS)

The Spam protection, AntiSpam, FireWall by CleanTalk WordPress plugin was affected by an Unauthenticated Reflected Cross-Site Scripting XSS security vulnerability...

WP Social Bookmarking Light <= 1.7.9 - Authenticated Stored Cross-Site Scripting (XSS)

The WP Social Bookmarking Light WordPress plugin was affected by an Authenticated Stored Cross-Site Scripting XSS security vulnerability...

Tag Miner <= 1.1.2 - Cross-Site Request Forgery (CSRF) & XSS

The Tag Miner Automatic Tag Extraction WordPress plugin was affected by a Cross-Site Request Forgery CSRF & XSS security vulnerability...

NEX-Forms <= 4.0 - Unauthenticated Blind SQL Injection

The NEX-Forms – Ultimate Form Builder – Contact forms and much more WordPress plugin was affected by an Unauthenticated Blind SQL Injection security vulnerability...

Yet Another Stars Rating <= 0.9.0 - Authenticated Blind SQL Injection

The Yasr – Yet Another Stars Rating WordPress plugin was affected by an Authenticated Blind SQL Injection security vulnerability...

Easy2Map Photos <= 1.0.9 - SQL Injection

The code in Functions.php is vulnerable to SQL Injection because they are not parameterising or sanitising user input. PoC sqlmap -u 'http://www.example.com/wp-admin/admin-ajax.php' --data="mapID=11='+or+1%3D%3D1%3B=e2mimgsavemapname" --cookie=COOKIEHERE --level=5 --risk=3...

Events Manager < 5.5.7.1 - DOM Cross-Site Scripting (XSS)

The Events Manager WordPress plugin was affected by a DOM Cross-Site Scripting XSS security vulnerability...

NewStatPress 0.9.8 - XSS & SQL Injection

The NewStatPress WordPress plugin was affected by a XSS & SQL Injection security vulnerability...

GigPress <= 2.3.8 - Authenticated SQL Injection

The GigPress WordPress plugin was affected by an Authenticated SQL Injection security vulnerability...

Showbiz Pro <= 1.7.1 - Shell Upload

The showbizpro WordPress plugin was affected by a Shell Upload security vulnerability...

WordPress <= 4.2 - Unauthenticated Stored Cross-Site Scripting (XSS)

...

Quota < 1.2.5 - Unspecified XSS

The quota WordPress theme was affected by an Unspecified XSS security vulnerability...

WP Symposium <= 15.1 - SQL Injection

The wp-symposium WordPress plugin was affected by a SQL Injection security vulnerability...

Import any XML or CSV File to WordPress <= 3.2.4 - Multiple Vulnerabilities

Multiple issues were fixed, such as Authenticated SQL Injection, Authenticated Reflected XSS and Unauthorised access to some methods...

Photo Gallery <= 1.2.5 - Unrestricted File Upload

The Photo Gallery by 10Web – Mobile-Friendly Image Gallery WordPress plugin was affected by an Unrestricted File Upload security vulnerability...

Pods <= 2.4.3 - Authenticated XSS & CSRF

The Pods – Custom Content Types and Fields WordPress plugin was affected by an Authenticated XSS & CSRF security vulnerability...

WhyDoWork AdSense 1.2 - XSS & CSRF

The whydowork-adsense WordPress plugin was affected by a XSS & CSRF security vulnerability...

Pictobrowser Gallery <= 0.3.1 - Multiple CSRF

Plugin is still affected and has been closed...

Simple Sticky Footer < 1.3.3 - Multiple CSRF

The Simple Sticky Footer WordPress plugin was affected by a Multiple CSRF security vulnerability...

Ninja Forms <= 2.8.9 - Unspecified Issue Affecting Admin Users

This version includes a fix for a potential security vulnerability for admin users...

Google Document Embedder <= 2.5.14 - SQL Injection

The Google Doc Embedder WordPress plugin was affected by a SQL Injection security vulnerability...

Another WordPress Classifieds Plugin < 3.0 - SQLi & XSS

The WordPress Classifieds Plugin – Ad Directory & Listings by AWP Classifieds WordPress plugin was affected by a SQLi & XSS security vulnerability...

Enfold < 3.0.1 - Unspecified Issue

The enfold WordPress theme was affected by an Unspecified Issue security vulnerability...

Contus Video Gallery 2.3.1.0.1 - SQL Injection

The contus-video-gallery WordPress plugin was affected by a SQL Injection security vulnerability...

LightSpeed - Valums Uploader Shell Upload Exploit

The lightspeed WordPress theme was affected by a Valums Uploader Shell Upload Exploit security vulnerability...

mTouch Quiz 3.0.6 - question.php quiz Parameter Reflected XSS

The mTouch Quiz WordPress plugin was affected by a question.php quiz Parameter Reflected XSS security vulnerability...

