Lucene search
+L
WpvulndbMost viewed

14623 matches found

WPVulnDB
WPVulnDB
•added 2021/11/23 12:00 a.m.•22 views

Gwolle Guestbook < 4.2.0 - Reflected Cross-Site Scripting

The plugin does not sanitise and escape the gwollegbuseremail parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting issue in an admin page PoC...

6.1CVSS1.6AI score0.008EPSS
SaveExploits2Affected Software1
WPVulnDB
WPVulnDB
•added 2021/11/16 12:00 a.m.•22 views

SportsPress < 2.7.9 - Reflected Cross-Site Scripting

The plugin does not sanitise and escape its matchday parameter before outputting back in the Events backend page, leading to a Reflected Cross-Site Scripting issue PoC https://example.com/wp-admin/edit.php?posttype=speventday=%22%3E%3Csvg%2Fonload%3Dalert%28%2FXSS%2F%29%3B%3E%3C%22...

6.1CVSS5.7AI score0.008EPSS
SaveExploits2Affected Software1
WPVulnDB
WPVulnDB
•added 2021/11/15 12:00 a.m.•22 views

User Meta Shortcodes <= 0.5 - Contributor+ Unauthorized Arbitrary User Metadata Access

The plugin registers a shortcode that allows any user with a role as low as contributor to access other users metadata by specifying the user login as a parameter. This makes the WP instance vulnerable to data extrafiltration, including password hashes PoC As a contributor, put the following...

4.3CVSS5.1AI score0.00783EPSS
SaveExploits2Affected Software1
WPVulnDB
WPVulnDB
•added 2021/11/15 12:00 a.m.•22 views

StopBadBots < 6.67 - Unauthenticated SQL Injection

The plugin does not sanitise and escape the User Agent before using it in a SQL statement to save it, leading to a SQL injection PoC GET / HTTP/1.1 User-Agent: Zongbot' where id = 'xxxxxxxxxxxxxxxxxxxxxxxxxxxx'-- - Accept:...

9.8CVSS9.2AI score0.01575EPSS
SaveExploits2Affected Software1
WPVulnDB
WPVulnDB
•added 2021/11/03 12:00 a.m.•22 views

Cost Calculator <= 1.4 - Contributor+ Local File Inclusion

The plugin allows users with a role as low as Contributor to perform path traversal and local PHP file inclusion on Windows Web Servers via the Cost Calculator post's Layout PoC As a contributor, create a Cost Calculator post, set the Layout to /../../../../../../../../../../file assuming the fil...

2.6AI score0.03047EPSS
SaveExploits2Affected Software1
WPVulnDB
WPVulnDB
•added 2021/11/01 12:00 a.m.•22 views

Email Tracker < 5.2.7 - Arbitrary Email Entry Deletion via CSRF

The plugin does not have CSRF check when deleting email entries, which could allow attackers to make a logged in admin delete arbitrary ones via a CSRF attack...

5.4CVSS5.6AI score0.00393EPSS
SaveExploits0Affected Software1
WPVulnDB
WPVulnDB
•added 2021/11/01 12:00 a.m.•22 views

WP RSS Aggregator < 4.19.2 - Admin+ Stored Cross-Site Scripting

The plugin does not properly sanitise and escape the URL to Blacklist field, allowing malicious HTML to be inserted by high privilege users even when the unfilteredhtml capability is disallowed, which could lead to Cross-Site Scripting issues. PoC Add an URL to Blacklist RSS Aggregator Tools...

4.8CVSS4.9AI score0.00598EPSS
SaveExploits2Affected Software1
WPVulnDB
WPVulnDB
•added 2021/10/29 12:00 a.m.•22 views

Smash Balloon Social Post Feed < 4.0.1 - Subscriber+ Arbitrary Plugin Settings Update to Stored XSS

The plugin did not have any privilege or nonce validation before saving the plugin's setting. As a result, any logged-in user on a vulnerable site could update the settings and store rogue JavaScript on each of its posts and pages...

