14608 matches found
WP GDPR Compliance <= 1.4.2 - Unauthenticated Call Any Action or Update Any Option
The plugin WP GDPR Compliance allows unauthenticated users to execute any action and to update any database value. If the request data form is available for unauthenticated users, even unauthenticated users are able to do this. See references for discussion of the issue. The problem is in the fil...
Media File Manager <= 1.4.2 - Authenticated Multiple Vulnerabilities
Following the PoC you can combine the vulnerabilities to obtain PHP code execution and read sensitive file. By default the File Manager can only be used by Administrator users, however, any user role can be configured to use it. PoC Diretory Trasversal: POST /wordpress/wp-admin/admin-ajax.php...
Multi Step Form <= 1.2.5 - Cross-Site Scripting (XSS)
The Multi Step Form WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...
wpForo < 1.5.2 - Privilege Escalation
The wpForo Forum WordPress plugin was affected by a Privilege Escalation security vulnerability...
Open Graph for Facebook, Google+ and Twitter Card Tags <= 2.2.4 - Authenticated Reflected XSS
There is a reflected XSS vulnerability caused by "Open Graph for Facebook, Google+ and Twitter Card Tags" in the wdfbogerror parameter on a GET request when editing a post. This can be exploited by tricking an authenticated Wordpress administrator into clicking a malicious link. This vulnerabilit...
wpForo Forum <= 1.4.11 - Unauthenticated Reflected Cross-Site Scripting (XSS)
Version 1.4.11, and below, of the wpForo Forum WordPress Plugin were found to be vulnerable to Reflected Cross-Site Scripting XSS. The vulnerability was due to the Plugin using the $SERVER'REQUESTURI' PHP variable to create a URL string that was later output within HTML without any output encodin...
WP Live Chat Support < 8.0.08 - Cross-Site Scripting (XSS)
The 3CX Live Chat WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...
NextGEN Gallery <= 2.2.46 - Galley Paths Not Secured
The changelog states: "Secured: Gallery paths and the ability to manage tags Kudos: ElevenPaths Telefonica cibersecurity Unit"...
WP Retina 2x <= 5.2.0 - Cross-Site Scripting (XSS)
The WP Retina 2x WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...
GD Rating System 2.3 - Multiple Vulnerabilities
The GD Rating System WordPress plugin was affected by a Multiple Vulnerabilities security vulnerability...
PopCash.Net Code Integration Tool <= 1.0 - Cross-Site Scripting (XSS)
The PopCash Code Integration Tool WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...
WP Live Chat Support < 7.1.05 - Cross-Site Scripting (XSS)
WP Live Chat Support is vulnerable by sending XSS payloads through chat. PoC...
FormCraft - Premium WordPress Form Builder <= v3.2.31 - Authenticated Stored XSS
WordPress FormCraft Premium WordPress Form Builder versions 3.2.31 and below suffer from a persistent Cross-Site Scripting XSS vulnerability. PoC Authenticated Stored XSS: New Form Heading Heading Text input field is vulnerable. The payload will execute when the form is displayed...
EELV Newsletter < 4.6.1 - CSRF & XSS
The EELV Newsletter WordPress plugin was affected by a CSRF & XSS security vulnerability...
Twitter Cards Meta <= 2.4.5 - CSRF and XSS
The Twitter Cards Meta – Best Twitter Card Plugin for WordPress WordPress plugin was affected by a CSRF and XSS security vulnerability...
WordPress 4.0-4.7.2 - Authenticated Stored Cross-Site Scripting (XSS) in YouTube URL Embeds
Description This can be exploited by unauthenticated users in versions 4.7 and 4.7.1 by leveraging this vulnerability https://wpvulndb.com/vulnerabilities/8734...
WordPress 4.7.0-4.7.2 - Authenticated Unintended File Deletion in Plugin Delete
...
Mobile App Native <= 3.0 - Remote File Upload
The code in file ./zen-mobile-app-native/server/images.php doesn't require authentication or check that the user is allowed to upload content. It also doesn't sanitize the file upload against executable code. PoC $ curl -F "file=@/var/www/shell.php"...
Nelio AB Testing <= 4.5.8 - Server Side Request Forgery (SSRF)
The Nelio AB Testing WordPress plugin was affected by a Server Side Request Forgery SSRF security vulnerability...
Photoxhibit <= 2.1.8 - Reflected XSS Issues
Plugin is still affected and has been closed...
Activity Log <= 2.3.1 - Stored Cross-Site Scripting (XSS)
The Activity Log WordPress plugin was affected by a Stored Cross-Site Scripting XSS security vulnerability...
Pondol Form to Mail <= 1.1 - Unauthenticated Reflected Cross-Site Scripting (XSS)
The pondol-formmail WordPress plugin was affected by an Unauthenticated Reflected Cross-Site Scripting XSS security vulnerability...
WPSOLR <= 8.6 - Unauthenticated Reflected Cross-Site Scripting (XSS)
The WPSOLR - Elasticsearch and Solr search WordPress plugin was affected by an Unauthenticated Reflected Cross-Site Scripting XSS security vulnerability. PoC...
