14623 matches found
WooCommerce <= 3.4.5 - Authenticated File Deletion to Privilege Escalation
Attackers in control of a user with the shop manager role can delete certain files on the server and then take over any victim account...
File Manager < 3.1 - CSRF to Stored Cross-Site Scripting
The plugin is lacking CSRF as well as sanitisation checks, allowing attackers to perform CSRF attacks against logged in administrators and set an XSS payload in the publicpath setting. PoC...
WooCommerce <= 3.4.4 - Potential Object Injection
According to WooCommerce: "Versions 3.4.4 and earlier are affected by an issue where a function that updates attributes could lead to object injection. This is related to the WordPress 4.8.3 security release. This issue can only be exploited by users who can edit attributes and should not be...
Gift Voucher <= 4.1.1 - Unauthenticated Blind SQL Injection
The wpgvdoajaxfronttemplate AJAX action both authenticated and unauthenticated, defined in the front.php does not sanitised, validate or escape the templateid parameter before using it in a SQL statement, leading to a SQL Injection issue. This has been present since at least 1.0.5 v4.1.0 tried to...
Membermouse < 2.2.9 - Blind SQL Injection
Note: It seems like the affected plugin is the premium version from https://membermouse.com, the free one has been closed as of v1.2.0...
Caldera Forms <= 1.5.9.1 - Multiple Cross-Site Scripting (XSS)
The Caldera Forms – More Than Contact Forms WordPress plugin was affected by a Multiple Cross-Site Scripting XSS security vulnerability...
Duplicator <= 1.2.32 - Cross-Site Scripting (XSS)
The Duplicator – WordPress Migration Plugin WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...
BuddyBoss Media <= 3.2.3 - Stored XSS
The album description does not perform input / output validation. According to the researcher: No reply from vendor. Issue not patched. Vulnerability can be exploited by any user. Form not vulnerable to CSRF. PoC '"...
Football Pool < 2.6.5 - Multiple XSS
The Football Pool WordPress plugin was affected by a Multiple XSS security vulnerability...
AccessPress Anonymous Post Pro < 3.2.0 - Unauthenticated Arbitrary File Upload
Improper sanitization allows the attacker to override the settings for allowed file extensions and upload file size. This allows the attacker to upload anything they want, bypassing the filters. PoC OST /wp-admin/admin-ajax.php?action=apfileuploadactionuploadernonce=nonce=php=64000 HTTP/1.1...
Z-URL Preview <= 1.6.2 - Cross-Site Scripting (XSS)
The Z-URL Preview WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...
Insert Pages < 3.2.4 - Directory Traversal
The Insert Pages WordPress plugin was affected by a Directory Traversal security vulnerability...
Smush Image Compression and Optimization <= 2.7.5 - File Transversal
The Smush – Lazy Load Images, Optimize & Compress Images WordPress plugin was affected by a File Transversal security vulnerability...
Liveforms < 3.4.0 - XSS
The Live Forms – Easy Drag and Drop Form Builder Plugin for WordPress WordPress plugin was affected by a XSS security vulnerability...
Loginizer <= 1.3.5 - Cross-Site Request Forgery (CSRF)
Due to insufficient security checks an attacker can remove blacklisted and whitelisted IP:s from the plugin using CSRF...
Weblibrarian < 3.4.8.6 - XSS
The WebLibrarian WordPress plugin was affected by a XSS security vulnerability...
Popup Maker <= 1.6.4 - Authenticated Cross-Site Scripting (XSS)
The Popup Maker – Popup Forms, Opt-ins & More WordPress plugin was affected by an Authenticated Cross-Site Scripting XSS security vulnerability...
WordPress Plugin IBPS Online Exam <= 1.0 - Authenticated SQL Injection / Cross-Site Scripting
Exploit Author: 8bitsec Contact Author: https://twitter.com/8bitsec Stored XSS on exam input textfields and Blind SQL Injection on 'examappUserResult' page 'id' parameter. PoC Authenticated Stored XSS: Logged as a student: Write the payload in the input textfields while attempting an exam. The...
Postman SMTP Mailer/Email Log - Cross-Site Scripting (XSS)
The postman-smtp WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...
Analytics Tracker < 1.1.1 - XSS
The Analytics Tracker WordPress plugin was affected by a XSS security vulnerability...
Easy Team Manager 1.3.2 - Authenticated Blind SQL Injection
The easy-team-manager WordPress plugin was affected by an Authenticated Blind SQL Injection security vulnerability...
eventr 1.02.2 - Blind SQL Injection
The eventr WordPress plugin was affected by a Blind SQL Injection security vulnerability...
flickr-picture-backup <= 0.7 - Unauthenticated File Upload
The flickr-picture-backup WordPress plugin was affected by an Unauthenticated File Upload security vulnerability...
Webapp builder 2.0 - Unauthenticated File Upload
Plugin is still affected and has been closed...
Magic Fields <= 1.7.1 - Authenticated Cross-Site Scripting (XSS)
The magic-fields WordPress plugin was affected by an Authenticated Cross-Site Scripting XSS security vulnerability...
rockhoist-badges 1.2.2 - Authenticated Stored Cross-Site Scripting (XSS)
The rockhoist-badges WordPress plugin was affected by an Authenticated Stored Cross-Site Scripting XSS security vulnerability...
