Lucene search
+L
WpvulndbMost viewed

14629 matches found

WPVulnDB
WPVulnDB
•added 2023/11/13 12:00 a.m.•22 views

Autolinks Manager < 1.10.05 - CSRF

Description The plugin does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks...

8.8CVSS7.1AI score0.00261EPSS
SaveExploits0Affected Software1
WPVulnDB
WPVulnDB
•added 2023/11/08 12:00 a.m.•22 views

IdeaPush < 8.53 - Admin+ Stored XSS

Description The plugin does not validate and escape some parameters, which could allow users with the admin role and above to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

4.8CVSS5.6AI score0.00397EPSS
SaveExploits0Affected Software1
WPVulnDB
WPVulnDB
•added 2023/11/07 12:00 a.m.•22 views

wpDiscuz < 7.6.12 - Missing Authorization in AJAX Actions

Description The plugin is vulnerable to unauthorized use of functionality due to a missing capability check on functions corresponding to AJAX actions in versions up to, and including, 7.6.3. This makes it possible for authenticated attackers, with subscriber-level access and above, to view user...

6.1AI score0.00408EPSS
SaveExploits0Affected Software1
WPVulnDB
WPVulnDB
•added 2023/11/06 12:00 a.m.•22 views

kk Star Ratings < 5.4.6 - Rating Tampering via Race Condition

Description The plugin does not implement atomic operations, allowing one user vote multiple times on a poll due to a Race Condition. PoC 1- Install and activate kk Star Ratings. 2- Go to the page that displays the star rating. 3- Using Burp and the Turbo Intruder extension, intercept the rating...

5.9CVSS5.8AI score0.00414EPSS
SaveExploits5Affected Software1
WPVulnDB
WPVulnDB
•added 2023/11/03 12:00 a.m.•22 views

Medialist < 1.4.1 - Contributor+ Stored XSS

Description The plugin does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks PoC medialist style='"...

5.4CVSS5.4AI score0.00452EPSS
SaveExploits2References1Affected Software1
WPVulnDB
WPVulnDB
•added 2023/11/03 12:00 a.m.•22 views

Your Journey theme <= 1.9.8 - Reflected Cross-Site Scripting via Prototype Pollution

Description The plugin does not properly sanitize input and escape output, resulting in a vulnerability to Reflected Cross-Site Scripting via prototype pollution. This could lead to the injection of arbitrary web scripts in pages that execute when a user is tricked into performing an action like...

6.1CVSS6.3AI score0.00443EPSS
SaveExploits0References1
WPVulnDB
WPVulnDB
•added 2023/11/03 12:00 a.m.•22 views

Ultimate Addons for WPBakery Page Builder < 3.19.15 - Contributor+ Stored XSS

Description The plugin does not validate and escape some parameters, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

6.5CVSS5.7AI score0.0031EPSS
SaveExploits0References1Affected Software1
WPVulnDB
WPVulnDB
•added 2023/10/27 12:00 a.m.•22 views

Five Star Restaurant Menu and Food Ordering < 2.4.11 - Unauthenticated PHP Object Injection

Description The plugin unserializes user input via an AJAX action available to unauthenticated users, allowing them to perform PHP Object Injection when a suitable gadget is present on the blog. PoC Run the below command in the developer console of the web browser while being on the blog...

9.8CVSS6.8AI score0.01245EPSS
SaveExploits2Affected Software1
WPVulnDB
WPVulnDB
•added 2023/10/27 12:00 a.m.•22 views

Article Analytics <= 1.0 - Unauthenticated SQL injection

Description The plugin does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection vulnerability. PoC On a Wordpress blog using MySQL the following PoC allows to extract the hash of the...

9.8CVSS6.9AI score0.01012EPSS
SaveExploits2References1
WPVulnDB
WPVulnDB
•added 2023/10/26 12:00 a.m.•22 views

WP Hotel Booking < 2.0.9 - Contributor+ Arbitrary Post Deletion

Description The plugin does not have proper authorisation when deleting a package, allowing Contributor and above roles to delete posts that do no belong to them PoC Run the below command in the developer console of the web browser while being on the blog as a Contributor user. This will put the...

