Content Audit <= 1.9.1 - Cross-Site Scripting (XSS) & CSRF

The Content Audit WordPress plugin was affected by a Cross-Site Scripting XSS & CSRF security vulnerability...

WordPress 2.3.0-4.7.4 - Authenticated SQL injection

Description Due bad solution of the database abstraction library WordPress exposes itself towards SQL Injection and validation bypass. Beside WordPress itself this issue have huge impact towards complete WP ecosystem. Up to WordPress 4.8.1 is vulnerable, but this time attack is dependent from...

BackWPup <= 3.4.1 - Backup File Download

The BackWPup – WordPress Backup Plugin WordPress plugin was affected by a Backup File Download security vulnerability...

Participants Database <= 1.7.5.9 - Cross-Site Scripting

Cross site scripting XSS vulnerability in the Wordpress Participants Database plugin 1.7.59 allows attackers to inject arbitrary javascript via the Name parameter. PoC curl -k -F action=signup -F subsource=participants-database -F shortcodepage=/?pageid=1 -F thankspage=/?pageid=1 -F instanceindex...

WPJobBoard <= 4.5.1 - Multiple Cross-Site Scripting (XSS)

The wpjobboard WordPress plugin was affected by Multiple XSS issues...

Loginizer <= 1.3.5 - Cross-Site Request Forgery (CSRF)

Due to insufficient security checks an attacker can remove blacklisted and whitelisted IP:s from the plugin using CSRF...

Weblibrarian < 3.4.8.5 - XSS

The WebLibrarian WordPress plugin was affected by a XSS security vulnerability...

Spiffy Calendar <= 3.2.0 - Reflected Cross-Site Scripting (XSS)

The Spiffy Calendar WordPress plugin was affected by a Reflected Cross-Site Scripting XSS security vulnerability...

Surveys 1.01.8 - Authenticated SQL Injection

The surveys WordPress plugin was affected by an Authenticated SQL Injection security vulnerability...

Easy WP Smtp < 1.2.5 - XSS

The Easy WP SMTP WordPress plugin was affected by a XSS security vulnerability...

BuddyPress Docs <= 1.9.2 - Authenticated Lack of Authorisation

The BuddyPress Docs WordPress plugin was affected by an Authenticated Lack of Authorisation security vulnerability...

Ninja Forms < 3.0.31 - XSS

The Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress WordPress plugin was affected by a XSS security vulnerability...

WP SlimStat <= 3.5.5 - Overview URI Stored XSS

The Slimstat Analytics WordPress plugin was affected by an Overview URI Stored XSS security vulnerability...

WordPress 3.6.0-4.7.2 - Authenticated Cross-Site Scripting (XSS) via Media File Metadata

...

Adminer <= 1.4.5 - Security Bypass

The plugin is still affected and has been closed. PoC https://example.com/wp-content/plugins/adminer/inc/editor/index.php...

Gnucommerce < 1.4.2 - XSS

The GNUCommerce WordPress plugin was affected by a XSS security vulnerability...

Popup by Supsystic <= 1.7.8 - Cross-Site Request Forgery (CSRF)

The Popup by Supsystic WordPress plugin was affected by a Cross-Site Request Forgery CSRF security vulnerability...

Kama Click Counter < 3.5.0 - XSS

The Kama Click Counter WordPress plugin was affected by a XSS security vulnerability...

GD Rating System < 2.1 - XSS

The GD Rating System WordPress plugin was affected by a XSS security vulnerability...

Raygun4WP <= 1.8.0 - Unauthenticated Reflected XSS

The Raygun4WP WordPress plugin was affected by an Unauthenticated Reflected XSS security vulnerability. PoC http://www.example.com/wp-content/plugins/raygun4wp/sendtesterror.php?backurl="...

FormBuilder <= 1.0.7 - Cross-Site Request Forgery (CSRF)

The FormBuilder WordPress plugin was affected by a Cross-Site Request Forgery CSRF security vulnerability...

Vospari Forms <= 1.3 - Cross-Site Scripting (XSS)

The Vospari Forms WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...

Google Document Embedder < 2.6.1 - XSS

The Google Doc Embedder WordPress plugin was affected by a XSS security vulnerability...

CampTix Event Ticketing <= 1.4.2 - CSV Injection and XSS

The CampTix Event Ticketing WordPress plugin was affected by a CSV Injection and XSS security vulnerability...

Dwnldr 1.0 - Unauthenticated Stored Cross-Site Scripting (XSS)

User agent strings are logged when requesting downloads that are processed by dwnldr and displayed back to the admin with no encoding, allowing for scripts to be stored and executed. PoC curl -A "User-Agent: " -O http:///?attachmentid=...

Search Everything < 8.1.6 - SQL Injection

The Search Everything WordPress plugin was affected by a SQL Injection security vulnerability...

OneLogin SAML SSO <= 2.1.8 - Provisioned User Hardcoded Password

The OneLogin SAML SSO WordPress plugin was affected by a Provisioned User Hardcoded Password security vulnerability...

Sermon Browser < 0.45.16 - Multiple XSS

The Sermon Browser WordPress plugin was affected by a Multiple XSS security vulnerability...

Tidio Gallery <= 1.1 - Unauthenticated Reflected Cross-Site Scripting (XSS)

The tidio-gallery WordPress plugin was affected by a Unauthenticated Reflected Cross-Site Scripting XSS security vulnerability. PoC http://www.example.com/wp-content/plugins/tidio-gallery/popup-insert-help.php?galleryId=""...