5.4CVSS5.5AI score0.00654EPSS
SaveExploits1References1Affected Software1
WPVulnDB
WPVulnDB
•added 2021/10/25 12:00 a.m.•22 views

Media-Tags <= 3.2.0.2 - Admin+ Stored Cross-Site Scripting

The plugin does not sanitise and escape any of its Labels settings, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtnl capability is disallowed. PoC https://drive.google.com/file/d/1ZXIS-q2fzZhRhTyHpHEzxcZ2Shl4Up2/view?usp=sharing Put the...

4.8CVSS0.9AI score0.00598EPSS
SaveExploits2References2Affected Software1
WPVulnDB
WPVulnDB
•added 2021/10/24 12:00 a.m.•22 views

Logo Showcase with Slick Slider < 1.2.5 - Subscriber+ Arbitrary Media Title/Description/Alt Text/URL Update

The plugin does not have CSRF and authorisation checks in the lswsssaveattachmentdata AJAX action, allowing any authenticated users, such as Subscriber, to change title, description, alt text, and URL of arbitrary uploaded media. PoC jQuery.postajaxurl, action: "lswsssaveattachmentdata",...

1.7AI score0.00344EPSS
SaveExploits2Affected Software1
WPVulnDB
WPVulnDB
•added 2021/10/20 12:00 a.m.•22 views

Forminator < 1.15.4 - Admin+ Stored Cross-Site Scripting

The plugin does not sanitize and escape the email field label, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml is disallowed PoC As an admin, create or edit a Forminator form, add an email field and put the following payload in the label...

4.8CVSS1.3AI score0.00598EPSS
SaveExploits2Affected Software1
WPVulnDB
WPVulnDB
•added 2021/10/18 12:00 a.m.•22 views

Leaky Paywall <= 4.16.5 - Admin+ Stored Cross-Site Scripting

The plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and sanitization via the /class.php file which allowed attackers with administrative user access to inject arbitrary web scripts. This affects multi-site installations where unfilteredhtml is disabled for...

5.5CVSS4.9AI score0.00915EPSS
SaveExploits1References1Affected Software1
WPVulnDB
WPVulnDB
•added 2021/10/18 12:00 a.m.•22 views

Shared Files < 1.6.61 - Admin+ Stored Cross-Site Scripting

The plugin does not sanitise and escape the Download Counter Text settings, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed PoC Put the following payload in the Download Counter Text settings and tick the Show...

4.8CVSS0.6AI score0.00647EPSS
SaveExploits2References1Affected Software1
WPVulnDB
WPVulnDB
•added 2021/10/18 12:00 a.m.•22 views

Paypal Donation < 1.3.2 - Admin+ Stored Cross-Site Scripting

The plugin does not escape the Amount Menu Name field of created Buttons, which could allow a high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed. PoC Create/Edit a Button and put the following payload in the Amount Menu Name field...

4.8CVSS2AI score0.00598EPSS
SaveExploits2Affected Software1
WPVulnDB
WPVulnDB
•added 2021/10/18 12:00 a.m.•22 views

Support Board < 3.3.6 - Arbitrary File Deletion via CSRF

The plugin does not have any CSRF checks in actions handled by the include/ajax.php file, which could allow attackers to make logged in users do unwanted actions. For example, make an admin delete arbitrary files PoC...

4.2AI score0.0055EPSS
SaveExploits2References1Affected Software1
WPVulnDB
WPVulnDB
•added 2021/10/14 12:00 a.m.•22 views

Job Manager <= 0.7.25 - Admin+ Stored Cross-Site Scripting

The plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and sanitization via several parameters found in the /admin-jobs.php file which allowed attackers with administrative user access to inject arbitrary web scripts. This affects multi-site installations whe...

5.5CVSS4.2AI score0.00909EPSS
SaveExploits1References1Affected Software1
WPVulnDB
WPVulnDB
•added 2021/10/14 12:00 a.m.•22 views

WP Fastest Cache < 0.9.5 - CSRF to Stored Cross-Site Scripting

The plugin is lacking a CSRF check in its wpfcsavecdnintegration AJAX action, and does not sanitise and escape some the options available via the action, which could allow attackers to make logged in high privilege users call it and set a Cross-Site Scripting payload...