5.4CVSS6.3AI score0.0052EPSS
SaveExploits2Affected Software1
WPVulnDB
WPVulnDB
•added 2023/10/24 12:00 a.m.•22 views

AI ChatBot < 4.9.1 - Cross-Site Request Forgery (CSRF)

Description The plugin does not protect some of its actions against CSRF attacks, allowing an unauthenticated attacker to perform actions on their behalf by tricking a logged in user to submit a crafted request...

5.4CVSS6.3AI score0.00206EPSS
SaveExploits0References1Affected Software1
WPVulnDB
WPVulnDB
•added 2023/10/23 12:00 a.m.•22 views

Rocket Font <= 1.2.3 - Arbitrary Settings Update via CSRF

Description The plugin does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks...

8.8CVSS6.5AI score0.0021EPSS
SaveExploits0
WPVulnDB
WPVulnDB
•added 2023/10/20 12:00 a.m.•22 views

ChatBot < 4.9.1 - Unauthenticated Sensitive Data Disclosure

Description The plugin is vulnerable to Sensitive Information Exposure in versions up to, and including, 4.8.9 via the qcldwbchatbotcheckuser function...

5.3CVSS6.4AI score0.00767EPSS
SaveExploits1Affected Software1
WPVulnDB
WPVulnDB
•added 2023/10/20 12:00 a.m.•22 views

Bulk NoIndex & NoFollow Toolkit < 1.5 - Reflected XSS

Description The plugin does not sanitise and escape some parameters before outputting them back in the page, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

7.1CVSS6.1AI score0.00331EPSS
SaveExploits0Affected Software1
WPVulnDB
WPVulnDB
•added 2023/10/20 12:00 a.m.•22 views

Website Builder by SeedProd < 6.15.15.3 - Arbitrary Settings Update via CSRF

Description The plugin does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks...

4.3CVSS6.5AI score0.00278EPSS
SaveExploits0Affected Software1
WPVulnDB
WPVulnDB
•added 2023/10/20 12:00 a.m.•22 views

OPcache Dashboard <= 0.3.1 - Reflected XSS

Description The plugin does not sanitise and escape some parameters before outputting them back in the page, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

7.1CVSS5.7AI score0.00331EPSS
SaveExploits0
WPVulnDB
WPVulnDB
•added 2023/10/20 12:00 a.m.•22 views

Migration, Backup, Staging – WPvivid < 0.9.90 - Admin+ Stored XSS

Description The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

4.8CVSS5.4AI score0.00326EPSS
SaveExploits0Affected Software1
WPVulnDB
WPVulnDB
•added 2023/10/17 12:00 a.m.•22 views

simple-download-button-shortcode <= 1.1.1 - Sensitive Data Disclosure

Description A vulnerability classified as problematic has been found in simple-download-button-shortcode Plugin 1.0 on WordPress. Affected is an unknown function of the file simple-download-buttondl.php of the component Download Handler. The manipulation of the argument file leads to information...

7.5CVSS6.3AI score0.00578EPSS
SaveExploits0
WPVulnDB
WPVulnDB
•added 2023/10/16 12:00 a.m.•22 views

URL Shortify < 1.7.9.1 - Admin+ Stored XSS

Description The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup PoC Multiple parameters in the plugin'...

4.8CVSS4.9AI score0.00408EPSS
SaveExploits2Affected Software1
WPVulnDB
WPVulnDB
•added 2023/10/16 12:00 a.m.•22 views

Eupago Gateway For Woocommerce < 3.1.10 - CSRF

Description The plugin does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks...

8.8CVSS6.5AI score0.00254EPSS
SaveExploits0Affected Software1
WPVulnDB
WPVulnDB
•added 2023/10/12 12:00 a.m.•22 views

Use Memcached <= 1.0.5 - Settings Update via CSRF

Description The plugin does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

8.8CVSS6.4AI score0.00208EPSS
SaveExploits0
WPVulnDB
WPVulnDB
•added 2023/10/10 12:00 a.m.•22 views

AWP Classifieds < 4.3.1 - Categories Mgt via CSRF

Description The plugin does not have CSRF checks when managing categories such as deleting, updating etc, which could allow attackers to make logged in admins perform such actions via CSRF attacks...