New Year Firework <= 1.1.9 - Unauthenticated Reflected Cross-Site Scripting (XSS)

The new-year-firework WordPress plugin was affected by an Unauthenticated Reflected Cross-Site Scripting XSS security vulnerability. PoC http://www.example.com/wp-content/plugins/new-year-firework/firework/index.php?text=""...

Easy Contact Form Builder <= 1.0 - Unauthenticated Reflected Cross-Site Scripting (XSS)

The tidio-form WordPress plugin was affected by an Unauthenticated Reflected Cross-Site Scripting XSS security vulnerability. PoC http://www.example.com/wp-content/plugins/tidio-form/popup-insert-help.php?formId=""...

MiniMax <= 2.0.2 - Unauthenticated Reflected Cross-Site Scripting (XSS)

The page-layout-builder WordPress plugin was affected by an Unauthenticated Reflected Cross-Site Scripting XSS security vulnerability. PoC http://www.example.com/wp-content/plugins/page-layout-builder/includes/layout-settings.php?layoutsettingsid=""...

Anti-Malware Security & Brute-Force Firewall <= 4.15.42 - XSS & CSRF

The Anti-Malware Security and Brute-Force Firewall WordPress plugin was affected by a XSS & CSRF security vulnerability. PoC XSS vulnerability in https://wordpress.org/plugins/gotmls/ has been identified. While I scan a site with that plugin , i had a file '".png and it was skippped , but result...

IMPress Listings <= 2.0.1 - Unauthenticated Reflected Cross-Site Scripting (XSS)

The IMPress Listings WordPress plugin was affected by an Unauthenticated Reflected Cross-Site Scripting XSS security vulnerability. PoC...

Formidable Forms <= 1.07.11 - Authenticated Blind SQL Injection

The Formidable Form Builder – Contact Form, Survey & Quiz Forms Plugin for WordPress WordPress plugin was affected by an Authenticated Blind SQL Injection security vulnerability...

NextGEN Gallery < 2.1.15 - Unrestricted File Upload

The WordPress Gallery Plugin – NextGEN Gallery WordPress plugin was affected by an Unrestricted File Upload security vulnerability...

Websimon Tables <= 1.3.4 - Authenticated Reflected Cross-Site Scripting (XSS)

The websimon-tables WordPress plugin was affected by an Authenticated Reflected Cross-Site Scripting XSS security vulnerability...

WP-Stats-Dashboard <= 2.9.4 - Authenticated Blind SQL Injection

The wp-stats-dashboard WordPress plugin was affected by an Authenticated Blind SQL Injection security vulnerability...

Easy2Map <= 1.2.9 - Local File Inclusion

The Easy2Map WordPress plugin was affected by a Local File Inclusion security vulnerability...

mTheme Unus < 2.3 - Directory Traversal

The mTheme-Unus WordPress theme was affected by a Directory Traversal security vulnerability...

xPinner Lite <= 2.2 - Cross-Site Scripting (XSS) & CSRF

The xpinner-lite WordPress plugin was affected by a Cross-Site Scripting XSS & CSRF security vulnerability...

MyPixs <= 0.3 - Unauthenticated Local File Inclusion (LFI)

Plugin is still affected and has been closed. Typical local file inclusion vulnerability: from downloadpage.php: I've tried to get RCE but didn't have success reading from /proc/self/environ or /var/log/apache2/access.log include: Failed opening '/proc/self/environ' for inclusion...

Google Analyticator <= 6.4.9.4 - Multiple Cross-Site Scripting (XSS)

The Google Analyticator WordPress plugin was affected by a Multiple Cross-Site Scripting XSS security vulnerability...

Manual Image Crop <= 1.10 - Authenticated Reflected Cross-Site Scripting (XSS)

The Manual Image Crop WordPress plugin was affected by an Authenticated Reflected Cross-Site Scripting XSS security vulnerability...

Monetize <= 1.03 - Cross-Site Scripting (XSS) & CSRF

The monetize WordPress plugin was affected by a Cross-Site Scripting XSS & CSRF security vulnerability...

Altos Connect Widget <= 1.3.0 - Unauthenticated Cross-Site Scripting (XSS)

The altos-connect WordPress plugin was affected by an Unauthenticated Cross-Site Scripting XSS security vulnerability. PoC http://www.example.com/wp-content/plugins/altos-connect/jquery-validate/demo/demo/captcha/index.php/"...

FileDownload <= 1.4 - Multiple Issues

XSS, Blind SQL Injection and Open Proxy issues...

Sell Downloads < 1.0.8 - Insufficient Restrictions when Brute-Force Purchase IDs

The Sell Downloads WordPress plugin was affected by an Insufficient Restrictions when Brute-Force Purchase IDs security vulnerability...

Swim Team <= v1.44.10777 - Local File Inclusion

The code in ./wp-swimteam/include/user/download.php doesn't sanitize user input from downloading sensitive system files. PoC $ curl "http://www.vapidlabs.com/wp-content/plugins/wp-swimteam/include/user/download.php?file=/etc/passwd=/etc/passwd=text/html=1=/usr/share/wordpress"...

WordPress File Upload <= 2.7.6 - Multiple Vulnerabilities

The plugin allows upload of file extensions that may lead to code execution, such as php4 or php5. Additionally, it allows an admin user to rename files and thus change the extension of uploaded files, leading to code execution. There is no CSRF protection for this. The plugin also allows for the...