WP Mail < 1.2 - XSS
The WP Mail WordPress plugin was affected by a XSS security vulnerability...
Simplified Content <= 1.0.0 - XSS
The Simplified Content WordPress plugin was affected by a XSS security vulnerability...
Google Document Embedder < 2.6.1 - XSS
The Google Doc Embedder WordPress plugin was affected by a XSS security vulnerability...
CampTix Event Ticketing <= 1.4.2 - CSV Injection and XSS
The CampTix Event Ticketing WordPress plugin was affected by a CSV Injection and XSS security vulnerability...
Adblock Blocker 0.0.1 - Arbitrary File Upload
The addblockblocker WordPress plugin was affected by an Arbitrary File Upload security vulnerability...
WP Google Map Plugin < 3.1.2 - XSS
The WP Google Map Plugin WordPress plugin was affected by a XSS security vulnerability...
WordPress 4.5.2 - Password Change via Stolen Cookie
...
Search Everything < 8.1.6 - SQL Injection
The Search Everything WordPress plugin was affected by a SQL Injection security vulnerability...
Jetpack 2.0-4.0.2 - Shortcode Stored Cross-Site Scripting (XSS)
The Jetpack – WP Security, Backup, Speed, & Growth WordPress plugin was affected by a Shortcode Stored Cross-Site Scripting XSS security vulnerability...
brafton WordPress Plugin <=3.4.7 - Reflected XSS
Title -brafton WordPress Plugin XSS Exploit Title : Vulnerabilitie XSS in brafton WordPress Plugin Date: Fri May 20 2016 Reported Date : Fri May 20 2016 Vendor Homepage: http://www.brafton.com/support/wordpress/ Version: v3.3.10 – January2016 Software Link:...
Tera Charts 1.0 - Unauthenticated Cross-Site Scripting (XSS)
The tera-charts WordPress plugin was affected by an Unauthenticated Cross-Site Scripting XSS security vulnerability. PoC http://www.example.com/tera-charts/charts/treemap.php?fn=";alert1;...
Ghost Plugin <= 0.5.5 - Unrestricted Export Download
The Ghost WordPress plugin was affected by an Unrestricted Export Download security vulnerability...
Sermon Browser < 0.45.16 - Multiple XSS
The Sermon Browser WordPress plugin was affected by a Multiple XSS security vulnerability...
Tevolution <= 2.2.7 - Unrestricted File Upload
Files 'single-upload.php' and 'singleupload.php' affected...
Hero Maps Pro <= 2.1.0 - Unauthenticated Reflected Cross-Site Scripting (XSS)
The hero-maps-pro WordPress plugin was affected by an Unauthenticated Reflected Cross-Site Scripting XSS security vulnerability. PoC http://www.example.com/wp-content/plugins/hero-maps-pro/views/dashboard/index.php?v=""...
anti-plagiarism <= 3.60 - Unauthenticated Reflected Cross-Site Scripting (XSS)
The anti-plagiarism WordPress plugin was affected by an Unauthenticated Reflected Cross-Site Scripting XSS security vulnerability. PoC http://www.example.com/wp-content/plugins/anti-plagiarism/js.php?m=""...
Ocim MP3 Plugin - Unauthenticated Reflected Cross-Site Scripting (XSS)
Credits to : Soufiane Boussali PoC http://www.example.com/wp-content/plugins/ocim-mp3/source/pages.php?id=XSSPayload...
Users Ultra Membership Plugin <= 1.5.62 - Authenticated Stored Cross-Site Scripting (XSS) & CSRF
Both pname and pdesc are vulnerable. No nonce on form so also vulnerable to CSRF. Original researcher's PoC does not work as all parameters are needed to be submitted not just the pname parameter...
Users Ultra Membership Plugin <= 1.5.63 - Authenticated Blind SQL Injection
The Users Ultra Membership, Users Community and Member Profiles With PayPal Integration Plugin WordPress plugin was affected by an Authenticated Blind SQL Injection security vulnerability...
Users Ultra Membership Plugin <= 1.5.58 - Unrestricted File Upload
The Users Ultra Membership, Users Community and Member Profiles With PayPal Integration Plugin WordPress plugin was affected by an Unrestricted File Upload security vulnerability...
wp-championship <= 5.8 - Authenticated Blind SQL Injection
The wp-championship WordPress plugin was affected by an Authenticated Blind SQL Injection security vulnerability. PoC $ sqlmap -u 'http://www.example.com/wp-admin/wp-championship/csadminusers.php=' --data="isadmin=1" --cookie=AUTHCOOKIEHERE --level=5 --risk=3...
Appointment Booking Calendar < 1.1.8 - Multiple Reflected Cross-Site Scripting (XSS) and SQL Injection
The Appointment Booking Calendar WordPress plugin was affected by a Multiple Reflected Cross-Site Scripting XSS and SQL Injection security vulnerability...
MDC Private Message <= 1.0.0 - Authenticated Stored Cross-Site Scripting (XSS)
The mdc-private-message WordPress plugin was affected by an Authenticated Stored Cross-Site Scripting XSS security vulnerability...