14623 matches found
Broken Link Checker <= 1.10.8 - Unauthenticated Stored XSS
Persistent Cross-Site Scripting XSS in wordpress-admin-panel enabled by not proper sanitised HTTP headers...
WordPress Landing Pages <= 1.8.7 - Unspecified Cross-Site Scripting (XSS)
The WordPress Landing Pages WordPress plugin was affected by an Unspecified Cross-Site Scripting XSS security vulnerability...
Erident Custom Login & Dashboard 3.4-3.4.1 - Stored Cross-Site Scripting (XSS)
The Erident Custom Login and Dashboard plugin exposes a call to the updateoption method, when a specific POST field is posted to the plugins setting screen. No CSRF token is used, and as such if an Administrative user can be tricked into visiting a site with a malicious form, it is possible to...
WP ViperGB < 1.3.16 - XSS
The WP-ViperGB WordPress plugin was affected by a XSS security vulnerability...
Related Posts < 1.8.2 - XSS
The related-posts WordPress plugin was affected by a XSS security vulnerability...
Content Slide <= 1.4.2 - CSRF & Stored XSS
The content-slide WordPress plugin was affected by a CSRF & Stored XSS security vulnerability...
Contact Form Plugin < 3.96 - XSS
The Contact Form by BestWebSoft WordPress plugin was affected by a XSS security vulnerability...
Facebook (spider-facebook) <= 1.0.10 - Cross-Site Scripting (XSS)
The WDSocialWidgets WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...
EasyCart <= 3.0.15 - Unrestricted File Upload
In versions = 3.0.8 this can be exploited by authenticating as any WordPress user, and in versions 3.0.9 - 3.0.15 can be exploited by passing a valid password hash being used by any admin in the EasyCart user system...
Pie Register <= 2.0.13 - Privilege escalation
The Pie Register – User Registration Forms. Invitation based registrations, Custom Login, Payments WordPress plugin was affected by a Privilege escalation security vulnerability...
O2tweet <= 0.0.4 - Multiple CSRF
Plugin is still affected and has been closed...
DukaPress <= 2.5.3 - Unauthenticated Path Traversal
The DukaPress WordPress plugin was affected by an Unauthenticated Path Traversal security vulnerability...
WP Support Plus Responsive Ticket System < 4.2 - Multiple Issues
The WP Support Plus Responsive Ticket System WordPress plugin was affected by a Multiple Issues security vulnerability...
BulletProof Security <= .51 - Multiple Vulnerabilities (XSS & SSRF)
The BulletProof Security WordPress plugin was affected by a Multiple Vulnerabilities XSS & SSRF security vulnerability...
Advanced Access Manager 2.8.2 - Admin User File Read/Write
The Advanced Access Manager WordPress plugin was affected by an Admin User File Read/Write security vulnerability...
SI CAPTCHA 2.7.4 - Cross-Site Scripting (XSS)
The si-captcha-for-wordpress WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...
Quartz Plugin 1.01.1 - SQL Injection
The quartz WordPress plugin was affected by a SQL Injection security vulnerability...
DZS Video Gallery Plugin - RCE & More
The dzs-videogallery WordPress plugin was affected by a RCE & More security vulnerability...
All Video Gallery 1.2 - SQL Injection
The all-video-gallery WordPress plugin was affected by a SQL Injection security vulnerability...
I Recommend This < 3.7.3 - SQL Injection
The I Recommend This WordPress plugin was affected by a SQL Injection security vulnerability...
Wordfence 5.2.4 - IPTraf.php URI Request Stored XSS
The Wordfence Security – Firewall & Malware Scan WordPress plugin was affected by an IPTraf.php URI Request Stored XSS security vulnerability...
Login Widget With Shortcode 3.1.1 - CSRF/XSS
The Login Widget With Shortcode WordPress plugin was affected by a CSRF/XSS security vulnerability...
Compfight < 1.5 Cross-Site Scripting (XSS)
The compfight WordPress plugin was affected by security vulnerability...
Last.fm Rotation 1.0 - lastfm-proxy.php snode Parameter Remote Path Traversal File Access
The lastfm-rotation WordPress plugin was affected by a lastfm-proxy.php snode Parameter Remote Path Traversal File Access security vulnerability...
Improved User Search in Backend < 1.2.6 - CSRF & XSS
The Improved user search in backend WordPress plugin was affected by a CSRF & XSS security vulnerability...
