EasyBook < 1.2.2 - Multiple Vulnerabilities

Multiple vulnerabilities was discovered in the 'EasyBook – Directory & Listing WordPress Theme', tested version — v1.2.1: - Unauthenticated Reflected XSS - Authenticated Persistent XSS - IDOR December 27th, 2019 - Envato Contacted January 6th, 2020 - Envato Investigating January ??th, 2020 -...

301 Redirects - Easy Redirect Manager <= 2.40 - Authenticated Arbitrary Redirect Injection and Modification, XSS, and CSRF

The weaknesses allow for any authenticated user, even subscribers, to modify, delete, and inject redirect rules that could potentially result in a loss of site availability, in addition to XSS and CSRF. PoC...

Events Manager < 5.9.6 - Authenticated Stored Cross-Site Scripting (XSS)

The Events Manager WordPress plugin was affected by an Authenticated Stored Cross-Site Scripting XSS security vulnerability...

WordPress <= 5.2.3 - Stored XSS in Style Tags

...

LifterLMS <= 3.34.5 - Unauthenticated Options Import

Unauthenticated Options Import, which could lead to - Website Redirection - Administrator Account Creation - Content Injection - Stored XSS The issues have been reported as fixed in 3.35.0. However v3.35.1 added additional input sanitisation and filtering...

Event Tickets <= 4.10.7.1 - CSV Injection

The Event Tickets WordPress plugin was affected by a CSV Injection security vulnerability...

Woody Ad Snippets < 2.2.6 - Arbitrary Post Deletion

The adminInit function of the admin/includes/class.actions.snippets.php file, registered as an admininit hook did not have any CSRF or capability checks for its close action, allowing unauthenticated users to delete arbitrary posts from the blog PoC...

WP Fastest Cache <= 0.8.9.5 - Directory Traversal

The WP Fastest Cache WordPress plugin was affected by a Directory Traversal security vulnerability...

WPS Hide Login <= 1.5.2.2 - Multiples Issues

Protection Bypasses...

Everest Forms <= 1.4.9 - SQL Injection

The Contact Form, Drag and Drop Form Builder for WordPress – Everest Forms WordPress plugin was affected by a SQL Injection security vulnerability...

Ad Inserter <= 2.4.21 - Authenticated Remote Code Execution

The Ad Inserter – Ad Manager & AdSense Ads WordPress plugin was affected by an Authenticated Remote Code Execution security vulnerability. PoC The nonce aicheck in the final request can be obtained by querying the homepage with the AIWPDEBUGGING cookie set to 2. Then, use an account with a role a...

Gallery Photoblocks < 1.1.43 - Authenticated Reflected XSS

The Gallery PhotoBlocks WordPress plugin was affected by an Authenticated Reflected XSS security vulnerability. PoC When logged in with an account with administrator capabilities: https:///wp-admin/admin.php?page=photoblocks-edit="...

Rencontre – Dating Site <= 3.1.2 - SQLi & XSS

SQL injection & XSS vulnerability in Rencontre – Dating Site Plugin For WordPress...

WP-Members <= 3.2.7 - Cross-Site Request Forgery (CSRF)

No CSRF Protection on Add new Fields. Can also Edit and Delete fields the same way. PoC 1.Download csrfwp-members.html 2.Change URL in html file.FORM ACTION. 3.Submit Request. Video POC : https://drive.google.com/file/d/1TuJK0NjxznjTDmoJF5wbGu2vMAXXikw/view?usp=sharing HTMLFILE :...

Easy Digital Downloads <= 2.9.15 - Stored XSS

Stored XSS Cross Site Scripting via the IP addresses in logs...

Insert or Embed Articulate Content into WordPress <= 4.2998 - Authenticated RCE

Original issue fixed in 4.2998. However, it was also be possible to upload via articulateuploadajaxfile AJAX method which was lacking authorisation checks and has been fixed in 4.2999...

Zoho SalesIQ <= 1.0.8 - XSS & CSRF

The Zoho SalesIQ WordPress plugin was affected by a XSS & CSRF security vulnerability...

SAML SP Single Sign On <= 4.8.72 - Cross-Site Scripting (XSS)

The SAML Single Sign On – SSO Login WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...

Hostel Plugin <= 1.1.3 - Unauthenticated Stored XSS

This vulnerability allows any user can inject Javascript code and the code will be executed on the admin side when he visits the Bookings Page Authentication Required:No Affected Version: 1.1.3 or possibly below Fixed version:1.1.4...

Ninja Forms File Uploads Extension <= 3.0.22 - Unauthenticated Arbitrary File Upload

The ninja-forms-uploads WordPress plugin was affected by an Unauthenticated Arbitrary File Upload security vulnerability...

Form Maker by 10Web < 1.13.5 - Cross-Site Request Forgery (CSRF) to LFI

Form Maker by WD plugin suffers from a CSRF issue that could lead to an LFI attack...