4.1AI score0.00252EPSS
SaveExploits1References1Affected Software1
WPVulnDB
WPVulnDB
•added 2021/10/14 12:00 a.m.•22 views

HAL < 2.2 - Admin+ Stored Cross-Site Scripting

The plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and sanitization via several parameters found in the /wp-hal.php file which allowed attackers with administrative user access to inject arbitrary web scripts. This affects multi-site installations where...

5.5CVSS4.2AI score0.00953EPSS
SaveExploits1References1Affected Software1
WPVulnDB
WPVulnDB
•added 2021/10/13 12:00 a.m.•22 views

Backdoored Plugins & Themes from AccessPress Themes

Numerous Plugins and Themes from the AccessPress Themes aka Access Keys vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are affected, and those hosted on wordpress.org are not. However, all of them were updated or removed to...

3.8AI score0.18878EPSS
SaveExploits1References1Affected Software93
WPVulnDB
WPVulnDB
•added 2021/10/11 12:00 a.m.•22 views

Quiz Tool Lite <= 2.3.15 - Multiple Admin+ Stored Cross-Site Scripting

The plugin does not sanitize multiple input fields used when creating or managing quizzes and in other setting options, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed. PoC 1. When creating a new Question Pot, you can...

4.8CVSS0.7AI score0.00598EPSS
SaveExploits2Affected Software1
WPVulnDB
WPVulnDB
•added 2021/10/06 12:00 a.m.•22 views

Access Demo Importer < 1.0.7 - Subscriber+ Arbitrary File Upload

Versions up to, and including, 1.0.6, of the Access Demo Importer WordPress plugin are vulnerable to arbitrary file uploads via the pluginofflineinstaller AJAX action due to a missing capability check in the pluginofflineinstallercallback functionfound in the /inc/demo-functions.php file along wi...

8.8CVSS1.7AI score0.01706EPSS
SaveExploits2References1Affected Software1
WPVulnDB
WPVulnDB
•added 2021/10/05 12:00 a.m.•22 views

Perfect Survey < 1.5.2 - Reflected Cross-Site Scripting

The plugin does not sanitise and escape multiple parameters id and filterssessionid of singlestatistics page, type and message of importexport page before outputting them back in pages/attributes in the admin dashboard, leading to Reflected Cross-Site Scripting issues PoC...

0.7AI score0.008EPSS
SaveExploits2Affected Software1
WPVulnDB
WPVulnDB
•added 2021/10/04 12:00 a.m.•22 views

Far Future Expiry Header < 1.5 - Plugin's Settings Update via CSRF

The plugin does not have CSRF check when saving its settings, which could allow attackers to make a logged in admin change them via a CSRF attack. PoC...

4.3CVSS3.7AI score0.00453EPSS
SaveExploits2Affected Software1
WPVulnDB
WPVulnDB
•added 2021/10/01 12:00 a.m.•22 views

Stripe For WooCommerce 3.0.0 - 3.3.9 - Missing Authorization Controls to Financial Account Hijacking

The plugin is missing a capability check on the save function found in the /includes/admin/class-wc-stripe-admin-user-edit.php file that makes it possible for attackers to configure their account to use other site users unique STRIPE identifier and make purchases with their payment accounts...

4.3CVSS4.1AI score0.0067EPSS
SaveExploits0References1Affected Software1
WPVulnDB
WPVulnDB
•added 2021/09/29 12:00 a.m.•22 views

Credova_Financial < 1.4.9 - Sensitive Information Disclosure

The plugin discloses a site’s associated Credova API account username and password in plaintext via an AJAX action whenever a site user goes to checkout on a page that has the Credova Financing option enabled...