8.8CVSS6.5AI score0.00246EPSS
SaveExploits0Affected Software1
WPVulnDB
WPVulnDB
•added 2023/10/10 12:00 a.m.•22 views

SendPress Newsletters <= 1.23.11.6 - CSRF

Description The plugin does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks...

8.8CVSS6.5AI score0.00211EPSS
SaveExploits0
WPVulnDB
WPVulnDB
•added 2023/10/10 12:00 a.m.•22 views

Remove/hide Author, Date, Category Like Entry-Meta <= 2.1 - Settings Update via CSRF

Description The plugin does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

8.8CVSS6.4AI score0.00253EPSS
SaveExploits0
WPVulnDB
WPVulnDB
•added 2023/10/09 12:00 a.m.•22 views

EventPrime < 3.2.0 - Booking Creation via CSRF

Description The plugin does not have CSRF checks when creating bookings, which could allow attackers to make logged in users create unwanted bookings via CSRF attacks. PoC Create an Event, noting its ID. Add a ticket type to the Event the details don't matter. As a logged-in user, visit a page wi...

4.3CVSS4.6AI score0.00231EPSS
SaveExploits2Affected Software1
WPVulnDB
WPVulnDB
•added 2023/10/09 12:00 a.m.•22 views

E2Pdf < 1.20.20 - Admin+ Stored Cross-Site Scriping

Description The plugin does not sanitize and escape some of its settings, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed PoC 1 Create a new template on...

4.8CVSS4.8AI score0.00402EPSS
SaveExploits2Affected Software1
WPVulnDB
WPVulnDB
•added 2023/10/09 12:00 a.m.•22 views

Photos and Files Contest Gallery – Contact Form < 21.2.8.1 - Unauthenticated Stored XSS via HTTP Headers

Description The plugin does not sanitise and escape some parameters, which could allow unauthenticated users to perform Cross-Site Scripting attacks via certain headers. PoC 1. Use a proxy such as BurpSuite to add the following header to all requests: X-Forwarded-For: 11.11.11.11 2. Create a...

6.1CVSS6.1AI score0.00501EPSS
SaveExploits2References1Affected Software1
WPVulnDB
WPVulnDB
•added 2023/10/09 12:00 a.m.•22 views

Fattura24 < 6.2.8 - Reflected Cross-Site Scripting

Description The plugin does not sanitize or escape the 'id' parameter before outputting it back in the page, leading to a reflected Cross-Site Scripting vulnerability. PoC wp-admin/options-general.php?page=fatt-24-tax=12...

6.1CVSS6.1AI score0.00396EPSS
SaveExploits2Affected Software1
WPVulnDB
WPVulnDB
•added 2023/10/02 12:00 a.m.•22 views

Rescue Shortcodes <= 2.5 - Contributor+ Stored XSS

Description The plugin does not validate and escape some parameters, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

6.5CVSS5.7AI score0.00358EPSS
SaveExploits0
WPVulnDB
WPVulnDB
•added 2023/10/02 12:00 a.m.•22 views

Blocks <= 1.6.42 - Admin+ Stored XSS

Description The plugin does not validate and escape some parameters, which could allow users with the admin role and above to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

5.9CVSS4.8AI score0.00336EPSS
SaveExploits0
WPVulnDB
WPVulnDB
•added 2023/09/27 12:00 a.m.•22 views

GD Security Headers < 1.7 - Reflected XSS

Description The plugin does not sanitise and escape some parameters before outputting them back in the page, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

7.1CVSS5.7AI score0.00382EPSS
SaveExploits0References1Affected Software1
WPVulnDB
WPVulnDB
•added 2023/09/25 12:00 a.m.•22 views

Bookly < 22.4 - Admin+ SQLi

Description The plugin does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admin PoC Go to Bookly Settings Logs Do a search and intercept the request The parameter columns%5B0%5D%5Bdata%5D wit...