WP Live Chat Support < 8.0.18 - Cross-Site Scripting (XSS)

The 3CX Live Chat WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...

Media File Manager <= 1.4.2 - Authenticated Multiple Vulnerabilities

Following the PoC you can combine the vulnerabilities to obtain PHP code execution and read sensitive file. By default the File Manager can only be used by Administrator users, however, any user role can be configured to use it. PoC Diretory Trasversal: POST /wordpress/wp-admin/admin-ajax.php...

Multi Step Form <= 1.2.5 - Cross-Site Scripting (XSS)

The Multi Step Form WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...

Booking Calendar <= 2.2.2 - Parameters Tampering Allowing Arbitrary Prices Change

Note: It is unclear whether or not this issue has been remediated...

WP Live Chat Support < 8.0.08 - Cross-Site Scripting (XSS)

The 3CX Live Chat WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...

WordPress File Upload <= 4.3.3 - Cross-Site Scripting (XSS)

The WordPress File Upload WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...

Newsletters Lite < 4.6.8.6 - PHP Object Injection

The Newsletters WordPress plugin was affected by a PHP Object Injection security vulnerability...

Ninja Forms < 3.2.15 - Parameter Tampering

The Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress WordPress plugin was affected by a Parameter Tampering security vulnerability...

Soundy Background Music <= 3.9 - Cross-Site Scripting (XSS)

The last time it was checked the plugin was still affected and had been closed...

Social Media Widget by Acurax <= 3.2.5 - Stored XSS & CSRF

The Social Media Widget by Acurax WordPress plugin was affected by a Stored XSS & CSRF security vulnerability...

Smart Google Code Inserter <= 3.4 - Unauthenticated Cross-Site Scripting (XSS)

The Smart Google Code Inserter WordPress plugin was affected by an Unauthenticated Cross-Site Scripting XSS security vulnerability...

PopCash.Net Code Integration Tool <= 1.0 - Cross-Site Scripting (XSS)

The PopCash Code Integration Tool WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...

WordPress 4.4-4.8.1 - Path Traversal in Customizer

Description A path traversal vulnerability was discovered in the customizer. Reported by Weston Ruter of the WordPress Security Team...

Responsive Image Gallery, Gallery Album <= 1.2.0 - Authenticated SQL Injection

The Responsive Image Gallery, Gallery Album WordPress plugin was affected by an Authenticated SQL Injection security vulnerability...

Shortcodes Ultimate <= 4.9.9 - Authenticated Directory Traversal

The WordPress Shortcodes Plugin — Shortcodes Ultimate WordPress plugin was affected by an Authenticated Directory Traversal security vulnerability...

EELV Newsletter < 4.6.1 - CSRF & XSS

The EELV Newsletter WordPress plugin was affected by a CSRF & XSS security vulnerability...

WordPress 3.4.0-4.7.4 - Customizer XSS & CSRF

...

Calendar by WD <= 1.5.51 - Authenticated Blind SQL Injection

The SpiderCalendar WordPress plugin was affected by an Authenticated Blind SQL Injection security vulnerability...

Invite Anyone <= 1.3.14 - Change of Email Invitation Content

The Invite Anyone WordPress plugin was affected by a Change of Email Invitation Content security vulnerability...

Membership Simplified <= 1.58 - Unauthenticated Arbitrary File Download

The plugin is still affected and has been closed...

Dtracker <= 1.5 - Unauthorised Contract Creation

Plugin is still affected and has been closed...

WordPress 4.0-4.7.2 - Authenticated Stored Cross-Site Scripting (XSS) in YouTube URL Embeds

Description This can be exploited by unauthenticated users in versions 4.7 and 4.7.1 by leveraging this vulnerability https://wpvulndb.com/vulnerabilities/8734...

Wp2android 1.1.4 - Unauthenticated File Upload

Plugin is still affected and has been closed...

Nelio AB Testing <= 4.5.8 - Server Side Request Forgery (SSRF)

The Nelio AB Testing WordPress plugin was affected by a Server Side Request Forgery SSRF security vulnerability...

Estatik < 2.3.1 - Arbitrary File Upload

The Estatik Real Estate Plugin WordPress plugin was affected by an Arbitrary File Upload security vulnerability...

Total Security < 3.4.1 - XSS & Settings Change

The Total Security WordPress plugin was affected by a XSS & Settings Change security vulnerability...

Activity Log <= 2.3.1 - Stored Cross-Site Scripting (XSS)

The Activity Log WordPress plugin was affected by a Stored Cross-Site Scripting XSS security vulnerability...

WordPress 3.6-4.5.2 - Authenticated Revision History Information Disclosure

...

Jetpack <= 4.0.3 - Multiple Vulnerabilities

Jetpack 4.0.4 fixes 3 security bugs: Private feedback form entries were made available publicly via the REST API Post By Email settings could be changed The Likes module was vulnerable to XSS...