7.5CVSS2.2AI score0.00767EPSS
SaveExploits0References1Affected Software1
WPVulnDB
WPVulnDB
•added 2021/09/28 12:00 a.m.•22 views

Connections Business Directory < 10.4.3 - Admin+ Stored Cross-Site Scripting

The plugin does not escape the Address settings when creating an Entry, which could allow high privilege users to perform Cross-Site Scripting when the unfilteredhtml capability is disallowed. PoC Add an Entry /wp-admin/admin.php?page=connectionsadd and put the following payload in the Address Li...

4.8CVSS2.1AI score0.00705EPSS
SaveExploits2Affected Software1
WPVulnDB
WPVulnDB
•added 2021/09/23 12:00 a.m.•22 views

YITH Maintenance Mode < 1.4.0 - Multiple Admin+ Stored Cross-Site Scripting

The plugin does not sanitise multiple of its settings, which could allow high privilege users to perform Cross-Site Scripting attacks...

6.9CVSS3.5AI score0.00715EPSS
SaveExploits0Affected Software1
WPVulnDB
WPVulnDB
•added 2021/09/15 12:00 a.m.•22 views

YITH Maintenance Mode < 1.3.8 - Admin+ Stored Cross-Site Scripting

The plugin does not sanitise the yithmaintenancenewslettersubmitlabel settings, which could allow high privilege users to perform Cross-Site Scripting attacks...

6.9CVSS3.5AI score0.0063EPSS
SaveExploits0Affected Software1
WPVulnDB
WPVulnDB
•added 2021/09/15 12:00 a.m.•22 views

PlanSo Forms <= 2.6.3 - Authenticated Stored Cross-Site Scripting

The plugin does not escape the title of its Form before outputting it in attributes, allowing high privilege users such as admin to set XSS payload in it, even when the unfilteredhtml is disallowed, leading to an Authenticated Stored Cross-Site Scripting issue. Timeline July 12th, 2021 - Vendor...

4.8CVSS0.6AI score0.00638EPSS
SaveExploits2Affected Software1
WPVulnDB
WPVulnDB
•added 2021/09/15 12:00 a.m.•22 views

Shared Files < 1.6.57 - Admin+ Stored Cross-Site Scripting

The plugin does not sanitise and escape some of its settings before outputting them in attributes, which could lead to Stored Cross-Site Scripting issues. PoC Put the following payload in the "Folder for new files" and "Maximum size of uploaded file" settings of the plugin: "...

4.8CVSS0.7AI score0.00643EPSS
SaveExploits2Affected Software1
WPVulnDB
WPVulnDB
•added 2021/09/09 12:00 a.m.•22 views

SMS OVH <= 0.1 - Reflected Cross-Site Scripting

The plugin is vulnerable to Reflected Cross-Site Scripting via the position parameter found in the /sms-ovh-sent.php file which allows attackers to inject arbitrary web scripts...

6.1CVSS4.7AI score0.00782EPSS
SaveExploits0References1Affected Software1
WPVulnDB
WPVulnDB
•added 2021/09/09 12:00 a.m.•22 views

GNU-Mailman Integration <= 1.0.6 - Reflected Cross-Site Scripting

The plugin is vulnerable to Reflected Cross-Site Scripting via the gmerror parameter found in the /includes/admin/mailing-lists-page.php file which allows attackers to inject arbitrary web scripts...

6.1CVSS5.2AI score0.00895EPSS
SaveExploits1References1Affected Software1
WPVulnDB
WPVulnDB
•added 2021/09/09 12:00 a.m.•22 views

WordPress InviteBox Plugin <= 1.4.1 - Reflected Cross-Site Scripting

The plugin is vulnerable to Reflected Cross-Site Scripting via the message parameter found in the /admin/admin.php file which allows attackers to inject arbitrary web scripts...

6.1CVSS5AI score0.00819EPSS
SaveExploits0References1Affected Software1
WPVulnDB
WPVulnDB
•added 2021/09/09 12:00 a.m.•22 views

WooCommerce Payment Gateway Per Category <= 2.0.10 - Reflected Cross-Site Scripting

The plugin is vulnerable to Reflected Cross-Site Scripting due to a reflected $SERVER"PHPSELF" value in the /includes/pluginsettings.php file which allows attackers to inject arbitrary web scripts...