7.2CVSS7.2AI score0.00717EPSS
SaveExploits2Affected Software1
WPVulnDB
WPVulnDB
•added 2023/09/25 12:00 a.m.•22 views

User Activity Log Pro < 2.3.4 - Unauthenticated Stored Cross-Site Scripting via User Agent

Description The plugin does not properly escape recorded User-Agents in the user activity logs dashboard, which may allow visitors to conduct Stored Cross-Site Scripting attacks. PoC 1 Make sure the plugin's Enable User Agent For Log setting is set at /wp-admin/admin.php?page=ualpsettings 2 If...

5.4CVSS5.4AI score0.00394EPSS
SaveExploits2Affected Software1
WPVulnDB
WPVulnDB
•added 2023/09/19 12:00 a.m.•22 views

Weaver Xtreme Theme Support < 6.3.1 - Admin+ PHP Object Injection

Description The plugin unserialises the content of an imported file, which could lead to PHP object injections issues when a high privilege user import a malicious file and a suitable gadget chain is present on the blog. PoC To simulate a gadget chain, put the following code in a plugin: class Te...

7.2CVSS7.1AI score0.00976EPSS
SaveExploits2Affected Software1
WPVulnDB
WPVulnDB
•added 2023/09/19 12:00 a.m.•22 views

Form-Maker < 1.15.20 - Unauthenticated Arbitrary File Upload

Description The plugin does not validate signatures when creating them on the server from user input, allowing unauthenticated users to create arbitrary files and lead to RCE PoC On a page where there is a form with a Signature field, run the following code in the web developer console while...

9.8CVSS7.4AI score0.03283EPSS
SaveExploits3Affected Software1
WPVulnDB
WPVulnDB
•added 2023/09/14 12:00 a.m.•22 views

Booster for WooCommerce < 7.1.1 - Subscriber+ Sensitive Information Disclosure

Description The plugin is vulnerable to Information Disclosure via the 'wcjwpoption' shortcode in versions up to, and including, 7.1.0 due to insufficient controls on the information retrievable via the shortcode. This makes it possible for authenticated attackers, with subscriber-level...

4.3CVSS5.8AI score0.00585EPSS
SaveExploits1Affected Software1
WPVulnDB
WPVulnDB
•added 2023/09/07 12:00 a.m.•22 views

Elastic Email Sender < 1.2.7 - Admin+ Stored XSS

Description The plugin does not validate and escape some parameters, which could allow users with the admin role and above to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

5.9CVSS5.6AI score0.00369EPSS
SaveExploits0Affected Software1
WPVulnDB
WPVulnDB
•added 2023/09/01 12:00 a.m.•22 views

Activity Log < 2.8.8 - IP Spoofing

Description This plugin retrieves client IP addresses from potentially untrusted headers, allowing an attacker to manipulate its value. This may be used to hide the source of malicious traffic. PoC Run the following code in the web browser and note on the backend that the IP address has been fake...

5.3CVSS5.4AI score0.00713EPSS
SaveExploits2Affected Software1
WPVulnDB
WPVulnDB
•added 2023/08/31 12:00 a.m.•22 views

Multiple Plugins from ServMask - Unauthenticated Access Token Update

Description The plugins do not have authorisation in the init function hooked to the admininit action, allowing unauthenticated attackers to update the access token PoC With the All-in-One WP Migration Box Extension installed, open the below URL as unauthenticated:...

6.3AI score0.10983EPSS
SaveExploits1Affected Software1
WPVulnDB
WPVulnDB
•added 2023/08/30 12:00 a.m.•22 views

Slimstat Analytics < 5.0.10 - Contributor+ Stored XSS

Description The plugin does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

6.4CVSS5.6AI score0.0067EPSS
SaveExploits2Affected Software1
WPVulnDB
WPVulnDB
•added 2023/07/28 12:00 a.m.•22 views

Multiple Plugins from Inisev - Plugin Installation via CSRF

Description Multiple plugins from the Inisev vendor are lacking CSRF check in the handleinstallation function hooked to the inisevinstallation AJAX action, allowing unauthenticated attackers to make logged in admins install plugins from Inisev on the blog via a CSRF attack...