All Video Gallery 1.1 - config.php Multiple Parameter SQL Injection
The all-video-gallery WordPress plugin was affected by a config.php Multiple Parameter SQL Injection security vulnerability...
WP-Ban < 1.64 BlackList Bypass
The WP-Ban WordPress plugin was affected by security vulnerability...
WordPress 2.0.3 - 3.9.1 (except 3.7.4 / 3.8.4) CSRF Token Brute Forcing
...
Toolbox 1.4 - flyer.php mls Parameter SQL Injection
The toolbox WordPress theme was affected by a flyer.php mls Parameter SQL Injection security vulnerability...
scarlet <= 1.1.3 - XSS in ZeroClipboard.swf
The scarlet WordPress theme was affected by a XSS in ZeroClipboard.swf security vulnerability...
wp-football 1.1 - Multiple Cross-Site Scripting (XSS)
The wp-football WordPress plugin was affected by a Multiple Cross-Site Scripting XSS security vulnerability...
Easy Banners 1.4 - Cross-Site Scripting (XSS)
The easy-banners WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...
Member Approval 131109 - wp-admin/options-general.php Option Manipulation CSRF
The member-approval WordPress plugin was affected by a wp-admin/options-general.php Option Manipulation CSRF security vulnerability...
Cross RSS 1.7 - proxy.php rss Parameter Local File Inclusion
The cross-rss WordPress plugin was affected by a proxy.php rss Parameter Local File Inclusion security vulnerability...
Quick Page Post Redirect 5.0.4 - redirect-updates.php quickppr_redirects Parameter Stored XSS
The Quick Page/Post Redirect Plugin WordPress plugin was affected by a redirect-updates.php quickpprredirects Parameter Stored XSS security vulnerability...
mTouch Quiz 3.0.6 - question.php quiz Parameter SQL Injection
The mTouch Quiz WordPress plugin was affected by a question.php quiz Parameter SQL Injection security vulnerability...
WPtouch 1.9.19.4 - Cross-Site Scripting (XSS)
The WPtouch WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...
April's Super Functions Pack 1.4.7 - readme.php page Parameter Reflected XSS
The aprils-super-functions-pack WordPress plugin was affected by a readme.php page Parameter Reflected XSS security vulnerability...
AskApache Firefox Adsense 3.0 - Unspecified CSRF
The askapache-firefox-adsense WordPress plugin was affected by an Unspecified CSRF security vulnerability...
Redirection - view/admin/log_item.php Non-existent Posts Referer HTTP Header XSS
The Redirection WordPress plugin was affected by a view/admin/logitem.php Non-existent Posts Referer HTTP Header XSS security vulnerability...
Connections <= 0.7.1.5 - Unspecified Security
The Connections Business Directory WordPress plugin was affected by an Unspecified Security security vulnerability...
Comment Attachment 1.0 - XSS
The Comment Attachment WordPress plugin was affected by a XSS security vulnerability...
Bradesco - falha.php URI Reflected XSS
The bradesco-gateway WordPress plugin was affected by a falha.php URI Reflected XSS security vulnerability...
Yoast SEO < 1.4.7 - Reset Settings Feature Access Restriction Bypass
The Yoast SEO WordPress plugin was affected by a Reset Settings Feature Access Restriction Bypass security vulnerability...
qTranslate 2.5.34 - Setting Manipulation CSRF
The qtranslate WordPress plugin was affected by a Setting Manipulation CSRF security vulnerability...
AntiVirus 1.0 - PHP Backdoor Detection Bypass
The AntiVirus WordPress plugin was affected by a PHP Backdoor Detection Bypass security vulnerability...
Digg Digg 5.3.4 - Setting Manipulation CSRF
The digg-digg WordPress plugin was affected by a Setting Manipulation CSRF security vulnerability...
Related Posts 2.7.1 - Cross-Site Request Forgery
The related-posts WordPress plugin was affected by a Cross-Site Request Forgery security vulnerability...
open-flash-chart-core - ofc_upload_image.php Arbitrary File Upload
The open-flash-chart-core WordPress plugin was affected by an ofcuploadimage.php Arbitrary File Upload security vulnerability...
Social Media Widget 4.0 - social-widget.php MITM Weakness Arbitrary Code Injection
The Social Media Widget WordPress plugin was affected by a social-widget.php MITM Weakness Arbitrary Code Injection security vulnerability...