6.1CVSS4.5AI score0.00938EPSS
SaveExploits1References1Affected Software1
WPVulnDB
WPVulnDB
•added 2021/09/09 12:00 a.m.•22 views

Simple Matted Thumbnails <= 1.01 - Reflected Cross-Site Scripting

The plugin is vulnerable to Reflected Cross-Site Scripting due to a reflected $SERVER"PHPSELF" value in the /simple-matted-thumbnail.php file which allows attackers to inject arbitrary web scripts...

6.1CVSS4AI score0.00895EPSS
SaveExploits1References1Affected Software1
WPVulnDB
WPVulnDB
•added 2021/09/09 12:00 a.m.•22 views

Post Title Counter <= 1.1 - Reflected Cross-Site Scripting

The plugin is vulnerable to Reflected Cross-Site Scripting via the notice parameter found in the /post-title-counter.php file which allows attackers to inject arbitrary web scripts...

6.1CVSS4.7AI score0.00895EPSS
SaveExploits1References1Affected Software1
WPVulnDB
WPVulnDB
•added 2021/09/09 12:00 a.m.•22 views

DJ EmailPublish <= 1.7.2 - Reflected Cross-Site Scripting

The plugin is vulnerable to Reflected Cross-Site Scripting due to a reflected $SERVER"PHPSELF" value in the /dj-email-publish.php file which allows attackers to inject arbitrary web scripts...

6.1CVSS3.9AI score0.00895EPSS
SaveExploits1References1Affected Software1
WPVulnDB
WPVulnDB
•added 2021/09/09 12:00 a.m.•22 views

Advance Search < 1.1.3 - Reflected Cross-Site Scripting

The plugin is vulnerable to Reflected Cross-Site Scripting via the wpasid parameter found in the /inc/admin/views/html-advance-search-admin-options.php file which allows attackers to inject arbitrary web scripts...

6.1CVSS4.6AI score0.00895EPSS
SaveExploits1References1Affected Software1
WPVulnDB
WPVulnDB
•added 2021/09/09 12:00 a.m.•22 views

On Page SEO + Whatsapp Chat Button < 1.0.2 - Reflected Cross-Site Scripting

The plugin is vulnerable to Reflected Cross-Site Scripting due to a reflected $SERVER"PHPSELF" value in the /settings.php file which allows attackers to inject arbitrary web scripts...

6.1CVSS3.9AI score0.00895EPSS
SaveExploits1References1Affected Software1
WPVulnDB
WPVulnDB
•added 2021/09/08 12:00 a.m.•22 views

WP Academic People List <= 0.4.1 - Reflected Cross-Site Scripting

The plugin is vulnerable to Reflected Cross-Site Scripting via the categoryname parameter in the /admin-panel.php file which allows attackers to inject arbitrary web scripts...

6.1CVSS4.8AI score0.00938EPSS
SaveExploits1References1Affected Software1
WPVulnDB
WPVulnDB
•added 2021/09/08 12:00 a.m.•22 views

Konnichiwa! Membership <= 0.8.3 - Reflected Cross-Site Scripting

The plugin is vulnerable to Reflected Cross-Site Scripting via the planid parameter in the /views/subscriptions.html.php file which allows attackers to inject arbitrary web scripts...

6.1CVSS4.7AI score0.00895EPSS
SaveExploits1References1Affected Software1
WPVulnDB
WPVulnDB
•added 2021/09/08 12:00 a.m.•22 views

Twitter Friends Widget <= 3.1 - Reflected Cross-Site Scripting

The plugin is vulnerable to Reflected Cross-Site Scripting via the pmcTFuser and pmcTFpassword parameter found in the /twitter-friends-widget.php file which allows attackers to inject arbitrary web scripts...

