Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
anant shrivastava vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2014-4940
Multiple directory traversal vulnerabilities in Tera Charts (tera-charts) plugin 0.1 for WordPress allow remote malicious users to read arbitrary files via a .. (dot dot) in the fn parameter to (1) charts/treemap.php or (2) charts/zoomabletreemap.php.
Tera Charts Plugin Project Tera-charts 0.1
2 EDB exploits
NA
CVE-2014-4938
SQL injection vulnerability in the WP Rss Poster (wp-rss-poster) plugin 1.0.0 for WordPress allows remote malicious users to execute arbitrary SQL commands via the id parameter in the wrp-add-new page to wp-admin/admin.php.
Wp Rss Poster Plugin Project Wp-rss-poster 1.0.0
1 EDB exploit
NA
CVE-2014-5180
SQL injection vulnerability in the videos page in the HDW Player Plugin (hdw-player-video-player-video-gallery) 2.4.2 for WordPress allows remote authenticated administrators to execute arbitrary SQL commands via the id parameter in the edit action to wp-admin/admin.php.
Hdwplayer Hdw-player-video-player-video-gallery 2.4.2
1 EDB exploit
NA
CVE-2014-4937
Directory traversal vulnerability in includes/bookx_export.php BookX plugin 1.7 for WordPress allows remote malicious users to read arbitrary files via a .. (dot dot) in the file parameter.
Bookx Plugin Project Bookx 1.7
1 EDB exploit
NA
CVE-2014-4939
SQL injection vulnerability in the ENL Newsletter (enl-newsletter) plugin 1.0.1 for WordPress allows remote authenticated administrators to execute arbitrary SQL commands via the id parameter in the enl-add-new page to wp-admin/admin.php.
Enl Newsletter Plugin Project Enl-newsletter 1.0.1
1 EDB exploit
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
camera
bypass
CVE-2024-3592
CVE-2024-37383
CVE-2024-24919
CVE-2024-27822
CVE-2024-36788
CVE-2024-36789
man-in-the-middle
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started