Xorbin Digital Flash Clock 1.0 - Flash-based XSS

The xorbin-digital-flash-clock WordPress plugin was affected by a Flash-based XSS security vulnerability...

Dropdown Menu Widget 1.9.1 - Script Insertion CSRF

The Dropdown Menu Widget WordPress plugin was affected by a Script Insertion CSRF security vulnerability...

WP-PostViews 1.62 - Setting Manipulation CSRF

The WP-PostViews WordPress plugin was affected by a Setting Manipulation CSRF security vulnerability...

WP Forum Server <= 1.7.3 - fs-admin/wpf-add-forum.php groupid Parameter XSS

The WP Forum Server WordPress plugin was affected by a fs-admin/wpf-add-forum.php groupid Parameter XSS security vulnerability...

Age Verification <= 0.4 - Open Redirect

The age-verification WordPress plugin was affected by an Open Redirect security vulnerability...

Wordfence 3.8.6 - lib/IPTraf.php User-Agent Header Stored XSS

The Wordfence Security – Firewall & Malware Scan WordPress plugin was affected by a lib/IPTraf.php User-Agent Header Stored XSS security vulnerability...

Wordpress 2.0.5 Trackback UTF-7 Remote SQL Injection Exploit

...

NextCellent Gallery < 1.9.18 - Multiple Stored XSS

The NextCellent Gallery – NextGEN Legacy WordPress plugin was affected by a Multiple Stored XSS security vulnerability...

WordPress 3.6 - SWF/EXE File Upload Cross-Site Scripting (XSS)

...

WordPress 3.6 - Post Authorship Spoofing

...

Member Private Conversation < 1.4 - Unrestricted File Upload

The Nmedia WordPress Member Conversation WordPress plugin was affected by an Unrestricted File Upload security vulnerability...

Another WordPress Classifieds <= 1.8.9.4 - Unspecified Image Upload

The WordPress Classifieds Plugin – Ad Directory & Listings by AWP Classifieds WordPress plugin was affected by an Unspecified Image Upload security vulnerability...

Slideshow Gallery 2 <= 1.1.4 - Cross-Site Scripting (XSS)

The last time it was checked the plugin was still affected and had been closed...

WP Postratings < 1.62 - Authenticated SQL Injection

The WP-PostRatings WordPress plugin was affected by a SQL Injection security vulnerability allowing authenticated users author+ to execute SQL commands via the id attribute of the ratings shortcode when creating a post...

3D viewer – Embed 3D Models < 1.8.6 - Missing Authorization

Description The 3D viewer – Embed 3D Models plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in versions up to, and including, 1.8.5. This makes it possible for authenticated attackers, with contributor-level access and above, to perform an...

12 Step Meeting List < 3.19.10 - Missing Authorization

Description The 12 Step Meeting List plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in versions up to, and including, 3.19.9. This makes it possible for authenticated attackers, with contributor-level access and above, to perform an...

Dating <= 11.2.0 - Missing Authorization

Description The Dating theme for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in versions up to, and including, 11.2.0. This makes it possible for unauthenticated attackers to perform an unauthorized action...

WP < 6.8.3 - Author+ DOM Stored XSS

Description WordPress does not escape some data when writting in into the DOM of a page, which could allow users with a role of Author and perform to perform Stored XSS attacks...

PDF Flipbook, 3D Flipbook, PDF embed, PDF viewer – DearFlip < 2.3.42 - Reflected Cross-Site Scripting

Description The PDF Flipbook, 3D Flipbook, PDF embed, PDF viewer – DearFlip plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'pdfsource' parameter in all versions up to, and including, 2.3.32 due to insufficient input sanitization and output escaping. This makes it...

Master Slider – Responsive Touch Slider <= 3.9.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via ms_layer Shortcode

Description The Master Slider – Responsive Touch Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'mslayer' shortcode in all versions up to, and including, 3.9.10 due to insufficient input sanitization and output escaping on the 'cssid' user supplied...

Tickera < 3.5.2.9 - Missing Authorization to Authenticated (Susbcriber+) Ticket Deletion

Description The Tickera – WordPress Event Ticketing plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the tcdldeletetickets AJAX action in all versions up to, and including, 3.5.2.8. This makes it possible for authenticated attackers, with...

WooCommerce - Social Login < 2.6.3 - Unauthenticated PHP Object Injection

Description The WooCommerce - Social Login plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.6.2 via deserialization of untrusted input from the 'wooslgverify' vulnerable parameter. This makes it possible for unauthenticated attackers to inject a P...