4.3CVSS4.7AI score0.00895EPSS
SaveExploits1References1Affected Software1
WPVulnDB
WPVulnDB
•added 2021/09/07 12:00 a.m.•22 views

WP Sitemap Page < 1.7.0 - Admin+ Stored Cross Site Scripting

The plugin does not properly sanitise and escape some of its settings, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed. PoC Put the following payloads in the mentioned settings of the plugin: - How to display the...

4.8CVSS0.7AI score0.00622EPSS
SaveExploits2References1Affected Software1
WPVulnDB
WPVulnDB
•added 2021/08/30 12:00 a.m.•22 views

CoolClock < 4.3.5 - Contributor+ Stored Cross-Site Scripting

The plugin does not escape some shortcode attributes, allowing users with a role as low as Contributor toperform Stored Cross-Site Scripting attacks PoC As a user with a role as low as contributor, put the following shortcode in a post/page and view/preview it to trigger the XSS which is specific...

5.4CVSS2.7AI score0.00624EPSS
SaveExploits2Affected Software1
WPVulnDB
WPVulnDB
•added 2021/08/26 12:00 a.m.•22 views

Woffice < 4.0.2 - Unauthenticated Disclosure of Notification Titles

The theme lacks authentication checks before returning the titles of notifications between the site's users. PoC Any request to the wofficeNotificationGet ajax endpoint will return titles of notifications sent between users. Example:...

1.6AI score
SaveExploits0Affected Software1
WPVulnDB
WPVulnDB
•added 2021/08/23 12:00 a.m.•22 views

Post Views Counter < 1.3.5 - Authenticated Stored XSS

The plugin does not sanitise or escape its Post Views Label settings, which could allow high privilege users to perform Cross-Site Scripting attacks in the frontend even when the unfilteredhtml capability is disallowed PoC Put the following payload in the Post Views Label settings of the plugin...

4.8CVSS1.4AI score0.00617EPSS
SaveExploits2Affected Software1
WPVulnDB
WPVulnDB
•added 2021/08/23 12:00 a.m.•22 views

OMGF < 4.5.4 - Subscriber+ Arbitrary File/Folder Deletion

The plugin does not enforce path validation, authorisation and CSRF checks in the omgfajaxemptydir AJAX action, which allows any authenticated users to delete arbitrary files or folders on the server. PoC As an authenticated user, with a role as low as subscriber, viewing the admin the dashboard...

8.1CVSS3.2AI score0.00912EPSS
SaveExploits2Affected Software1
WPVulnDB
WPVulnDB
•added 2021/08/23 12:00 a.m.•22 views

Timetable and Event Schedule by MotoPress < 2.3.19 - Author+ Stored Cross-Site Scripting

The plugin does not sanitise some of its parameters, which could allow low privilege users such as author to perform XSS attacks against frontend and backend users when viewing the related event/s PoC Create an event with the following payload in the description of a timeslot: The XSS will be...

5.4CVSS4.7AI score0.00888EPSS
SaveExploits2References2Affected Software1
WPVulnDB
WPVulnDB
•added 2021/08/23 12:00 a.m.•22 views

Timetable and Event Schedule by MotoPress < 2.4.2 - Unauthorised Event TimeSlot Deletion

The plugin does not have proper access control when deleting a timeslot, allowing any user with the editposts capability contributor+ to delete arbitrary timeslot from any events. Furthermore, no CSRF check is in place as well, allowing such attack to be performed via CSRF against a logged in wit...

4.3CVSS1.6AI score0.0162EPSS
SaveExploits2Affected Software1
WPVulnDB
WPVulnDB
•added 2021/08/18 12:00 a.m.•22 views

Visual Link Preview < 2.2.3 - Unauthorised AJAX Calls

The plugin does not enforce authorisation on several AJAX actions and has the CSRF nonce displayed for all authenticated users, allowing any authenticated user such as subscriber to call them and 1 Get and search through title and content of Draft post, 2 Get title of a password-protected post as...

5.5CVSS1.2AI score0.00635EPSS
SaveExploits2Affected Software1
Total number of security vulnerabilities5000