OptinMonster <= 1.1.4.5 - Execution of Arbitrary Shortcodes
Unauthenticated users are able to execute arbitrary WordPress shortcodes via a simple HTTP GET request. While the command is protected by a nonce, the nonce is leaked on every page load...
neuvoo-jobroll <= 2.0 - Unauthenticated Reflected Cross-Site Scripting (XSS)
The neuvoo-jobroll WordPress plugin was affected by an Unauthenticated Reflected Cross-Site Scripting XSS security vulnerability...
Support Ticket System <= 1.2 - Unauthenticated SQL Injection
The Support Ticket System WordPress plugin was affected by an Unauthenticated SQL Injection security vulnerability...
WP Limit Login Attempts <= 2.0.0 - Unauthenticated SQL Injection
The WP Limit Login Attempts WordPress plugin was affected by an Unauthenticated SQL Injection security vulnerability...
NextGen Gallery < 2.1.15 - Path Traversal
The WordPress Gallery Plugin – NextGEN Gallery WordPress plugin was affected by a Path Traversal security vulnerability...
Unite Gallery Lite <= 1.4.6 - CSRF & Authenticated SQL Injection
The Unite Gallery Lite WordPress plugin was affected by a CSRF & Authenticated SQL Injection security vulnerability...
Paid Memberships Pro 1.8.4.2 - Cross-Site Scripting (XSS)
The Paid Memberships Pro WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...
Broken Link Manager <= 0.5.5 - Unauthenticated Stored Cross-Site Scripting (XSS)
The Broken Link Manager WordPress plugin was affected by an Unauthenticated Stored Cross-Site Scripting XSS security vulnerability...
NewStatPress <= 1.0.4 - Reflected Cross-Site Scripting (XSS)
The NewStatPress plugin utilizes on lines 28 and 31 of the file ‘includes/nspsearch.php’ several variables from the $GET scope, without sanitation. While WordPress automatically escapes quotes on this scope, the outputs on these lines are outside of quotes, and as such can be utilized to trigger ...
StageShow <= 5.0.8 - Open Redirect
The StageShow WordPress plugin was affected by an Open Redirect security vulnerability. PoC http://www.example.com/wp-content/plugins/stageshow/stageshowredirect.php?url=http%3A%2F%2F2buntu.com...
RobotCPA Plugin V5 - Unauthenticated Local File Inclusion
The robotcpa WordPress plugin was affected by an Unauthenticated Local File Inclusion security vulnerability. PoC This issue has been seen exploited in the wild with the following payload: http://www.example.com/wp-content/plugins/robotcpa/f.php?l=..%2F..%2F..%2Fwp-config.php...
Easy2Map Photos <= 1.0.9 - SQL Injection
The code in Functions.php is vulnerable to SQL Injection because they are not parameterising or sanitising user input. PoC sqlmap -u 'http://www.example.com/wp-admin/admin-ajax.php' --data="mapID=11='+or+1%3D%3D1%3B=e2mimgsavemapname" --cookie=COOKIEHERE --level=5 --risk=3...
Codestyling Localization <= 1.99.30 - Multiple CSRF
Plugin is still affected and has been closed...
WP Membership <= 1.2.3 - Multiple Vulnerabilities
The wp-membership WordPress plugin was affected by a Multiple Vulnerabilities security vulnerability...
CP Polls < 1.0.5 - XSS
The Polls CP WordPress plugin was affected by a XSS security vulnerability...
Encrypted Contact Form <= 1.0.4 - CSRF & XSS
The Encrypted Contact Form WordPress plugin was affected by a CSRF & XSS security vulnerability...
Quota < 1.2.5 - Unspecified XSS
The quota WordPress theme was affected by an Unspecified XSS security vulnerability...
VideoWhisper Video Conference Integration 4.91.8 - Remote File Upload
Vendor marked as won't fix. See references...
Import any XML or CSV File to WordPress <= 3.2.4 - Multiple Vulnerabilities
Multiple issues were fixed, such as Authenticated SQL Injection, Authenticated Reflected XSS and Unauthorised access to some methods...
Image Metadata Cruncher - Multiple Cross-Site Scripting (XSS)
The image-metadata-cruncher WordPress plugin was affected by a Multiple Cross-Site Scripting XSS security vulnerability...
Feed Them Social < 1.7.0 - XSS & Arbitrary Shortcode Execution
The Feed Them Social – for Twitter feed, Youtube, Pinterest and more WordPress plugin was affected by a XSS & Arbitrary Shortcode Execution security vulnerability...
Banner Effect Header <= 1.2.7 - Cross-Site Scripting (XSS)
The Banner Effect Header WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...
Cforms & CformsII <= 14.7 - Remote Code Execution via Unauthorised File Upload
...
Google Analytics by Yoast <= 5.1.2 Cross-Site Scripting (XSS)
The value of the input field "manualuacodefield" Analytics Settings is saved without any validation. Malicious JavaScript code can be injected. Screenshots: http://imgur.com/4TA6sSe,DFUlAy51 http://imgur.com/4TA6sSe,DFUlAy50...
Google Document Embedder <= 2.5.14 - SQL Injection
The Google Doc Embedder WordPress plugin was affected by a SQL Injection security vulnerability...