wordpress file upload project wordpress file upload vulnerabilities and exploits

(subscribe to this query)

Cross-site request forgery (CSRF) vulnerability in the WordPress File Upload plugin (wp-file-upload) prior to 2.4.2 for WordPress allows remote malicious users to hijack the authentication of administrators for requests that change plugin settings via unspecified vectors. NOTE: s...

Wordpress File Upload Project Wordpress File Upload

Unrestricted file upload vulnerability in server/php/UploadHandler.php in the jQuery File Upload Plugin 6.4.4 for jQuery, as used in the Creative Solutions Creative Contact Form (formerly Sexy Contact Form) prior to 1.0.0 for WordPress and prior to 2.0.1 for Joomla!, allows remot...

Jquery File Upload Project Jquery File Upload 6.4.4 Creative-solutions Creative Contact Form

2 EDB exploits1 Github repository

Cross-site scripting (XSS) vulnerability in swfupload.swf in SWFUpload 2.2.0.1 and previous versions, as used in WordPress prior to 3.3.2, TinyMCE Image Manager 1.1, and other products, allows remote malicious users to inject arbitrary web script or HTML via the movieName paramet...

1 EDB exploit2 Github repositories1 Article

The N5 Upload Form WordPress plugin up to and including 1.0 suffers from an arbitrary file upload issue in page where a Form from the plugin is embed, as any file can be uploaded. The uploaded filename might be hard to guess as it's generated with md5(uniqid(rand())), howeve...

N5 Upload Form Project N5 Upload Form

Unrestricted file upload vulnerability in the Gravity Upload Ajax plugin 1.1 and previous versions for WordPress allows remote malicious users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file under wp-c...

Ajax Upload For Gravity Forms Project Ajax Upload For Gravity Forms

The Images Optimize and Upload CF7 WordPress plugin up to and including 2.1.4 does not validate the file to be deleted via an AJAX action available to unauthenticated users, which could allow them to delete arbitrary files on the server via path traversal attack.

Images Optimize And Upload Cf7 Project Images Optimize And Upload Cf7

The WordPress Popular Posts WordPress plugin is vulnerable to arbitrary file uploads due to insufficient input file type validation found in the ~/src/Image.php file which makes it possible for attackers with contributor level access and above to upload malicious files that can b...

Wordpress Popular Posts Project Wordpress Popular Posts

The Infusionsoft Gravity Forms plugin 1.5.3 up to and including 1.5.10 for WordPress does not properly restrict access, which allows remote malicious users to upload arbitrary files and execute arbitrary PHP code via a request to utilities/code_generator.php.

Infusionsoft Gravity Forms Project Infusionsoft Gravity Forms 1.5.9.1 Infusionsoft Gravity Forms Project Infusionsoft Gravity Forms 1.5.3 Infusionsoft Gravity Forms Project Infusionsoft Gravity Forms 1.5.7 Infusionsoft Gravity Forms Project Infusionsoft Gravity Forms 1.5.7.2 Infusionsoft Gravity Forms Project Infusionsoft Gravity Forms 1.5.9 Infusionsoft Gravity Forms Project Infusionsoft Gravity Forms 1.5.9.4 Infusionsoft Gravity Forms Project Infusionsoft Gravity Forms 1.5.4.2 Infusionsoft Gravity Forms Project Infusionsoft Gravity Forms 1.5.6 Infusionsoft Gravity Forms Project Infusionsoft Gravity Forms 1.5.7.1 Infusionsoft Gravity Forms Project Infusionsoft Gravity Forms 1.5.8 Infusionsoft Gravity Forms Project Infusionsoft Gravity Forms 1.5.4.1 Infusionsoft Gravity Forms Project Infusionsoft Gravity Forms 1.5.5 Infusionsoft Gravity Forms Project Infusionsoft Gravity Forms 1.5.9.3 Infusionsoft Gravity Forms Project Infusionsoft Gravity Forms 1.5.8.1 Infusionsoft Gravity Forms Project Infusionsoft Gravity Forms 1.5.10 Infusionsoft Gravity Forms Project Infusionsoft Gravity Forms 1.5.9.5 Infusionsoft Gravity Forms Project Infusionsoft Gravity Forms 1.5.4 Infusionsoft Gravity Forms Project Infusionsoft Gravity Forms 1.5.9.2

1 EDB exploit

Vulnerability in wordpress plugin webapp-builder v2.0, The plugin includes unlicensed vulnerable CMS software from http://www.invedion.com/

Webapp-builder Project Webapp-builder 2.0

1 EDB exploit

Remote file upload vulnerability in Wordpress Plugin Mobile App Native 3.0.

Zen Mobile App Native Project Zen Mobile App Native

1 EDB exploit

1 2 3 4 5 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook