WordPress 4.7.0-4.7.2 - Authenticated Unintended File Deletion in Plugin Delete

...

Kama Click Counter < 3.5.0 - XSS

The Kama Click Counter WordPress plugin was affected by a XSS security vulnerability...

GD Rating System < 2.1 - XSS

The GD Rating System WordPress plugin was affected by a XSS security vulnerability...

WP Mail < 1.2 - XSS

The WP Mail WordPress plugin was affected by a XSS security vulnerability...

WooCommerce <= 2.6.8 - Authenticated Tax-Rate CSV XSS

The WooCommerce WordPress plugin was affected by an Authenticated Tax-Rate CSV XSS security vulnerability...

Google Document Embedder < 2.6.1 - XSS

The Google Doc Embedder WordPress plugin was affected by a XSS security vulnerability...

CampTix Event Ticketing <= 1.4.2 - CSV Injection and XSS

The CampTix Event Ticketing WordPress plugin was affected by a CSV Injection and XSS security vulnerability...

Dwnldr 1.0 - Unauthenticated Stored Cross-Site Scripting (XSS)

User agent strings are logged when requesting downloads that are processed by dwnldr and displayed back to the admin with no encoding, allowing for scripts to be stored and executed. PoC curl -A "User-Agent: " -O http:///?attachmentid=...

WP Live Chat Support < 6.2.02 - Stored Cross-Site Scripting

The 3CX Live Chat WordPress plugin was affected by a Stored Cross-Site Scripting security vulnerability...

Search Everything < 8.1.6 - SQL Injection

The Search Everything WordPress plugin was affected by a SQL Injection security vulnerability...

brafton WordPress Plugin <=3.4.7 - Reflected XSS

Title -brafton WordPress Plugin XSS Exploit Title : Vulnerabilitie XSS in brafton WordPress Plugin Date: Fri May 20 2016 Reported Date : Fri May 20 2016 Vendor Homepage: http://www.brafton.com/support/wordpress/ Version: v3.3.10 – January2016 Software Link:...

Tera Charts 1.0 - Unauthenticated Cross-Site Scripting (XSS)

The tera-charts WordPress plugin was affected by an Unauthenticated Cross-Site Scripting XSS security vulnerability. PoC http://www.example.com/tera-charts/charts/treemap.php?fn=";alert1;...

Truemag Theme - Unauthenticated Reflected Cross-Site Scripting (XSS)

The truemag WordPress theme was affected by an Unauthenticated Reflected Cross-Site Scripting XSS security vulnerability. PoC http://WP/?s="%20...

Sermon Browser < 0.45.16 - Multiple XSS

The Sermon Browser WordPress plugin was affected by a Multiple XSS security vulnerability...

Gnucommerce < 0.5.7-beta - XSS

The GNUCommerce WordPress plugin was affected by a XSS security vulnerability...

Tevolution <= 2.2.7 - Unrestricted File Upload

Files 'single-upload.php' and 'singleupload.php' affected...

Tweet Wheel <= 1.0.3.2 - Reflected Cross-Site Scripting (XSS)

The Tweet Wheel WordPress plugin was affected by a Reflected Cross-Site Scripting XSS security vulnerability...

Pondol Form to Mail <= 1.1 - Unauthenticated Reflected Cross-Site Scripting (XSS)

The pondol-formmail WordPress plugin was affected by an Unauthenticated Reflected Cross-Site Scripting XSS security vulnerability...

MiniMax <= 2.0.2 - Unauthenticated Reflected Cross-Site Scripting (XSS)

The page-layout-builder WordPress plugin was affected by an Unauthenticated Reflected Cross-Site Scripting XSS security vulnerability. PoC http://www.example.com/wp-content/plugins/page-layout-builder/includes/layout-settings.php?layoutsettingsid=""...

Tidio Gallery <= 1.1 - Unauthenticated Reflected Cross-Site Scripting (XSS)

The tidio-gallery WordPress plugin was affected by a Unauthenticated Reflected Cross-Site Scripting XSS security vulnerability. PoC http://www.example.com/wp-content/plugins/tidio-gallery/popup-insert-help.php?galleryId=""...

HDW WordPress Video Gallery <= 1.2 - Unauthenticated Reflected Cross-Site Scripting (XSS)

The hdw-tube WordPress plugin was affected by an Unauthenticated Reflected Cross-Site Scripting XSS security vulnerability. PoC http://www.example.com/wp-content/plugins/hdw-tube/playlist.php?playlist=""...

Indexisto WordPress Site Search <= 1.0.5 - Unauthenticated Reflected Cross-Site Scripting (XSS)

The indexisto WordPress plugin was affected by an Unauthenticated Reflected Cross-Site Scripting XSS security vulnerability. PoC http://www.example.com/wp-content/plugins/indexisto/assets/js/indexisto-inject.php?indexistoindex=""...

WP Customer Reviews < 3.0.9 - CSRF & XSS

The WP Customer Reviews WordPress plugin was affected by a CSRF & XSS security vulnerability...

Ocim MP3 Plugin - Unauthenticated Reflected Cross-Site Scripting (XSS)

Credits to : Soufiane Boussali PoC http://www.example.com/wp-content/plugins/ocim-mp3/source/pages.php?id=XSSPayload...

NextGEN Gallery < 2.1.15 - Unrestricted File Upload

The WordPress Gallery Plugin – NextGEN Gallery WordPress plugin was affected by an Unrestricted File Upload security vulnerability...

