WordPress 5.0.0 – Image Remote Code Execution
The WordPress CMS version 5.0.0 suffers from a Image Remote Code Execution vulnerability via access with at least an Author account.
Tag: wordpress
WordPress Plugin Stripe Payments 2.0.39 – ‘AcceptStripePayments-settings[currency_code]’ Vulnerable to Stored XSS
The WordPress plugin Stripe Payments 2.0.39 suffers from a Stored Cross Site Scripting vulnerability(XSS). Currently their is not an updated version.
WordPress Plugin WP-Paginate 2.1.3 – ‘preset’ Vulnerable to Stored XSS
The WordPress plugin WP-Paginate 2.1.3 suffers from a Stored Cross Site Scripting vulnerability(XSS). Currently their is not an updated version.
WordPress Core 5.2.2 Suffers – ‘post previews’ XSS Cross Site Scripting Vulnerability
Currently WordPress Core Version 5.2.2 suffers from cross site scripting vulnerability located within “post previews”. Flaw is fixed by upgrading to WordPress version
WPvSCAN – Scan WordPress CMS and Plugin Version
WPvSCAN scans the version of CMS WordPress on the target website and compares it with the most recent version. After that, it also offers the option of listing all know exploits using SearchSploit tool by […]
WordPress Fancy Product Designer For WooCommerce 4.5.1 File Upload
WordPress Fancy Product Designer for WooCommerce plugin versions 4.5.1 and below suffer from an unauthenticated arbitrary file upload vulnerability.
WordPress Good LMS 2.1.4 SQL Injection
WordPress Good LMS plugin versions 2.1.4 and below suffer from a remote SQL injection vulnerability.
WordPress File Manager 6.8 Remote Code Execution
The WordPress File Manager (wp-file-manager) plugin versions 6.0 through 6.8 allows remote attackers to upload and execute arbitrary PHP code because it renames an unsafe example elFinder connector file to have the .php extension. This, […]
WordPress Simple File List 5.4 Shell Upload
WordPress Simple File List plugin version 5.4 suffers from a remote shell upload vulnerability.