4.3CVSS4.9AI score0.00611EPSS
SaveExploits1Affected Software1
WPVulnDB
WPVulnDB
•added 2023/07/25 12:00 a.m.•22 views

Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting

Description The Freemius SDK for WordPress does not adequately sanitize inputs or escape outputs, leading to Reflected Cross-Site Scripting. This directly affects over 1000 plugins and themes that use this SDK...

6.3AI score0.00272EPSS
SaveExploits0Affected Software1
WPVulnDB
WPVulnDB
•added 2023/07/24 12:00 a.m.•22 views

Contact Form Builder by Bit Form < 2.2.0 - Admin+ Stored XSS

Description The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup PoC 1. Create a Blank form or select...

4.8CVSS4.9AI score0.00442EPSS
SaveExploits2Affected Software1
WPVulnDB
WPVulnDB
•added 2023/07/18 12:00 a.m.•22 views

ProfileGrid < 5.5.3 - Group Owner+ Unauthorized Data Modification

Description The plugin does not adequately check capabilities on the 'editgroup' handler, enabling authenticated users with group ownership to improperly update group options, including the 'associaterole' parameter, which sets the member's role...

8.8CVSS6.8AI score0.00868EPSS
SaveExploits0References1Affected Software1
WPVulnDB
WPVulnDB
•added 2023/07/18 12:00 a.m.•22 views

Royal Elementor Addons < 1.3.71 - Unauthenticated API Key Disclosure

Description The plugin discloses the MailChimp API key in pages with the MailChimp block, allowing unauthenticated users to obtain such key...

5.3CVSS6.3AI score0.00574EPSS
SaveExploits0Affected Software1
WPVulnDB
WPVulnDB
•added 2023/07/17 12:00 a.m.•22 views

MultiParcels Shipping For WooCommerce < 1.14.14 - Subscriber+ Arbitrary Shipment Deletion

Description The plugin does not have authorisation when deleting shipment, allowing any authenticated users, such as subscriber to delete arbitrary shipment PoC Login as a subscriber an open https://example.com/wp-admin/admin-post.php?action=multiparcelsdeleteshipping=1 to delete the shipment wit...

8.1CVSS8AI score0.00745EPSS
SaveExploits2Affected Software1
WPVulnDB
WPVulnDB
•added 2023/07/17 12:00 a.m.•22 views

WP PDF Generator < 1.2.3 - Cross-Site Request Forgery

Description Cross-Site Request Forgery CSRF vulnerability in wpexperts.Io WP PDF Generator plugin = 1.2.2 versions...

8.8CVSS8.9AI score0.00248EPSS
SaveExploits0Affected Software1
WPVulnDB
WPVulnDB
•added 2023/07/17 12:00 a.m.•22 views

WP Shopping Pages <= 1.14 - Stored XSS via CSRF

Description The plugin does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack. PoC Make a logged in admin access a page with the following code:...

6.8CVSS6.6AI score0.00396EPSS
SaveExploits2
WPVulnDB
WPVulnDB
•added 2023/07/11 12:00 a.m.•22 views

Shortcode IMDB <= 6.0.8 - Cross-Site Request Forgery

The plugin does not properly implement anti-CSRF mechanisms, making it vulnerable to potential CSRF attacks...

8.8CVSS6.8AI score0.00256EPSS
SaveExploits0References1Affected Software1
WPVulnDB
WPVulnDB
•added 2023/07/10 12:00 a.m.•22 views

Forminator < 1.24.4 - Reflected XSS

The plugin does not properly escape values that are being reflected inside form fields that use pre-populated query parameters, which could lead to reflected XSS attacks. PoC 1. Create a "Contact Us" form from the plugin presets 2. Click on the Message field, go to the "Settings" tab and choose a...

6.4AI score0.04087EPSS
SaveExploits2Affected Software1
Total number of security vulnerabilities5000