WP-Stats-Dashboard <= 2.9.4 - Authenticated Blind SQL Injection

The wp-stats-dashboard WordPress plugin was affected by an Authenticated Blind SQL Injection security vulnerability...

Users Ultra Membership Plugin <= 1.5.58 - Unrestricted File Upload

The Users Ultra Membership, Users Community and Member Profiles With PayPal Integration Plugin WordPress plugin was affected by an Unrestricted File Upload security vulnerability...

WordPress File Upload <= 3.4.0 - Unauthenticated Malicious File Upload

The WordPress plugin wp-file-upload does not adequately check the filetype before allowing it to be uploaded. It also uploaded files with execute permissions, allowing malicious payloads to be uploaded. PoC 1. Install wp-file-upload on a WordPress site and activate it. 2. Create an upload form on...

Limit Attempts < 1.1.1 - SQL Injection

The Limit Attempts by BestWebSoft WordPress plugin was affected by a SQL Injection security vulnerability...

ResAds <= 1.0.1 - Reflected Cross-Site Scripting (XSS)

The ResAds WordPress plugin was affected by a Reflected Cross-Site Scripting XSS security vulnerability...

WP Symposium <= 15.8.1 - Unauthenticated Reflected Cross-Site Scripting (XSS)

The wp-symposium WordPress plugin was affected by an Unauthenticated Reflected Cross-Site Scripting XSS security vulnerability. PoC http://www.example.com/wp-content/plugins/wp-symposium/getalbumitem.php?size=...

Manual Image Crop <= 1.10 - Authenticated Reflected Cross-Site Scripting (XSS)

The Manual Image Crop WordPress plugin was affected by an Authenticated Reflected Cross-Site Scripting XSS security vulnerability...

WP Social Bookmarking Light <= 1.7.9 - Authenticated Stored Cross-Site Scripting (XSS)

The WP Social Bookmarking Light WordPress plugin was affected by an Authenticated Stored Cross-Site Scripting XSS security vulnerability...

Tag Miner <= 1.1.2 - Cross-Site Request Forgery (CSRF) & XSS

The Tag Miner Automatic Tag Extraction WordPress plugin was affected by a Cross-Site Request Forgery CSRF & XSS security vulnerability...

WP Latest Posts < 3.7.5 - XSS

The WP Latest Posts WordPress plugin was affected by a XSS security vulnerability...

Unite Gallery Lite <= 1.4.6 - CSRF & Authenticated SQL Injection

The Unite Gallery Lite WordPress plugin was affected by a CSRF & Authenticated SQL Injection security vulnerability...

Paid Memberships Pro 1.8.4.2 - Cross-Site Scripting (XSS)

The Paid Memberships Pro WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...

CP Contact Form with Paypal <= 1.1.5 - Multiple Vulnerabilities

The CP Contact Form with PayPal WordPress plugin was affected by a Multiple Vulnerabilities security vulnerability...

Yet Another Stars Rating <= 0.9.0 - Authenticated Blind SQL Injection

The Yasr – Yet Another Stars Rating WordPress plugin was affected by an Authenticated Blind SQL Injection security vulnerability...

WordPress File Upload <= 2.7.6 - Multiple Vulnerabilities

The plugin allows upload of file extensions that may lead to code execution, such as php4 or php5. Additionally, it allows an admin user to rename files and thus change the extension of uploaded files, leading to code execution. There is no CSRF protection for this. The plugin also allows for the...

Erident Custom Login & Dashboard 3.4-3.4.1 - Stored Cross-Site Scripting (XSS)

The Erident Custom Login and Dashboard plugin exposes a call to the updateoption method, when a specific POST field is posted to the plugins setting screen. No CSRF token is used, and as such if an Administrative user can be tricked into visiting a site with a malicious form, it is possible to...

Events Manager < 5.5.7.1 - DOM Cross-Site Scripting (XSS)

The Events Manager WordPress plugin was affected by a DOM Cross-Site Scripting XSS security vulnerability...

WP Membership <= 1.2.3 - Multiple Vulnerabilities

The wp-membership WordPress plugin was affected by a Multiple Vulnerabilities security vulnerability...

Encrypted Contact Form <= 1.0.4 - CSRF & XSS

The Encrypted Contact Form WordPress plugin was affected by a CSRF & XSS security vulnerability...

All In One WP Security And Firewall < 3.9.5 - XSS

The All In One WP Security & Firewall WordPress plugin was affected by a XSS security vulnerability...

Related Posts < 1.8.2 - XSS

The related-posts WordPress plugin was affected by a XSS security vulnerability...

Content Slide <= 1.4.2 - CSRF & Stored XSS

The content-slide WordPress plugin was affected by a CSRF & Stored XSS security vulnerability...

WP Symposium <= 15.1 - SQL Injection

The wp-symposium WordPress plugin was affected by a SQL Injection security vulnerability...

Community Events <= 1.3.5 - SQL Injection

The Community Events WordPress plugin was affected by a SQL Injection security vulnerability...

EasyCart 1.1.30 - 3.0.20 - Privilege Escalation

Due to a lack of validation in the ecajaxupdateoption and ecajaxclearalltaxrates functions located in /inc/admin/adminajaxfunctions.php, it is possible to update any WordPress option as an authenticated non-admin user, which can in turn lead to privilege escalation and remote code execution...